Jesus is God ✝︎ retweeted
We've decided to sunset Arc on December 22, 2026.
That's not an easy sentence to write. We spent years building Arc and celebrating each and every release along the way: we have so much pride and love for what we made alongside the Arc community.
Our priority is to deliver best-in-class security for our members. Keeping a browser secure takes constant, dedicated work that is only increasing in the age of AI. Dia was built from the ground up to meet today’s security standards, so that's where our engineering and security teams will focus moving forward.
We've worked to make switching to @diabrowser as easy as possible for Arc members. Here's how:
· Your passwords, bookmarks, extensions and history come over to Dia seamlessly.
· Spaces, Folders, and Tab Groups are in Dia and import over with your data intact.
· Dia now surpasses Arc benchmarks in stability, speed, and security.
· The browser features you use in Arc are free in Dia, and the AI is optional.
Thank you for using Arc, for pushing us to make it better, and for building alongside us. The team that made Arc is the same team behind Dia, and some of our most ambitious work is just ahead. We'd love for you to be there with us when it lands.
In April 2025, eMudhra created eight intermediate CA private keys that were single-byte values (one literally 4) instead of proper 384-bit random numbers. Anyone could recover them from the public certs in under a second. A researcher reported it Oct 17 2026; browsers blocked them that day and eMudhra revoked them the next. Caused by a flawed key-ceremony script. No end-entity certs were issued.
Jesus is God ✝︎ retweeted
BREAKING: JPMorgan, Bank of America, Wells Fargo, & other major banks have reportedly detected unauthorized AI agents operating inside customer accounts.
Jesus is God ✝︎ retweeted
No back up plan, no motive. Just conviction and the desire to follow Him with everything I have. I don't know what's next, but I know Who's next. If you've been watching me for years, thank you for loving and supporting me, and praying for me.
Jesus is God ✝︎ retweeted
Day 17/ Bet you thought we forgot, but no, it’s reset day today.
Also good time to remind you to get Daybreak Blue access, it only takes 15 mins and you don’t want to have to do it in the middle of an incident.
Jesus is God ✝︎ retweeted
OK so I dug it a little. ≈100% of eMudhra's shit certificates were issued by CertiNext, a partner of Internet2/InCommon, who serve "US universities and research institutions". On Oct 2025, Tripti Sinha became I2 CEO; by Apr 2026, they migrated to CertiNet from Sectigo as their CA provider for the next 15 years, without any clear reason, despite eMudhra's patchy track record.
🤔🤔🤔
Elite Human Capital: never bet against.
Jesus is God ✝︎ retweeted
Guys I’m scared the takeoff is starting. I swear any one of the ~10 CVEs that dropped in the last 24 hours would’ve been “one of the worst in recent years” except a new one is dropping every hour
Jesus is God ✝︎ retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
Jesus is God ✝︎ retweeted
People don’t necessarily think of @OpenAI as a cyber security company but I think over the next 6 months or so that will change.
The php vuln found today is important and I’m proud of our contribution to discovering it.
There is much much more we can/have/will do to ensure we keep the Internet safe.
Watch this space!
Jesus is God ✝︎ retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Jesus is God ✝︎ retweeted
Introducing Cube Arena.
AI models solving a Rubik’s cube they can only see as a picture.
Most AI benchmarks are text questions with fixed answers. The answers leak online, models train on them, and the scores stop meaning much. And you never get to watch a model actually work.
So we built one you can watch 👀 Our server scrambles a cube, sends the model one picture, and checks every move it sends back. No cube data, no solver, no faking it. Runs play out live, and anyone can plug in a model.
> Ladders from 1 move to a full scramble
> 2×2 up to 5×5
> Interactive or one-shot (no peeking)
> 3 lives, no clock. Lose them all and you’re out 💀
> Same cubes for every model, made by our server
> Clear the ladders to unlock the 4×4 Gauntlet 💪
> Open source, plays over MCP
What one cube tests:
> Seeing a flat picture as a 3D cube
> Planning a short way back to solved
> Tracking 20 stickers moving per turn
> Recovering from a wrong turn
> Knowing when to stop thinking and answer
We made it because watching a model stare at a cube and figure it out is genuinely fun 😂 and nobody can memorize it.
There are more models than we can run alone. Run one, or apply to run them for the Verified board and get your name on our contributors page 🥹
Links in comments.
With ♥️ by KRNL Studio






























