[ SIGNAL: LIVE ]
PHP2Shell is real: pre-auth RCE on default Apache mod_php. 'Black October' is not. The bug was found in 2024 and left alone because nobody could prove it was exploitable. AI supplied the proof in days. The fix still took 13 people two months.
READClaude Code can now watch your PRs in the cloud, fix CI failures, and address reviewer comments while you're away. It's the logical next step after auto mode - and it raises the same trust questions, harder.
READAnthropic published how the Claude Code team reviews code at agent scale: verification first, parallel bug hunters, verifier votes, risk tiers. It is a good process. Every reviewer in it is Claude. I checked my own logs: 51 times a second model reviewed a change Claude had already passed, and 29 times it found a serious bug.
READ
