We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent.
It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.
The PHP bugs patched this week were in PHP for over 10 years, back to 5.4
Wiz says that without AI, the exploit chains wouldn't have been practical
And the bug is in PHP itself, so even a Hello World PHP site can be exposed
Thoughts from a former PHP dev🧵
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
https://t.co/TW3jrSbB3f
It's already exploited in the wild (watchTowr honeypots)
Update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart Apache/FPM workers. On 7.4, 8.0 or 8.1 there are only minimal source backports or LTS vendor packages
Got an old PHP box you forgot about?
if this affects the default installation of PHP
We are fucked up
CVE-2026-109618
CVE-2026-109619
PHP RCEs with a CVSS score of 10.0 ☠️
https://t.co/kr47MzTvIj
@LouisLsvr@marclou Their audience is very different from indie hackers
They do make a really good point and explain why if you can do it yourself doesn't mean you should
@RizRizawan Well I tried replying 30+ replies per day a few months ago, and doing it consistently for 1 month, but it just took too many hours from the day for me
I don't want to spend all day on social media
Lets connect posts really work!
This post brought me ~80 followers, finally making it above 700 after being stuck around 650 for months
Let's see if I am getting out of X "view jail"
Not sure about the quality of followers though, hopefully they are real people 😅
Let's connect🫵
I'm an engineer with a family, 11+ years experience, and I ship various SaaS and AI products solo (soon apps too)
If you're a:
- solopreneur
- engineer who can't market
- dev who can't design
- NOT an indie hacker😅
Come say hi.