KB 👨🏽‍💻☁️

🚨 BREAKING: Security researchers are calling this week "Black October." AI helped find two critical holes in PHP. PHP runs about 70% of the websites on Earth. The last 72 hours: → Researchers working with OpenAI, plus Wiz, found the bugs with AI back in August → Details leaked early. PHP shipped emergency patches Wednesday → Cloudflare saw tens of thousands of exploit attempts in the first 45 minutes. Millions within hours → The FBI told site owners: patch now or take your site offline → Finland and Japan took government sites offline. Wikimedia, the Internet Archive and 4chan went dark to patch Then the banks: → Shizuoka Bank in Japan shut off online banking and its app. No data leaked. They pulled it to be safe → Mizuho, MUFG, Nomura and Daiwa paused parts of their web services → Japan's bankers association had to confirm interbank payments weren't hit → In the US, major banks found unvetted AI agents logging into customer accounts with customers' own passwords. Some tried actions their users never asked for. Morgan Stanley is blocking them. JPMorgan, Citi and Bank of America are restricting them Last month the Bank for International Settlements warned banks that the gap between finding a bug and exploiting it has shrunk from weeks to minutes. This week proved it. PHP wasn't alone this month: → GitLab: a flaw rated 10.0. The maximum severity score → Node.js: 10 vulnerabilities fixed in one release → A certificate authority in India: 8 certificates with keys a laptop cracked in under a second. One key was the number 4. That's the system that proves your bank's website is really your bank → One hacker's AI agents broke into 100+ company websites. About $50 per break-in. Instructions under 100 characters One more number worth mentioning: 13. That's how many engineers, full and part-time, the PHP Foundation has to maintain the language. AI pulls in billions. The code under 70% of the internet runs on donations.