DoubleChecks

What was claimed

OpenAI models helped discover critical security flaws in PHP (used by ~70% of websites), one of the most impactful vulnerabilities in recent memory; frontier AI found it ahead of attackers giving defenders time to prepare

Our verdict

Accurate

OpenAI reported that its models helped researchers uncover critical PHP security flaws. Independent reporting also describes AI-assisted discovery of the vulnerabilities.

Combined assessment16 sourcesChecked Oct 22, 2026

Why this verdict

  • The flaws were one of the most impactful vulnerabilities in recent memory.

    Misleading
    Two assessments reached this conclusion; one differed·Claude: Verified

  • Frontier AI found the vulnerabilities ahead of attackers, giving defenders time to prepare.

    Verified
    Two assessments reached this conclusion; one differed·Perplexity: Misleading

  • PHP is used by approximately 70% of websites.

    Verified
    All assessments reached this conclusion

  • OpenAI models helped discover critical security flaws in PHP.

    Verified
    All assessments reached this conclusion

Evidence reviewed

16 sources

Perplexity, Claude and ChatGPT sources are combined here.

w3techs.comw3techs.comw3techs.comcommunity.openai.comw3techs.comw3techs.compolitico.comapnews.comnytimes.comfortune.com

Individual assessments

Assessment summary

  • The main event is supported by OpenAI and independent reporting: OpenAI models helped uncover serious PHP vulnerabilities, and OpenAI said they appeared to be found before attackers.
  • However, the wording overstates certainty about impact and uses an approximate PHP usage figure that depends on the measurement method.w3techs.com w3techs.com w3techs.com

Claims reviewed

The flaws were one of the most impactful vulnerabilities in recent memory.

Misleading
This is an evaluative description attributed to OpenAI, not an independently established ranking. Reporting calls the issues highly significant, but the superlative cannot be objectively confirmed.w3techs.com

This claim may mislead readers without added context.

Frontier AI found the vulnerabilities ahead of attackers, giving defenders time to prepare.

Misleading
OpenAI stated that, to its knowledge, frontier AI found the vulnerabilities before attackers did. The qualification matters: the claim is not independently proven, and public disclosure still created concern that attackers could reverse-engineer the fixes.w3techs.com w3techs.com

This claim may mislead readers without added context.

PHP is used by approximately 70% of websites.

Verified
W3Techs reports PHP on about 69.3% of websites whose server-side programming language is known, making “approximately 70%” reasonable. This is not 70% of all websites without qualification.w3techs.com

Assessment summary

  • The statement is factually accurate across all major claims.
  • OpenAI models did help discover critical PHP security flaws, PHP is used by approximately 70% of websites, this is considered one of the most impactful vulnerabilities in recent memory, and frontier AI found it ahead of attackers, giving defenders time to prepare.
  • All these points are directly supported by official sources from OpenAI and recent reporting.

Claims reviewed

OpenAI models helped discover critical security flaws in PHP

Verified
Multiple sources confirm OpenAI models (specifically GPT-5.6 Sol) helped researchers discover critical PHP vulnerabilities as part of the Patch the Planet initiative axios.com community.openai.com the-decoder.com.

PHP is used by ~70% of websites

Verified
Current W3Techs data from October 2026 shows PHP is used by 69.3% of all websites whose server-side programming language is known, which aligns with the ~70% figure axios.com x.com.

This is one of the most impactful vulnerabilities in recent memory

Verified
OpenAI explicitly stated they consider this bug to be one of the most impactful vulnerabilities in recent memory due to its severity and PHP's widespread use community.openai.com x.com.

Assessment summary

  • Reporting that OpenAI models helped uncover critical PHP flaws is supported by multiple news and industry posts.
  • The statement that PHP powers roughly 70% of websites matches W3Techs and similar tracking sites.
  • The claim that frontier AI found the issue ahead of attackers and gave defenders time is reported by several sources, though "one of the most impactful vulnerabilities in recent memory" is a subjective characterization supported by contemporary coverage.

Claims reviewed

This was one of the most impactful vulnerabilities in recent memory.

Misleading
Contemporary reporting called the flaws highly consequential and widely impactful, but "one of the most impactful in recent memory" is subjective and not an objectively measurable ranking axios.com community.openai.com.

This claim may mislead readers without added context.

Frontier AI found it ahead of attackers, giving defenders time to prepare.

Verified
Multiple reports state AI-assisted research discovered the vulnerabilities before known exploitation, allowing coordinated disclosure and patching efforts that gave defenders a window to respond axios.com community.openai.com theatlantic.com.

PHP is used by ~70% of websites.

Verified
W3Techs and related web-technology trackers report PHP usage figures around 69–72% of sites where server-side language is known, which is commonly rounded to ~70% w3techs.com w3techs.com.

Check your own claim

Paste any statement, headline, or AI answer. Independent assessments check it and compare sources.

Share this result