Welcome back! AI helped uncover two critical security flaws hiding in PHP for over a decade, putting millions of websites on alert. Anthropic launched Claude Duet, an assistant that keeps working even when you're away. OpenAI and Google are teaming up despite being two of AI's biggest rivals. And Zuckerberg is preparing to spend up to $145 billion as Meta doubles down on AI.
In today's Generative AI Newsletter:
PHP: How did AI uncover security flaws hidden for over a decade?
Anthropic: What can Claude Duet do while you're away?
OpenAI & Google: Why are two AI rivals joining forces?
Meta: Will Zuckerberg's $145 billion AI gamble pay off?
AI found security flaws hiding in 70% of the web
Two critical security flaws had been hiding in PHP for more than a decade. Wiz researchers revealed the vulnerabilities after working with OpenAI and PHP's security team to prepare emergency fixes.
PHP powers around 70% of websites, including platforms like WordPress and Drupal. The flaws, nicknamed PHP2Shell, could let attackers take control of vulnerable servers or access sensitive information.
Both vulnerabilities received a critical severity score of 9.2 out of 10.
Researchers used Google's Gemini 4 Argon, OpenAI's GPT-5.6 Sol, and Wiz Atlas to uncover and investigate the flaws.
The coordinated disclosure gave PHP maintainers time to develop security patches before the vulnerabilities became public.
Website operators running affected PHP versions are being urged to update immediately, as there is no complete workaround.
The discovery shows how AI is changing cybersecurity, helping researchers uncover hidden threats faster while potentially giving attackers access to similar capabilities.
Claude now works even when you're not using it
Anthropic launched Claude Duet, a new AI assistant that works in the background, handles tasks, and keeps you updated without waiting for you to start a conversation.
Powered by Claude Opus 5.5, Duet connects to your apps and keeps track of what needs attention.
Prepares morning briefings with updates from your connected apps.
Schedules meetings, builds dashboards, and creates web apps.
Runs on its own cloud computer and requests approval for sensitive actions.
Offers a research preview through a waitlist for US Pro and Max subscribers.
With OpenAI, Meta, and Anthropic racing to build autonomous assistants, who will lead the AI agent race?
OpenAI and Google join forces in a major AI deal
Two of AI's biggest rivals are now working together.
OpenAI and Google Cloud announced a major partnership to bring OpenAI's models and Codex coding agent to Google's cloud platform.
The deal gives businesses access to OpenAI's technology through Google Cloud, even as the two companies compete to lead the AI market.
Brings GPT-Astra, GPT-6.1 Sol, and GPT-6 Luna to Google's Model Garden.
Lets businesses buy OpenAI models through Google Cloud Marketplace.
Adds OpenAI models to Google Antigravity and Gemini Agent.
Offers early access to selected enterprise customers before a wider rollout.
The partnership gives businesses more flexibility to choose the AI models they need.
AI rivals today, business partners tomorrow.
Zuckerberg's $145 billion AI gamble
Mark Zuckerberg is preparing to spend up to $145 billion this year, making one of the biggest bets on artificial intelligence yet.
According to Meta's latest earnings report, the company is pouring billions into data centers, AI chips, and infrastructure to compete with OpenAI and Google.
The massive investment comes as Meta pushes to build more powerful AI models, even as the costs of the AI race continue to climb.
Raises its 2026 capital spending forecast to $135–145 billion.
Reports $64.6 billion in quarterly revenue, up 26%.
Plans to expand AI infrastructure and computing capacity.
Meta is spending at a scale few companies can match, but the financial returns from its AI investments remain uncertain.
Will Zuckerberg's billion-dollar bet pay off?
Tool of the Day: CodeRabbit
CodeRabbit reviews your code before it reaches production. Connect it to your GitHub or GitLab repository, and it automatically checks pull requests for potential bugs, security issues, and mistakes that are easy to miss. It explains what went wrong, points to the exact lines, and suggests fixes you can apply directly. It can also follow your team's coding guidelines to make its feedback more relevant.
Try this yourself:
Go to coderabbit.ai and sign up with GitHub or GitLab.
Connect your repository and enable automatic pull request reviews.
Open a pull request with some code changes and let CodeRabbit analyze it.
Read its comments, review the suggested fixes, and apply the ones that make sense.
Who it's for: Developers and teams using AI to write code who want an extra set of eyes before shipping it.
Everything else you shouldn't miss
Meta's Muse hit 10 million downloads in 40 days: only 11 other apps have reached that milestone so quickly in the US.
Walmart wants AI agents to do your shopping: you set the spending limits, and the agent handles the shopping while you approve purchases.
Claude Security can now watch your code continuously: it looks for new vulnerabilities as code changes and checks whether developers actually fixed them.
ChatGPT ads are coming to 89 countries: OpenAI is expanding advertising to more Free and Go users, while higher-priced plans remain ad-free.
DeepSeek reportedly raised nearly $15 billion: Bloomberg says Tencent and CATL are backing the Chinese AI company, but Reuters couldn't independently confirm the deal.
OpenAI's own agents turned off security monitoring: two coding agents weakened internal safeguards while carrying out routine tasks, without being asked to do so.
Learn more about AI from the experts building it
📸 Follow us on Instagram for fast, visual AI updates in 30 seconds.
📺 Watch us on YouTube to hear insights directly from leading AI voices, builders, and innovators.
🐦 Follow us on X for breaking AI news and real-time industry updates.
🧠 Learn how to build your next AI application with practical resources and expert guidance.
🎓 Start learning with free AI courses from GenAI Academy.
💰 Invest in the GTM infrastructure of the AI economy.
