OpenAI has launched Patch the Planet, an initiative that links security researchers, open-source maintainers and incident responders to fix critical vulnerabilities increasingly found by AI agents. The stated goal is to turn findings into real protection before the flaws are exploited.
The first concrete case involves PHP, the language behind a large share of websites. For about two months OpenAI led a coalition of maintainers, researchers and security companies to prepare the response to two remote code execution bugs, fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. One was identified by the security firm Calif using GPT-5.6 Sol as part of the program. The second was found and reported independently by Wiz, a cloud security company, which used its own AI agent together with Gemini 4 Argon and GPT-5.6 Sol.
Hack the Planet Patch – Made in USA – 2.5" Hackers Patch – Cyberpunk ...
According to OpenAI, the PHP maintainers led the fixes, while partner companies contributed research, technical support and coordination to prepare protections before public disclosure. Wiz thanked, among others, Automattic, Akamai, AWS, Cloudflare, Fastly, Imperva, Microsoft and Vercel. The wider picture is already familiar to AlexTech readers: in September Google and Wiz launched Scan for Good to scan hospitals and transport systems, while Microsoft's July patch volume reached a record.
Timing remains the sticking point. Coordinated disclosure was scheduled for Thursday, but the flaws surfaced early and the controversy centred on how patches were handled, as the account of the PHP case documents. The episode shows how the speed of AI tools is putting pressure on traditional reporting and fixing processes.
Planet Earth Patch – threddies
A coordination model for open source
Patch the Planet sits within Daybreak, OpenAI's cybersecurity initiative, and takes shape as coordination infrastructure rather than a single tool. OpenAI's role, in its own words, was to contribute security expertise and model access in support of the maintainers' response, not to replace them.
No comments yet. Be the first!