AI news for Thursday, October 22, 2026: AI finds critical PHP flaws, Anthropic previews Claude Duet

AI found the bug you need to patch today, and the agents that will soon act for you got new doors to walk through.

Safety Open source3 min
PHP ships fixes for AI-found flaws: patch today
PHP released fixes on October 21 for two flaws rated 9.2 that let attackers take over servers without logging in, found by Wiz with Gemini and GPT models. If your site runs PHP, updating today is the job.
Why it matters Every PHP version from the last decade is affected, per Wiz, and clean application code does not protect you. If you run WordPress, Drupal or any PHP app, confirm the PHP version serving your site and move to a fixed release today, or get your host to confirm it in writing.
SRCWiz
Agents Products3 min
Anthropic's Claude Duet keeps working while you're away
Anthropic opened a US waitlist for Claude Duet, a research preview agent on Opus 5.5 that sends a morning brief and works in the background for Pro and Max users. The catch is that it spends the same usage limits you code with.
Why it matters An assistant that comes to you is now the product all three big chat makers are chasing, and Anthropic's entry point is the $20 plan, per Engadget. If you are on Pro or Max, join the waitlist, connect only what you need, and budget for background checks eating your limits.
SRCAnthropic
Business Models3 min
OpenAI's GPT-6 models arrive on Google Cloud
Google Cloud is rolling out OpenAI's GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna in private preview, billed on your existing Google invoice and commitments. For Google Cloud shops, the procurement excuse for skipping OpenAI is gone.
Why it matters If your company runs on Google Cloud, GPT-6 can now go through the same contract, security review and spend commitment as Gemini and Claude. Get on the preview list if you want it, and ask how OpenAI usage counts against your commitment before prices appear.
SRCGoogle Cloud
Agents Business3 min
Walmart opens its store to AI shopping agents
Walmart opened a beta Agent Gateway for AI shopping agents and says Agent Profiles with approvals and spending caps arrive within a month, while agents never see your card. With Amazon blocking agents, the biggest US retailers just split.
Why it matters If you build an assistant, Walmart just gave you an official, sanctioned way to buy things, and a set of rules to copy. If you shop with an agent, approval by default and a spending cap you control are the settings to turn on first.
SRCWalmart
Hardware Business3 min
Nvidia's DSX POD promises an AI factory in 14 days
Nvidia unveiled DSX POD at GTC Berlin, a containerized Vera Rubin data center design it says cuts deployment at a prepared site from six months to as little as 14 days, shipping in early 2027. Faster build-outs are how compute gets cheaper for you.
Why it matters Capacity shortages are why you hit rate limits and waitlists. If DSX POD delivers, new Vera Rubin capacity comes online in weeks rather than quarters from 2027. If you buy compute at scale, ask your hardware partner about it now. If you rent models, watch for it in 2027 prices.
SRCNVIDIA

Prompt of the day

Get a PHP patch plan for your site in ten minutes

› Act as a careful web operations engineer. On October 21, 2026, PHP released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical remote code execution flaws (CVE-2026-109618 and CVE-2026-109619) that affect PHP versions from the last decade, even with clean application code.

My setup: [hosting type, e.g. shared host, managed WordPress, VPS, Docker, Kubernetes]
My PHP version, if known: [version or "unknown"]
My app: [WordPress, Drupal, Laravel, custom, etc.]
Who controls PHP updates: [me, my host, my agency]

Give me:
1. The exact commands or dashboard steps to confirm which PHP version is actually serving requests (not just the CLI version).
2. The fixed version I should move to, and what to do if my branch has no fix listed.
3. A step by step update plan for my setup, including a rollback step.
4. A short message I can send my host or agency asking them to confirm the update and the date it was applied.
5. What to watch in my logs for the next two weeks.
Ask me one question first if anything above is missing. Keep it practical and don't pad.

Open in Magai

Works in any AI chat. In Magai, run it against several models at once.

Get every edition

This one arrived in inboxes at 6am ET.

PHP ships fixes for AI-found flaws: patch today

Anthropic's Claude Duet keeps working while you're away

OpenAI's GPT-6 models arrive on Google Cloud

Walmart opens its store to AI shopping agents

Nvidia's DSX POD promises an AI factory in 14 days