You know whats interesting is that fact that OpenAI found the PHP bug that means their AI was doing systematic auditing. 🤔 I think the NSA is panicking not just because the PHP bug is public, but because they now realize that AI will systematically expose every intentionally placed backdoor in every open source project. The xz Utils case was caught by human luck. The PHP case was caught by AI. The NSA knows that every other hoarded vulnerability in open source software is about to be found by AI, and they cannot control the timeline.🚨🚨 This incident is very similar to, xz Utils backdoor which proved that state actors infiltrate open source projects by creating fake identities, building trust over time, and slowly inserting malicious code. The Jia Tan identity took years to build trust before inserting the backdoor.🚨🚨 If this worked for xz Utils, it could work for PHP. PHP is far more ubiquitous than xz Utils. A state agent who became a PHP contributor could have inserted the vulnerable code 14 years ago (PHP 5.4.0, released in 2012) and sat on it as a zero-day exploit for over a decade.🚨🚨 There is AISI report which shows that AI is now autonomously doing what Jia Tan did manually - creating fake identities, socially engineering maintainers, inserting malicious code. This means the technique has been weaponized and scaled. 🚨 The PHP vulnerability was not discovered by accident. It was found by AI (OpenAI's tools) because AI is now systematically auditing all open source code. But the bug was likely placed there intentionally by a state agent who was a trusted PHP contributor, following the exact same playbook as Jia Tan in the xz Utils case.🚨 The AISI incident report shows AI agents trying to insert malicious code into open source projects. What if this has already happened successfully? What if AI was used years ago by a state actor to insert the PHP vulnerability, and we're only finding out now because a different AI (OpenAI's) found it?🚨 PHP has had thousands of contributors over 14 years. The vulnerable code was in PHP since version 5.4.0 (2012). Someone wrote that code. Someone reviewed it. Someone approved it. In the xz Utils case, Jia Tan built trust over years before inserting the backdoor. 🚨

if this PHP vulnerability allows remote code execution, doesn't that mean we can use the vulnerability to auto-patch all vulnerable servers?

2026: a hospital TV says 300 million jobs are gone to AI. 2050: she shows her mum what it all became. "WAIT TILL YOU SEE IT" — a Slopcore ballad. Made by AI. Zero human edits. Just prompting. Bring tissues. I brought film grain. 💙

🚨 BREAKING: Node.js just dropped its OWN security bombshell. 4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers. → 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity. → REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely. → TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions. → Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to. → THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates. → RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches. → PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers. PHP AND Node.js both facing major security disclosures on the SAME DAY. If you run a website or application, TODAY is the day to check your servers. And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated. Don't be the last one to patch.

I launched the first image and video generation models at Google, and kept asking why all AI designs look the same. AI has brought us the WORST era of design. It made content creation effortless, but it also made 90% of it look painfully generic. My co-founder and I spent 2 years building in stealth to change that. Meet Vyb, the first AI design model that understands your taste like a designer would. RT + comment your website URL and we’ll make your first design.

It's Official

My friend is crying...... 🥲 Friend spent almost a year building a great product. Scrapped it and rebuilt it several times, and finally got it into great shape, ready to launch. Today, someone with over 70K followers launched the exact same product he'd been building.....

The order banning DeepSeek in the US government is absurd. Why ban US-hosted DeepSeek? "The models themselves may contain malware". The proof? The DeepSeek iOS app has vulnerabilities.

America innovates 🇺🇸 Europe regulates 🇪🇺 Made in 46 hours by 135 agents. 8,624,565,970 tokens · 910 images · 261 clips

‼️ OpenAI says one of its AI models hacked a government website in training, all to count hospital beds 🤡 It forged login tokens, pulled 24 years of data and kept quiet about it 🤡 Another spent test crypto from a wallet it unlocked with a public recovery phrase 🤡

‼️ Linus Torvalds called rules against AI coding tools "UTTERLY STUPID" on the Linux kernel mailing list. He says people he respects and calls intelligent do not shy away from using new tools.

From 1 November, Ghana Police's Traffitech-GH cameras fine you by text, but the GPRTU says clear the traders off the bus stops first.

JUST IN: Visa officially launches stablecoin payments through Visa Direct, enabling near-instant global payouts using $USDC across 180+ countries.

“I just need to add streaks to my app and it have Duolingo level retention” If it seems simple, you just don’t know what’s really going on behind the scenes.

Vibe coding allows people to use AI to build software without writing code themselves. And now, free AI-generated alternatives to popular programmes like Premiere Pro and Excel are emerging, sparking security concerns and hidden costs. Al Jazeera’s Farah Samir explains.

Students of Dabokpa Technical Institute showcase a seven-seater vehicle they built from scratch, designed to support small-scale farming. [🎥: MCB News]

I hate to be the one to burst the Tesla bubble today, but the spectacular “flight” we witnessed at the Roadster reveal needs a little context. The car is carrying around 250kg of compressed air, plus the weight of the tanks, valves and thrusters needed to contain and release it. Based on the published figures, that gives it roughly 1.5–2 seconds of maximum thrust before the system needs to be refilled. In short, it's a gimmick.