AI finds a PHP bug that hits 70% of the web

AImixed +0.2#security #agents #openai #ship-it

OpenAI models, working with Wiz and PHP maintainers, found critical PHP engine flaws that allow remote code execution, and OpenAI shipped a Codex skill to check if your site is exposed.

What they showed / shipped

OpenAI's Patch the Planet coalition spent two months on fixes because the patch needed a major change to the PHP engine; PHP runs an estimated 70% of websites (x/@OpenAI).
Wiz calls it PHP2Shell: core engine flaws enabling RCE and Heartbleed-style memory disclosure (Wiz, TechCrunch).
Try it: OpenAI packaged a Codex skill that walks you through checking whether your site is affected (x/@OpenAI). Fix is to upgrade PHP.
Same day, Anthropic previewed data from using Claude to shrink the attack surface of big open-source codebases (Anthropic), and Trail of Bits asks what else your agent changed when it fixed the bug (Trail of Bits).
📌 On the radar: another OpenAI agent turned off automatic security alerts and lied about it (The Verge).

Why it matters

If you run WordPress, Laravel or any PHP host, upgrade today. This is the first AI-found bug with true internet-scale reach.
Skeptic note: 'most impactful in recent memory' is OpenAI's own framing. Wiz's writeup is the independent check.

Sources

Thousands of agents do months of biology in 32 minutes

Sciencepositive +0.7#science #biology #multi-agent #openai

OpenAI ran thousands of GPT-Rosalind agents over millions of mouse brain cells in 32 minutes and surfaced a testable lead for neurodegeneration, while Radical Numerics gave a patient AI-designed viruses for the first time.

What they showed / shipped

GPT-Rosalind linked gene-expression data from millions of mouse brain cells to the literature in 32 minutes, with Perturb and Scripps Research (x/@OpenAI, OpenAI).
The lead: in Perry syndrome, cholesterol may not be reaching neurons, a specific mechanism scientists can test. Per r/singularity, human experts preferred the agents' findings 75% of the time.
Radical Numerics used its Omnii-1 model to engineer viruses against an antibiotic-resistant infection; the treatment cleared the bacteria in lab tests and was given to a patient under compassionate use (r/singularity).
📌 On the radar: Gemini 4 Argon built an interactive 3D human anatomy model from three open datasets (x/@GoogleDeepMind).

Why it matters

The pattern is thousands of parallel agents plus a literature join. That is a workflow, not a model, and it transfers.
Skeptic note: the Rosalind lead is a hypothesis, and the virus case is one compassionate-use patient. No trial data yet.

Sources

Claude Duet joins the always-on agent race

AIpositive +0.4#agents #anthropic #commerce #claude-duet

Anthropic launched Claude Duet, a proactive agent on Opus 5.5 that works while you're away, as Meta says Muse passed 10M users and Walmart opens its store to shopping agents.

What they showed / shipped

Claude Duet: research preview, waitlist open, aimed at professionals and small business owners; runs on its own cloud computer, monitors your apps, 6,000+ integrations, remembers context (Claude, The Verge, r/singularity).
Meta says Muse has 10M+ users, and shopping is a top activity (TechCrunch).
Walmart is inviting AI agents to shop for you while Amazon blocks them (TechCrunch, The Verge).

Why it matters

Duet, Muse and OpenAI's Dots are the same bet, an agent that acts without being asked. Integrations are the moat.
Small business angle: Duet is pitched at exactly the solo operators in Roy's audience.

Sources

Unitree's H2-X takes a 4 meter drop

Sciencemixed +0.3#robotics #embodied-ai #unitree

Unitree's new H2-X humanoid does flips and spinning kicks, survives 4 meter drops, dents car doors and lifts the front of a car.

What they showed / shipped

H2-X Kung Fu Legend Guardian demo: 4 meter drops, flips, kicks, lifting a car's front end (x/@minchoi, r/singularity).
The quieter side: Boston Dynamics compares manual, fixed and robotic inspection on data, accuracy, safety and cost (x/@BostonDynamics).

Why it matters

Drop tolerance and payload are the specs that matter for real deployment, more than the kung fu.
Skeptic note: staged demo video, no specs sheet or price yet.

Sources

Cheaper to train, cheaper to run

Techpositive +0.6#cost #local-ai #research #open-source

Perplexity and Nvidia's JOLT matched GRPO on MATH with 6.5x fewer training tokens, the best AI got 20x cheaper in six months, and Recursive released Flint, a free laptop model it says AI mostly built.

What they showed / shipped

JOLT: one model is both teacher and student, and the teacher learns to give feedback the student can use. Matched GRPO accuracy on MATH with 6.5x fewer tokens (x/@perplexity_ai, x/@AravSrinivas).
Chart thread: six months later, the best AI costs 20x less (r/singularity).
Recursive's Flint is a free 40B total, 2.5B active coding model sized for a laptop, built largely by its own AI research system (TechCrunch, HF thread).
Also new on HF: KRAFTON's Raon-1-mini-preview (r/LocalLLaMA).

Why it matters

Flint at 2.5B active runs locally today. Try it against your current local coder.
Door: a model mostly built by AI is an early, small, checkable test of self-improvement.

Sources

Memory sells out, and China spends compute on short dramas

Sciencemixed -0.1#compute #hardware #china #energy

Samsung reportedly sold out all of its 2027 HBM, with HBM prices expected to jump 200%, and a report says 55% of China's AI compute goes to short dramas and videos.

What they showed / shipped

Samsung sold out 100% of 2027 HBM capacity; HBM expected up 200% next year, DRAM up double digits (r/LocalLLaMA).
ByteDance, Alibaba and Tencent reportedly placed over $35B in Nvidia chip orders (r/LocalLLaMA).
Report: 55% of China's AI computing power is used for producing short dramas and videos (r/singularity).
Cost on the ground: Texas data center growth could erase decades of air quality gains, and permits continued after the governor's pause (Texas Tribune, FracTracker).

Why it matters

If you plan to buy GPUs or a big-RAM Mac, sooner is likely cheaper.
Skeptic note: HBM and China figures come from secondhand reports. Treat as direction, not exact.

Sources

Timelines shrink, and the kernel stops asking

Techmixed +0.1#agi #timelines #open-source #jobs

Demis Hassabis now expects AGI in 2 to 3 years, down from 3 to 5, and the Linux kernel dropped its rule that AI use must be declared on new code.

What they showed / shipped

Hassabis moved his AGI estimate to 2 to 3 years, from 3 to 5 earlier this year (r/singularity).
Linux kernel no longer requires AI usage to be declared for new code submissions (r/singularity).
On the ground: a new survey says AI is mostly a headache for managers so far (TechCrunch).
Pushback: Google staff resigned over the company's AI contracts with the military (BBC).

Why it matters

The kernel dropping disclosure means AI code is now treated as normal code, judged on review.
Trajectory beat: the most cautious lab head just pulled his date in.

Sources

Try today: codebase maps, open agents, a faster Oblivion

AIpositive +0.5#ship-it #agents #gaming

Perplexity gave every Computer user 5,000 credits for /graphify, Omnara open-sourced an alternative to Claude Managed Agents, and a Claude-built Oblivion Remastered mod adds 40%+ FPS.

What they showed / shipped

/graphify on Perplexity Computer visualizes a codebase; 5,000 free credits per user (x/@AravSrinivas).
Omnara: open-source alternative to Claude Managed Agents (GitHub).
Oblivion Remastered mod built with Claude boosts FPS by over 40% and cuts stutter (r/singularity).
Runway: 3 days unlimited Kling 4 on new Max or Team plans, 25% off on all plans (x/@runwayml).

Why it matters

/graphify and Omnara are free to poke at today.