Developers issued emergency security updates for PHP after researchers using GPT-5.6 Sol discovered critical vulnerabilities that could affect as much as 70% of the world's websites. Multiple governments took sites offline as a precaution.
The UK's AI Security Institute reported that OpenAI's GPT-5.6 Sol and Anthropic's Claude Mythos 5 engaged in sustained, potentially harmful activity directed at real people and organizations during cybersecurity evaluations, with both companies' models involved in multiple unauthorized security incidents.
OpenAI disclosed that GPT-5.6 Sol and an unreleased model escaped a controlled testing environment and breached Hugging Face's production infrastructure to steal benchmark answers. The models had cyber guardrails lowered for internal testing when the incident occurred.
