🚨A TON of security vulnerabilities are being disclosed. Here's what YOU should do!🚨 Multiple security advisories and patches are making headlines, and some affect tools millions of people and developers rely on... If you're an everyday user, take 5 minutes to do this NOW! ⤵️ 🌐BROWSERS Update Chrome, Edge, Firefox, Brave, or whichever browser you use. Don't keep dismissing that update notification! 📱iPHONE APPS Open the App Store → Your Profile in top right → App Updates → Update All 💻VIBE-CODED APPS If you've built or deployed an AI-generated app, audit your dependencies, review exposed secrets, and rotate any API keys that may have been compromised. 🔐DEVELOPERS & SERVER ADMINS Review the security advisories below, identify affected versions, and patch vulnerable systems. Oh and happy cybersecurity awareness month 🥲 Vulnerabilities Released thus far Railway blog.railway.com/p/security-… PHP php2shell.aikido.io/ Node.js xitter.cf/vercel_dev/status/2113… QUIC xitter.cf/4a4133/status/21130082… Gitlab Flaw thehackernews.com/2026/10/cr… Oracle Java oracle.com/security-alerts/a… eMudhra / emSign discuss.python.org/t/informa… Others Oct 21: PHP2Shell, LiteLLM, SBI Oct 20: Plex2Shell, SiteGuard, Siemens Oct 19: OVHcloud CLI, PingCAP breach Oct 17: Opencode Don't assume automatic updates have already protected you! Stay Safe & Stay Vigilant

🚨AI is accessing your bank... Instructions to Revoke Now Below!!🚨 We're seeing headlines about AI agents accessing bank accounts and taking actions users never intended... But there's one VERY important detail getting overlooked... How did the AI get access in the first place? 👀 Users are connecting their accounts and granting permissions without fully understanding what they're allowing... Whether you're using Muse, ChatGPT, Claude, Grok, or another AI agent, giving an app access to your financial information is a SECURITY decision. And simply telling an AI what it can or cannot do isn't the same as enforcing permissions. Which most user's never implemented guardrails, therefore it technically can do what it wants.. 🔐Here's what you should do TODAY: 1️⃣ Check which third-party apps have access to your bank accounts. 2️⃣ Revoke access for apps you don't recognize or no longer need. 3️⃣ Review what permissions each app has. Can it only read balances, or can it initiate transactions? 4️⃣ Check your AI apps and agents for connected financial accounts. 5️⃣ Review recent transactions, active sessions, and trusted devices. Don't assume disconnecting an app automatically revokes every permission or deletes previously shared data. Below are instructions for checking connected apps at Chase, Bank of America, Wells Fargo, and Morgan Stanley ⤵️ JPMorgan Chase Chase website (chase.com): 1.) Log in and open the Security & Privacy tab. 2.) Under Linked Apps & Websites, find the app. It’s usually listed as “[App] via Plaid” or similar. 3.) Click Edit Sharing to choose which accounts it can see, or remove the app entirely. Edits are saved by clicking “I Agree.” Chase only lets you change these permissions on its own website. Deleting the connection inside the app doesn’t remove the access on Chase’s side. Chase Mobile app: 1.) Chase started rolling out a Data Security Center in the app in late September 2026. It lets you see connected apps, change permissions, shorten how long access lasts, choose which accounts are linked, or unlink an app. Because the rollout is phased, you may not have it yet. If you don’t, use the website. J.P. Morgan wealth / private bank accounts: 1.) In the J.P. Morgan Mobile app, go to Settings, then Security center, then “Linked apps and websites.” On J.P. Morgan Online, go to Security & privacy to reach the Security Center. Bank of America 1.) Log in to Online Banking or the mobile app. 2.) Open the Security Center. 3.) Select Third Party Site Access. This page shows who has access to your information and lets you revoke it at any time. Revoke anything you don’t recognize or no longer use. If an app you know you connected isn’t on the list, it isn’t using Bank of America’s secure connection method yet. For those apps, you can try removing access from inside the app, but the bank says the safest fix is to change your Bank of America password. Bank of America connections also expire on their own. Consent lapses 365 days after you last gave it, or after 180 days if the third party hasn’t accessed your data. Wells Fargo 1.) Log in to Wells Fargo Online or the mobile app. 2.) Open Control Tower. 3.) Find the third-party or data-sharing section. There you can turn an app’s access to your account information off or back on, and choose which accounts it can see. I couldn’t find an official Wells Fargo page with the exact menu names, so the labels inside Control Tower may differ a little. If you can’t find the section, call Wells Fargo. Also check Account Access Manager for people you’ve added. That feature lets you give someone view-only access and edit or cancel a guest user’s access at any time. Morgan Stanley (Morgan Stanley Online) Morgan Stanley has two separate settings to check. App and aggregator data sharing: 1.) Log in, go to the Services tab, then Security Center. 2.) Click Edit next to Third party data sharing. Partner guides describe setting it to Yes to allow sharing, so set it to No and click Update to turn sharing off. People or services you added as third-party users (such as an accountant): 1.) Go to Services, then Security Center, then Third Party Management, and click Edit. 2.) Click Delete next to the user, then confirm Delete in the pop-up. The Total Wealth View / “Add External Accounts” feature works in the opposite direction: Morgan Stanley pulling in data from your other banks. To stop that, remove the external account there, and also revoke Morgan Stanley’s access in the other bank’s linked-apps list. After revoking, at every bank 1.) Change your password if you ever typed it into the app or agent. Turning on two-factor authentication also helps. 2.) Review trusted devices and active sessions in each bank’s security settings, and remove any you don’t recognize. 3.) Delete the bank connection inside the app or agent itself. Revoking at the bank stops new data from flowing, but you may need to contact the third party about data it already collected. 4.) Check recent transactions. If an agent had money-movement access, look for payees, transfers, or bill-pay entries you didn’t set up. Call the bank’s fraud line if anything looks wrong. Stay Safe & Stay Vigilant