PHP embargo break shows AI clearinghouse lacks governance, ex-CISA lead says
The AI clearinghouse has convening power but thin governance features, and Altomare argues the fix doesn't have to come from Congress.
TL;DR
Chainguard released the PHP patches more than six hours before the coordinated release, and the PHP Foundation says attackers could study the fix while every other user waited. Matt Altomare, the former CISA threat hunting lead now at Aspen Digital, told Inside Cybersecurity the episode is a "great dry run" for AI-discovered vulnerabilities, and that the clearinghouse the June 2 executive order created has convening power but not "robust governance features." CISA added both CVEs to KEV on Oct. 26, giving federal agencies three days.
Chainguard broke the embargo on Oct. 21, releasing the PHP patch more than six hours before the coordinated release, according to a blog post from the PHP Foundation. The foundation moved up its emergency timeline and noted that any attacker could study the fix in binary form while every other PHP user was still waiting, disregarding weeks of work by many parties.
The two flaws, CVE-2026-109618 and CVE-2026-109619, allow unauthenticated remote code execution and were found through OpenAI's Patch the Planet Initiative. CISA issued an alert on Oct. 21 urging immediate patching and added both CVEs to the KEV Catalog on Oct. 26, which set a three-day window for federal agencies under a binding operational directive dated June 10, BOD 26-04 in CISA's numbering.
Matt Altomare, who spent four years on threat hunting operations at CISA before leaving in April for Aspen Digital, told Inside Cybersecurity that breaking an embargo "could give anyone a free license out there who is brought in ahead of time to make their own independent determination and put the rest of the ecosystem at risk."
There's no statute underneath any of it. "I am not aware of any sort of statutes or laws that dictate this, but there are accepted industry practices," he said. The AI clearinghouse stood up by the June 2 executive order, which coordinates AI-found vulnerabilities through Carnegie Mellon's Software Engineering Institute, can lean on convening power and "bully pulpit influence" to keep participants in line. What it doesn't carry is "robust governance features," and Altomare argues those don't have to come from Congress.
For the engineer, the immediate work is the same as it was last week: inventory PHP, move to 8.5.12, 8.4.27, 8.3.36, or 8.2.35, and take systems offline if they're stuck on 8.1 or earlier, per the CISA alert (https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-php-require-immediate-patching). Altomare calls the episode a "great dry run" for the frontier-model discoveries he expects next.
Published ·Deep Fathom