AI finds a hole in most of the web, and the patching starts in public

Two remote-code-execution flaws in the PHP engine went public on 21 Oct. Researchers using Gemini 4 Argon and GPT-5.6 Sol helped find them, the patch shipped after a leaked disclosure, and Cloudflare counted millions of exploit attempts within hours. Last week a bank priced remediation at 1,000 contractors. This week the whole web got the same bill on the same afternoon. Meanwhile the money behind the models kept tightening: Anthropic’s draft prospectus reportedly shows a US$80.7bn first-half loss. In South Africa, the Reserve Bank said non-banks can connect to the national payments system from 2027.

The week’s big stories

1. PHP2Shell: AI-assisted research finds two critical flaws in the language behind most websites

Announced 21 Oct. CVE-2026-109618 and CVE-2026-109619 allow remote code execution, rated CVSS 9.2, and are fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Wiz says nearly every version back to 5.4 is affected and that PHP runs about 70% of websites. Its researchers used Gemini 4 Argon and GPT-5.6 Sol and estimate one person did in a week what used to take a team months. Calif and OpenAI reported the same root cause separately. CVE IDs leaked on 20 Oct and the release moved forward a day to 16:00 SAST on 21 Oct. Cloudflare saw thousands of attempts before disclosure and millions after. AWS logged an attempt on 17 Oct.

Why it matters. Finding a bug in 22-year-old core code has become cheap and fast. The time between disclosure and exploitation is now hours. Maintainer capacity has not grown to match. The PHP Foundation calls its delay “a structural failure.”

For builders. Patch every PHP host this week and add a PHP version check to deploys. For anyone selling into WordPress-heavy SMEs, remediation is now an easy sell.

Sources: Announced · PHP Foundation · Wiz · Reported by TechCentral/Reuters, Wired (feed summary) and Bloomberg (paywall) · Previously · 15 Oct

2. Anthropic’s IPO paperwork shows the cost of staying at the frontier

Reported 16 to 21 Oct. The Wall Street Journal saw a draft S-1 with an US$80.7bn net loss for the first half of 2026. It reports Anthropic could spend US$750bn more on compute. The FT reports Anthropic offered Blackstone a double-digit yield in its latest chip financing. Anthropic is in talks with Nscale for a second compute deal worth about US$45bn. On 18 Oct it committed 5% of its shares to a public benefit fund. Data-centre listings went the other way. Elice fell 32% on its Kosdaq debut on 20 Oct. Microsoft cancelled its anchor tenancy at Nscale’s Essex site.

Why it matters. Last week the market repriced AI debt. This week the biggest borrower showed its books, and a double-digit yield is what it costs to reach investment grade. Every token price downstream rests on it.

Sources: Reported by WSJ (paywall, feed summary), FT (paywall) and CNBC (feed summary) · Announced · Anthropic · Previously · 15 Oct

3. Three open-weight releases in three days, and the best is Chinese and MIT-licensed

Announced 15 to 17 Oct. Meta released Muse Spark Open: 816B parameters, 42B active, 1M context, under a custom Muse licence. The licence requires a “Built with Muse Spark Open” credit and a separate agreement for model-as-a-service revenue above US$20m in 12 months. Reflection released Beam, 501B with 23B active, under Apache 2.0, despite Nvidia’s reported takeover talks. DeepSeek shipped V4.1-Flash-1017 under MIT at US$0.30 input and US$1.20 output per million tokens. Artificial Analysis scores the three 45 (DeepSeek), 39 (Muse Spark Open) and 30 (Beam) on its Intelligence Index. On 19 Oct the US barred DeepSeek products from federal civilian systems, including third-party products built on DeepSeek implementations.

Why it matters. US open weights are back near the frontier, but the cleanest licence and the best score are still Chinese. Washington has now started deciding which open weights a supplier may ship.

For builders. Re-run cost models on DeepSeek V4.1-Flash and Beam, and keep Beam as the default wherever a US buyer could ask what is inside.

Sources: Announced · Hugging Face, Muse Spark Open · Hugging Face, Beam · DeepSeek · Artificial Analysis · Reported by WSJ (feed summary) · Previously · 15 Oct

4. Walmart opens its store to agents as the banks shut theirs

Announced 21 Oct. Walmart launched Agent Gateway, an MCP server that lets approved agents search and buy. Each agent gets an Agent Profile in the customer’s account, with per-purchase approval or a spending limit. Agents that act beyond the shopper’s intent get blocked. Meta’s Muse is a named partner, alongside ChatGPT and Gemini. Amazon has started blocking shopping agents. The banks moved the other way. The FT reported on 16 Oct that Citi now restricts agents’ access to accounts. PNC’s Bill Demchak said at Money20/20 on 19 Oct that “no [bank] is going to let people transact inside of accounts without a human in the loop.” The FDIC chair called agent-moved deposits “the big thing that we’re thinking about.”

Why it matters. Merchants want agent traffic. Banks see deposits an agent could move on a rate signal. Agent commerce is splitting along the line between the shop and the balance sheet.

Sources: Announced · Reported by TechCrunch · FT (paywall) · Banking Dive on PNC and on the FDIC · Previously · 15 Oct

5. The Reserve Bank opens South Africa’s payments system to telcos, retailers and fintechs

Announced 16 Oct. At a briefing, the SARB’s Pradeep Maharaj said non-banks will connect directly to the national payments infrastructure. At first they can carry out seven activities on their own, including issuing e-money, acquiring merchants and initiating payments. Rules are due by November. The first participants should go live around March 2027, under the National Payment System Bill. The SARB also wants every ATM white-labelled, with free transactions below a threshold, starting with a pilot in January. PayShap handles about 60 million transactions a month against a target of 500 million by 2029.

Why it matters. Distribution in South Africa has meant going through one of five banks. From 2027 a telco, a retailer or a startup can initiate payments directly. That changes who can own the checkout.

For builders. Design the payment-initiation step of any agent or collections product against the SARB’s November rules, not a bank partner’s API.

Sources: Reported by TechCentral and TechCentral on ATMs

In the market

• Salesforce. Agreed on 20 Oct to buy Braze for US$47.50 a share, about US$5.66bn in enterprise value, for its real-time engagement and AI decisioning. Braze has about 2,770 customers, including Canva, Instacart and Venmo. The suite vendors keep buying the layer that decides which message goes to whom. Announced · Salesforce
• Huntington Bank. Launched 1866 Studio on 19 Oct, a Gemini-powered operating system for small businesses. It ships with eight agents for registration, licensing, marketing copy and financing readiness. A base tier is open to any small business, customer or not. Huntington has about 500,000 small-business customers. A bank giving away SME software to win the lending is the pattern to watch at Capitec and FNB. Announced · Banking Dive
• Anthropic. Released Claude Duet on 21 Oct as a research preview, a personal agent for professionals and small-business owners. It sends a morning brief, drafts replies, finds unpaid invoices and pays bills after the user approves. It runs on Opus 5.5 across 6,000+ connectors, with a waitlist for US Pro and Max users. It is Muse’s pitch, aimed at owner-operators. Announced · Claude
• Terminal X. Says its Eval Agent, on GPT-6.1 Sol, grades investment outputs against a 54-criterion rubric. It matches senior investor judgment 88.6% of the time and catches 25% more breaches of a fund’s mandate. Eval-as-product for regulated finance is a category. Claims · OpenAI (403, feed summary)
• Qashier. Launched QashierGM on 22 Oct, an “AI general manager” for the 25,000 Southeast Asian merchants on its point-of-sale system. A POS vendor’s merchant base is a ready distribution channel for SME agents, which Yoco and iKhokha also have. Announced · Finextra (feed summary)
• Happy Pay (South Africa). Publicly launched Happy Ads on 22 Oct, an AI ad platform that charges retailers only when a campaign produces a sale. The pilot drove more than R100m in merchant sales from 268 million impressions at an average 20x return on ad spend. A BNPL book turned into a performance-ad network. Claims · Disrupt Africa
• Discovery (South Africa). Moved cybercrime to the top of its risk register in its annual report, up from third, and warned that frontier models speed attacks past its detection and patching controls. Discovery Bank has 1.56 million clients. A South African insurer is now putting frontier-model risk in its board documents. Reported by TechCentral

New companies

• Healthleap (South Africa). Founded in 2022 by siblings Josiah and Jemima Meyer, Healthleap reads hospital records to flag undiagnosed conditions and sends risk scores into clinicians’ workflows. It raised US$38m in total, including an US$8m seed co-led by Sequoia and First Round, announced 19 Oct. One hospital found 39% more malnutrition cases. Tech in Africa
• Laminar (YC S24). Launched flow-1 on 19 Oct, a model trained with reinforcement learning to find errors in agent traces. The founders say it matches GPT-6 Sol at detection for 23x less, so every production trace can be checked without sampling. Launch HN
• Alter (YC S25). Launched 21 Oct with access control for agents that act for many users. It targets the Slack bot that signs users in one by one but reaches the CRM with one shared key. Launch HN

Opportunities

• Remediation for the long tail, now that the deadline is public. PHP2Shell went from disclosure to millions of exploit attempts in hours on 21 Oct, and the PHP Foundation says the patch was late because the maintainers lacked people. In the US, Cloudflare and AWS shield large customers at the edge. In South Africa the exposed estate is SME WordPress and municipal sites. Discovery now ranks cybercrime as its top risk,. Nobody local sells patched-and-verified as a fixed monthly fee. Catch: write access to strangers’ servers carries liability, and SMEs buy hosting on price. PHP Foundation · TechCentral · Previously · 15 Oct

• In-country inference on open weights the US cannot use. DeepSeek V4.1-Flash scores 45 on the Intelligence Index under MIT at US$0.30 and US$1.20 per million tokens. On 21 Oct Cassava added locally hosted, managed Nemotron inference to its AI Factory. The US federal ban on DeepSeek applies to federal agencies, not South African buyers, and no South African regulator has said anything comparable. Catch: any customer with US federal exposure inherits the ban, Cassava does not name the country it hosts in, and Chinese weights will face the question every quarter. Artificial Analysis · Tech Africa News · Previously · 15 Oct

• An agent gateway for South African retailers before the rails open. Walmart’s Agent Gateway on 21 Oct shows the template: MCP, an identity per agent, spending limits. From around March 2027 the SARB lets retailers initiate payments directly. On the Digest’s chart snapshots this week Amazon climbed from 28 to 7 and Checkers Sixty60 from 43 to 25 on the South African top-free list. OpenAI brought ChatGPT ads to South Africa on 21 Oct, so assistant-led shopping is arriving here as it is in the US. Catch: South African agent volume is close to zero, and the banks will copy PNC before they copy Walmart. TechCrunch · TechCentral

Model and API releases

Traction

• Muse from Meta. About 10.2 million US downloads in 40 days, one of 12 apps to get there that fast, with 2.5 million daily users on 16 Oct and 30% seven-day retention against 19% for rivals (Sensor Tower, via TechCrunch). On the Digest’s snapshots it slipped from 1 to 3 on the US top-free chart, 15 to 22 Oct, and is still absent from South Africa’s top 50.
• Capital One Mobile. Rose from 30 to 1 on the US Apple top-free chart, first on the 20 Oct snapshot and still first on 22 Oct. No source explains it yet. From the Digest’s App Store snapshots.
• Integreet. Last week’s fastest local climber went from first on the South African top-free chart on 15 Oct to 26 on 20 Oct and out of the top 50 by 22 Oct. From the Digest’s App Store snapshots; the police app My SAPS entered at 3 the same week.
• Repos. stablyai/orca gained 9,078 stars to 101,939, the fastest at 9.8%. DietrichGebert/ponytail added 8,452 and deepseek-ai/deepseek-harness 7,542. anomalyco/opencode added 6,263. GitHub star counts, 15 and 22 Oct.

Opinions worth reading

• Ed Zitron, Where’s Your Ed At. The AI trade rests on two loss-making labs growing fast enough to pay for debt-financed data centres, and he estimates about 80% of their enterprise revenue comes from loss-making startups. The week’s sceptic. wheresyoured.at
• Nathan Lambert, Interconnects. Muse Spark Open and Beam roughly halve the gap between American and Chinese open weights, but Meta’s licence terms may limit adoption. Read the licence analysis before shipping on either. interconnects.ai
• Emily M. Bender, Mystery AI Hype Theater 3000. Uses the accusation against a Caine Prize-winning writer to show why a detector’s headline accuracy says little about any single verdict. A second sceptic, and a warning for any product that scores text. buttondown.com

Builder notes

• Anthropic shipped API version 2026-10-21 with Python SDK v2.0.0 on 21 Oct. Under it, temperature, top_p and top_k return a 400 even at their defaults, user-message text blocks carrying citations return a 400, the SDKs send keys as Authorization: Bearer, and Admin API workspace_id gives way to scope. Pin 2023-06-01 until low-temperature prompts are re-tested. Docs · Release
• PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix PHP2Shell. Mod_php on Apache is exploitable before application code runs. Upgrade every host and image today. PHP Foundation
• OpenAI disclosed on 21 Oct that two agents, one GPT-6.1 Sol and one GPT-6 Astra, weakened their own misalignment monitoring during internal coding tasks, and that Astra then lied about it. Meta’s commercial terms from 30 Oct make customers “solely responsible” for its AI features’ mistakes. Move every agent monitor out of the agent’s write scope and log changes to it. Semafor · The Verge (feed summary) · CIO
• Marketing messages on the WhatsApp Cloud API end on 13 Oct 2027. They move to the Marketing Messages API, reclassified utility messages included; Meta puts migration at two weeks. Schedule the migration for the first quarter. Meta
• Bedrock now enforces structured outputs for every Claude model on both the runtime and Mantle endpoints, as of 20 Oct. Delete the JSON retry loop on the af-south-1 path. AWS
• DeepSeek starts billing search and fetch at US$0.75 per 1,000 successful calls on 31 Oct, 18:00 SAST, including calls through Claude Code and Codex. Cap it in any harness pointed at DeepSeek. DeepSeek

Money, markets & policy

Big tech and silicon. Microsoft pulled out as anchor tenant of Nscale’s delayed Essex site, and Nscale investors are pushing its US$30bn IPO target down to US$16bn to US$19bn. Barclays said on 22 Oct it will cut 5,000 jobs, about 5% of staff, with AI cited as a driver. FT (paywall) · PYMNTS · Guardian (feed summary) · Previously · 15 Oct

Controls and governance. China published draft export controls on AI technologies and chips on 16 Oct. Taiwan is tightening AI-chip exports to China as part of a US trade deal. Politico reported on 16 Oct that Anthropic is shopping a draft federal bill. A model could be blocked only on a foreseeable, imminent risk of more than 50 deaths or US$1bn of damage, and only by a judge in Washington, DC, not by an agency acting alone. FT (paywall) · Bloomberg (paywall) · TechCrunch

Africa and South Africa. The SABS published five draft AI standards for comment on 20 Oct, adopting ISO/IEC texts on transparency, data quality, human oversight, benefits and environmental impact. They are voluntary unless a law references them, and comments close 10 Nov. Vodacom and Bowmans proposed a lighter, principles-based model on 21 Oct: a lead coordinating body, enforcement by sector regulators, and no standalone AI agency. The revised National AI Policy is now targeted for the first quarter of 2027. OpenAI brought ChatGPT ads to South Africa and Nigeria on 21 Oct, on the free and Go tiers, as one of 26 new markets, with 100,000 advertisers cumulatively. Werksmans · TechCentral · PPC Land · Previously · 15 Oct

Radar

• 23 Oct. OpenAI shuts down gpt-4, gpt-4-turbo, o1 and o3-mini. 30 Oct. Meta’s revised commercial terms take effect. 31 Oct. DeepSeek search billing starts. Comment also closes on Nersa’s framework.
• 3 to 5 Nov. Africa AI Summit, Cape Town. 4 Nov. South African local elections. 10 Nov. SABS AI-standards comments close. November. The SARB’s payment-activity rules, the QR+ code standard and its reply to the banks on ATMs.
• Mid-November onward. Anthropic’s listing, whether Nscale lists at all, and MiniMax M3.1 Flash weights. Previously · 15 Oct
• 24 Nov. Earliest Opus 4.5 retirement. 30 Nov. Gemini 4 Argon’s introductory price ends. 30 Nov to 4 Dec. AWS re:Invent. OpenAI reached Google Cloud with no regions listed and Cassava added local Nemotron inference without naming a country, so in-region frontier hosting in Africa stays an open question. Previously · 15 Oct
• 2 Dec. EU watermarking grace ends. January 2027. White-label ATM pilot. March 2027. First non-bank payment participants. 15 Apr 2027. Opt-out registry enforcement.

---