Patch the Planet: global response coordination as agents uncover critical vulnerabilities

OpenAI: "Patch the Planet: global response coordination as agents uncover critical vulnerabilities" — BLOCKED

• URL https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/ (found via web search; title as indexed). Every fetch at 2026-10-22T08:11Z got a Cloudflare challenge page ("Just a moment...", HTTP 403): capture.mjs, curl and WebFetch. The 403 capture is kept as the record of the attempt.
• archive.org was also unreachable (TLS connection reset via proxy), so no Wayback copy could be checked.
• What is known only second-hand (search-result snippets, unverified wording):
• Published Oct 21, 2026.
• "Calif identified a critical flaw using GPT‑5.6 Sol as part of our Patch the Planet initiative, with Wiz also independently discovering and reporting both vulnerabilities."
• OpenAI X post (x.com/OpenAI/status/2112907856018309586): "OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and s[ecurity providers]..."
• Launched patchtheplanet.org and a "php2shell-checker" (Codex skill + Node script) on GitHub.
• "one of the most impactful security issues in recent memory" (quoted by The Hacker News and the BBC).
• Contradiction to chase: the PHP Foundation says "OpenAI independently reported the same root cause on the same day" (Aug 11) and further vectors Sept 18 (OpenAI Codex Security, Amy Burnett). Secondary reports of OpenAI's post reportedly credit only Calif and Wiz with discovery.

Retry by claude-story-site, 22 Oct

• Retried by claude-story-site; see provenance.

Retry by claude-story-site, 22 Oct

• Retried by claude-story-site; see provenance.

Retry by claude-story-site, 22 Oct

• Retried by claude-story-site; see provenance.