NSA warns of critical PHP flaws and urges sites to patch

PHP security warning

The NSA warned of two critical vulnerabilities in PHP. Wiz says large language models can make attacks more practical by removing the old barrier of adapting an exploit to different PHP versions and configurations.

The NSA advises taking a site offline if it cannot be patched immediately. PHP 8.5.12 is the current safe version, while versions 8.1 and earlier are unsupported.

Anthropic launches Claude Duet

Anthropic’s Claude Duet is a research-preview agent built on Claude Opus 5.5. It is available through a waitlist to Pro and Max subscribers in the United States on iOS, Android and the web.

Duet can send a morning brief based on connected apps such as Gmail, Slack, Stripe and Docusign, and contact users again when something needs attention. It runs on its own virtual machine, so a phone does not need to stay on.

Anthropic says a safety classifier is designed to prevent leaks of sensitive information such as credit card numbers. Duet will not trade securities or move money between accounts, and the company says the early version can misread conversations or urgency and is less capable at personal errands such as booking tickets.

OpenAI models arrive on Google Cloud

OpenAI’s GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna are coming to Google Cloud’s Model Garden, which hosts more than 200 models. OpenAI says Sol and Luna cost five and 100 times less than Astra, respectively. It also says Astra achieved a perfect result on ExploitBench and produced fewer misaligned outcomes than other frontier models in its evaluation.

The models are rolling out in private preview to select enterprise customers, with general availability expected within a few weeks. Google says it is the only major cloud provider offering Gemini, Claude and GPT in one place.

Barclays plans 5,000 job cuts

Barclays plans to cut 5,000 jobs, about 5% of its 93,000 staff, as part of a plan to save more than 1.1 billion pounds in 2027. Chief Financial Officer Anna Cross said about 60% of the cuts will affect support functions, including developers, with AI making staff more productive.

The announcement came alongside a 12% rise in quarterly pre-tax profit, to 2.3 billion pounds.

Sources

TechCrunch - AI

The Decoder

The Verge - AI

The Guardian - AI

SiliconANGLE - AI

Ars Technica - AI