BRIEF · OCT 22

AI agents found two critical PHP flaws that sat unnoticed since 2004.

GPT-6 lands on Google Cloud, n8n closes a budget gap, and Walmart opens the door Amazon shut.

Agents from OpenAI and Google's Wiz surfaced the PHP2Shell bugs in a language running roughly 70% of the web, per TechCrunch.

PHP 8.1 and older get no security fixes, so some sites face a forced upgrade: check whether you patch, upgrade, or go offline.

Also in today's brief

Models & Releases

Astra, Sol and Luna enter private preview on your existing GCP invoice, per Google Cloud's October 21 announcement. See who can buy it yet.

Tools & How-To

Spend stops now reach nested agents, and the log records which model actually answered, per n8n's release notes. See the blind spot it closes.

Agent Gateway is an MCP server for approved agents to search and buy, a month after Amazon locked agents out, per TechCrunch. See the consent rules.

From the Pondero Stack

Recursive's Apache 2.0 model was built largely by an automated AI researcher; we sort who installs today and who waits. Get the local setup.

It screens agent and CI installs before they reach your dependency tree, with real gaps left open. See what it misses and turn it on.

DHS barred third-party products "developed using DeepSeek implementations" and never defined the phrase. Run the five-minute stack audit.

How was today's brief?

Jonathan Hildebrandt
Co-founder and primary operator of Pondero. Writes the Pondero Brief.

Pondero earns commissions on some links. This does not affect our editorial picks.

Originally sent to subscribers of the Pondero Brief.View the original.

Pondero Brief: AI agents dug up a 22-year-old PHP flaw. Patch today.