Today's Thread
Today's news runs in two directions. One is whether the tools you use are safe and actually available where you are. PHP, which powers many company websites and online stores, got an emergency security release, and while the AI model rankings shifted, some models turned out to be unavailable in Korea altogether.
The other is KakaoTalk widening as a sales channel. KakaoTalk Channel introduced a photo- and short-video-first home screen, and Zigzag let shoppers gift about 9 million products via KakaoTalk. Whether choosing tools or reaching customers, today calls for checking first-hand what works where.
PHP 8.5.12 emergency releases fix two 9.2-rated flaws
On October 21 the PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, fixing two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Both are remote code execution flaws, meaning an outsider can make the server run commands without logging in. Both score 9.2 out of 10 on CVSS v4.0, the standard security severity scale, and PHP pre-announced the release a day earlier on the 20th.
One flaw lets half-built request data be treated as valid when memory runs out; the other leaves behind a pointer to already-freed memory that the next request can use. PHP said the risk is highest under mod_php, where PHP runs inside the web server, and that attacks were demonstrated before any site code even runs. PHP 8.1 and older get no official fix.
If you run a site built on PHP, such as WordPress or Gnuboard, the task is the same even if you are not a developer. Ask your hosting provider or outsourced developer which PHP version you are on and when they will move to the versions above. Linux distributions and long-term support vendors received the patches early, so a managed server provider may already have updated packages.
For those who cannot upgrade right away, PHP listed stopgaps such as setting session.upload_progress.enabled=0 and restarting the workers (the PHP processes that handle requests), and limiting request sizes. It stressed these are not complete fixes. PHP 8.2 also reaches end of support on December 31, 2026, so it is worth planning a move to 8.3 or later now.
Claude Sonnet 5.5 tops Vals Index; top 3 within 1.6 points
The Vals Index, which scores AI on real-work tasks, was revised to v2.2 on October 19, and as of October 21 Anthropic's Claude Sonnet 5.5 leads at 70.85%. It is followed by Claude Opus 5.5 (70.18%), Google Gemini 4 Argon (69.24%), Meta Wonder Full (66.79%) and GPT-6 Astra (65.02%).
The Vals Index measures how well an AI completes multi-step work on its own across finance, coding, legal and tax tasks. Each sector is weighted by its approximate share of the U.S. economy. Finance includes Excel modeling, coding includes terminal work and code migration, legal includes legal research, and tax includes tax-handling tasks.
The notable point is that the top three sit within 1.6 percentage points, and Sonnet 5.5 narrowly beat Opus 5.5, the same company's higher-tier line. When picking a work model, the most prestigious name is not necessarily the best fit for your job. Check each vendor's pricing page and compare the same task across two or three models.
The limits are clear. The tasks are U.S.-based, with no Korean-language documents or Korean tax work. A gap of about one point can flip with small changes to the test, so trust a direct comparison on your own work samples over the leaderboard.
Meta Muse Wonder excluded from Korean subscriptions
Meta's developer documentation says Muse Wonder and Muse Wonder Full are currently unavailable in South Korea on both the Model API (the channel other programs use to call the model) and the coding tool Muse Code. A Muse Code subscription in Korea excludes both models, and only the other benefits apply.
Muse Code has four plans: $5 (Everyday), $15 (High), $50 (Power) and $200 (Maximum) per month. Elsewhere, Muse Wonder is on every plan and Wonder Full is on the $50 and $200 plans. In Korea, choosing a pricier plan to use Wonder Full, ranked fourth on the Vals Index, does not work.
Before subscribing based on overseas reviews or rankings, check that the model is actually offered in your region. Teams adopting a tool can discover missing features only after paying. Meta's help pages also note that benefits and availability may vary by region.
Meta has not said why Korea is excluded or when that might change. Whether Muse Code is billed separately from the Muse app or other Meta subscriptions is unconfirmed from this documentation alone.
KakaoTalk Channel adds short-video grid and card posts
Kakao revamped KakaoTalk Channel on October 20. A new content-style channel home shows posts and short-form videos (vertical clips of about a minute) in a grid, and operators choose between it and the existing standard layout. A new card-style post holds up to 40 photos and videos that viewers swipe through.
Card posts can carry one link and one location, and the existing blog-style post remains for longer explanations. Operators can decorate the channel home background with photos, video or color and place shortcut buttons for coupons, reservations or calls. Business channel conversion, once limited to registered businesses, is now open to individuals with professional qualifications after review.
Stores and brands that used KakaoTalk Channel only to send notices can now build a photo- and video-first home screen. Reusing existing short videos and product photos keeps the extra work small. Qualified individual professionals can, once approved, introduce their field and experience with a new career card.
Reports did not give a date when the changes reach every channel, so that is unconfirmed. The quickest check is to see whether the new settings appear for your channel in the KakaoTalk Channel admin center.
Zigzag launches gifting: 9M products via KakaoTalk
Zigzag, the fashion and beauty shopping app run by Kakao Style, launched a gifting service on October 20. About 9 million fashion, beauty and lifestyle products are eligible, and buyers send gifts via KakaoTalk or text message. Recipients do not need a Zigzag account.
If the recipient enters a delivery address before midnight, Zigzag's fast-delivery service brings it the next day, weekends included. Overseas direct purchases, pre-orders and limited-time items cannot be gifted. In effect, the fashion platform turned most of its catalog into giftable products.
Sellers on Zigzag get exposure to gift demand without creating separate gift items. Noting gift availability and next-day delivery terms on product pages ahead of the year-end season can help buyers decide. For other store operators, it signals that gifting where the recipient enters the address is becoming more common.
Reports did not say whether seller fees and settlement terms match regular orders, so that is unconfirmed. Sellers should check the partner center notices.
SBS D Forum on 11/5: Yudkowsky's first Korea visit
SDF 2026 (SBS D Forum), hosted by SBS, takes place on Thursday, November 5, at Dongdaemun Design Plaza (DDP) in Seoul. Now in its 22nd year, its theme is The Age of Alternative Intelligence: Asking for Sovereignty Over Thought, and registration is open on the official website until Friday, October 30.
The keynote speaker is Eliezer Yudkowsky, an AI safety researcher who has long warned about the risks of superintelligent AI, visiting Korea for the first time. Other speakers include Philip Corlett of Oxford's Human-Centric AI Institute, media artist Refik Anadol (joining live remotely), Lee Joon-seok of Hanwha Aerospace's Defense AI Research Center, KAIST professor Kang Lee-yeon and poet Park Joon.
How far to hand judgment over to AI in an age when AI thinks for us is a question every organization bringing AI into its work actually faces. The forum suits managers who need to set adoption principles more than learn tool tricks.
The fee and session timetable were not in the sources checked, so they are unconfirmed. Check the official site before registering.
Try Today
Ask your hosting provider or outsourced developer today whether your company site or online store runs on PHP and whether it is on 8.5.12, 8.4.27, 8.3.36, 8.2.35 or later. If it is on 8.1 or older, schedule an upgrade first.
Give the same work sample, such as a report summary or an Excel formula, to the AI model you use now and to the top Vals Index models, and compare the results. For overseas models, check the plan details for Korean availability before subscribing.
If you run a KakaoTalk Channel, check the admin center for the content-style channel home and card posts, and publish one card post using product photos you already have.
If you are considering SDF 2026, register before the October 30 deadline.