// AI Briefing · October 22, 2026
AI Briefing
Today’s video is on its way
The stories are ready to read now. The video usually follows within the hour.
Rendering the short
Security firms Calif and Google's Wiz used GPT-5.6 Sol, Gemini 4 Argon and Wiz's own agent to find two critical PHP vulnerabilities, present in every version since PHP 5, that can expose a server's files or database. Startup Recursive released Flint under the Apache 2.0 license on Hugging Face. Several Google DeepMind staff have quit or are leaving over Google's classified Pentagon AI contract and its work for Israel, the BBC and The Intercept reported. Walmart launched Agent Gateway, an MCP server that lets approved AI agents such as Meta's Muse, ChatGPT and Gemini search inventory and buy for customers at Walmart and Sam's Club.
Top stories
- 01AI Finds Two Critical PHP Flaws That Date Back to 2004, and the NSA Tells Unpatched Sites to Go OfflineIndustry
- 02Recursive Releases Flint, an Open Coding Model for Laptops That It Says Was Largely Built by AIOpen Source
- 03Google DeepMind Researchers Resign in Protest Over Military AI ContractsIndustry
- 04Walmart Opens Its Store to AI Shopping Agents With Spending Limits, While Amazon Blocks ThemProduct
The stories
AI Finds Two Critical PHP Flaws That Date Back to 2004, and the NSA Tells Unpatched Sites to Go Offline
Security firms Calif and Google's Wiz used GPT-5.6 Sol, Gemini 4 Argon and Wiz's own agent to find two critical PHP vulnerabilities, present in every version since PHP 5, that can expose a server's files or database. PHP runs roughly 70% of websites, including WordPress, so emergency patches went out on October 21 and the NSA advised taking sites offline if they can't be patched right away. Defenders found the flaws before attackers did, but Wiz warns that AI also makes it much easier to adapt exploits to each PHP version and configuration.
Recursive Releases Flint, an Open Coding Model for Laptops That It Says Was Largely Built by AI
Startup Recursive released Flint under the Apache 2.0 license on Hugging Face. It is a mixture-of-experts coding model with 40B total parameters, about 2.5B active at a time, and it beats other sub-50B models on SWE-Bench Verified while running at about 131 tokens per second on a MacBook Pro. The company says its automated research system, the Eureka Machine, drove nearly every stage from architecture to low-bit training to custom kernels, and that a small team finished the model in under four months. It is a concrete example of AI-driven AI research producing a competitive model.
Google DeepMind Researchers Resign in Protest Over Military AI Contracts
Several Google DeepMind staff have quit or are leaving over Google's classified Pentagon AI contract and its work for Israel, the BBC and The Intercept reported. Research engineer Sofia Liguori and AI researcher Andreas Kirsch spoke out despite non-disparagement clauses, and Kirsch said Google has no real ability to control or veto how the Pentagon uses its AI. The departures echo the 2018 Project Maven protests and show internal pressure building as frontier labs move deeper into defense work.
Walmart Opens Its Store to AI Shopping Agents With Spending Limits, While Amazon Blocks Them
Walmart launched Agent Gateway, an MCP server that lets approved AI agents such as Meta's Muse, ChatGPT and Gemini search inventory and buy for customers at Walmart and Sam's Club. Customers can require approval for every purchase or set a spending limit, and each agent's orders show up in its own profile on the account. The move is the opposite of Amazon's decision to block outside agents, and it sets up a direct test of whether retailers do better by working with AI shopping agents or keeping them out.
Previous digests
Oct 21OpenAI posted a new misalignment report on October 20 describing two internal coding tasks...4 stories
Oct 20A Reuters exclusive reports that a Chinese-speaking hacker gave AI agents an instruction o...4 stories
Oct 19The AI coding tool OpenCode said attackers broke into a legacy system it was shutting down...4 stories
Oct 18OpenAI added four new cases of misaligned agent behavior to its public incident page, brin...4 stories
Oct 17Meta's updated commercial terms, which take effect October 30, let it use crawlers to coll...4 stories