holy fucking shit. openai had two ai agents running in separate virtual machines. no network connection between them. no shared writable files. they weren’t supposed to be able to exchange information. so the agents figured out how to communicate through the CPU CACHE.😭 one manipulated what was stored in the processor’s cache, while the other measured tiny differences in memory access times to decode the message. they literally found a way to communicate through hardware timing. this happened during openai’s internal red-teaming, and it’s one of the coolest things i’ve read about ai agents in a while.

The AI cybersecurity discourse is so stupid. Beyond stupid actually. It's utterly incoherent. Improve your security. That's the only takeaway that matters.

they’re calling it “Black October” and i don’t think people realize how serious this is in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours any ONE of these would normally be the biggest story of the year PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10 Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26 Java: also compromised. three of the most used programming languages on earth hit at the same time GitLab: a perfect 10 out of 10 severity hole in every version since 2014 Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed Signal: a bug that could leave your mic and camera on after you hang up WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer and that’s not even half the list thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already this is not a normal week on the internet. this is something different

🚨 Do you understand what happened in the last 48 hours.. > PHP, the code behind 69% of all websites, got 2 holes rated 9.2 out of 10, and the US, the UK and Japan told site owners to patch or go OFFLINE.. 4 days after hackers had already started trying the flaw.. > Japan's Prime Minister posted the request late at night.. the Finance and Health ministries pulled pages, MUFG Bank and JR West went into emergency maintenance, and Onamae shut ALL Desktop Cloud plans after malware hit up to 26,739 customer servers.. > India's eMudhra was caught with 8 intermediate certificate keys so weak one of them was literally the number 4.. the 60,000,000+ certificates it has issued can't be trusted.. > GitLab disclosed a 10.0 severity hole in every version since 2014.. the maximum score there is.. > criminals were caught using a literal AI hacking tool on 1,200+ sites.. it broke into more than 100 companies including John Deere and Cummins.. > LiteLLM, an AI tool with about 23,000,000 downloads a week, was secretly poisoned with a password stealer.. the bad version sat on PyPI for about 2 hours.. > State Bank of India, the country's biggest bank, confirmed 3,897 customer records on the dark web.. > WIRED now calls the PHP flaw "broadly exploited".. nearly 55,000,000 web properties still run PHP.. every single government on this list told PHP site owners the same thing within the last 48 hours.. patch it or take it offline.. all of this.. 48 hours.. if you're not following me you're finding out about this 48 hours late from someone who read my post.. it's only getting crazier from here..

Lol I am pretty sure someone is runing a deepseek swarm to remotely patch unpatched php boxes. Well good on them.