Stamos said the bug was found in "a project that was being run by OpenAI called Hack the Planet" (01:11), as the captions give it, and that a security consultancy the captions give as "Kalif" "used it to find the PHP bug" (01:55 to 02:04). He did not name a model.

The exact words it rests on

01:09 "in a uh" 01:11 "a project that was being run by OpenAI" 01:14 "called Hack the Planet..." 01:55 "A a called Kalif, which is a kind of" 01:57 "excellent security consultancy" ... 02:01 "research. They used it to find the PHP" 02:04 "bug."

What the source said when we opened it, on 26 Oct 2026.

The source

The PHP Bug's Stunning Consequences + Cybersecurity's Black October — With Alex Stamos
Big Technology Podcast (Alex Kantrowitz) · 2026-10-23

Open the sourcearchived copy

Checked

Checked by the notis newsroom on 26 Oct 2026, against the source above.

In the story

Stamos says attackers exploited PHP flaws before the fix; PHP urges updating now 26 Oct 2026

Said aloud in a video: the quote, word for word.