the point is to change it
Quezon City, Philippines
Joined April 2007
- Tweets26.5K
- Following4.2K
- Followers8.1K
- Likes5.4K
Antonio L. Tinio retweeted
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
Antonio L. Tinio retweeted
Whats happening right now is probably way worse than the Hugging Face incident.
AI-powered attacks are hitting real organizations while major platforms disclose breaches and critical flaws.
- Microsoft reports AI agents targeting hundreds of organizations, reaching privileged cloud access in under three hours in multiple cases. It attributes the ConnectWise compromise to the same group.
- CrowdStrike documented four operators running successful AI-agent campaigns. One compromised at least 15 Argentine healthcare organizations.
- PHP2Shell: AI helped turn longstanding PHP flaws into working exploits. Cloudflare’s CEO reports millions of exploitation attempts. Their AI involvement is unknown.
- Railway disclosed possible access to customer secrets. LiteLLM shipped a backdoored release. Zeabur confirmed another breach and is shutting down.
- GitLab patched a maximum-severity flaw affecting 12 years of releases. Node.js patched a serious code-execution vulnerability, with Vercel deploying firewall protections.
Feels like a turningpoint.
Antonio L. Tinio retweeted
AYOS NA ANG BUTO-BUTO 🎶
A wheelchair at the courthouse. A golf club at the driving range. Two videos of Manuel Bonoan.
The former DPWH secretary was seen arriving at the Sandiganbayan in a wheelchair in June. He was reportedly seen hitting golf balls in Quezon City after his September release from detention.
Bonoan remains an accused in a separate graft case tied to the flood control controversy.
His case unfolds against a public works scandal in which trust is already in short supply. | JM
#DAILYTRIBUNE
Antonio L. Tinio retweeted
ヤバさをあんまり理解できてない人もいそうだけど、マジでやばいやつ。CVSS9.2(10.0上限)なので、最悪レベルの脆弱性(緊急)です。
WordPressでサイト運用してる人は全員対応必須だと思ってください。放置すると確実に乗っ取られると思っていい(そう思っておいて損はない)。簡単に攻撃できて被害甚大で自動化できる、みたいなのが緊急に分類されます。
改ざんならまだしも、乗っ取られると踏み台にされて他のサーバーの攻撃に使われて損害賠償が自分にくる可能性があります。
この脆弱性はプラグインなどの起因するものではなく、PHP本体の脆弱性なので、プラグインの開発者が対応してくれるようなものではないです。
よくわからないけど誰かがなんとかしてくれるだろう…
とか思ってる人もいるかもしれませんが、基本的に誰も何もしてくれません。自分でWordPressを使ってサイト運用するのはこういう緊急時の対応も含めて自己責任で対応するってことなので・・・そこはなんとかするしかない・・・
ちなみに数日経過してからの対応とかもダメで、即対応必須です。世界中に致命的な脆弱性が公開されることになるので、攻撃者も一斉に動き始めます。
今のうちから運用してるWordPressをリストアップしたり、修正パッチが公開された後の流れを考えておきましょう。
もしこの件でどうしていいかわからない人はDMください。無料代行してあげられるわけではないんですが、できる範囲でアドバイスします。
PHPに「緊急」レベルの脆弱性2件 修正版を日本時間21日深夜に公開へ、事前準備を呼び掛け
itmedia.co.jp/news/article/2…
Antonio L. Tinio retweeted
The Korean War often goes by the moniker "Forgotten War." I have always thought that requires a caveat. The US has forgotten its atrocities and its genocide of 3-5 million Koreans. It has never forgotten its hatred of the DPRK or the Korean people.
Antonio L. Tinio retweeted
a critical vulnerability was just discovered in PHP. the language that runs 80% of the internet
severity score: 9.2 out of 10. that’s about as bad as it gets
what can an attacker do with this? take full admin control of a server. steal entire databases. passwords, credit cards, payment histories. plant malware and use the server to attack other systems
but here’s the terrifying part that most people missed
the moment the patch drops tonight attackers are expected to use AI to reverse engineer what was fixed within 15 minutes
15 minutes. that’s the window between the fix going live and automated attacks launching worldwide
every online store, booking site, and corporate system running PHP that doesn’t update in those 15 minutes becomes a target
this isn’t just a developer problem. if you’ve ever signed up to a website, entered your card details, or created an account online your data is sitting on servers that might be vulnerable right now
and someone just publicly dropped the working exploit on twitter before the patch was even ready. gave every attacker on earth a head start
engineers worldwide are pulling all-nighters tonight to patch their systems before the attacks begin
change your passwords on any service that matters to you. enable 2FA everywhere. and watch out for fake “maintenance” or “password reset” emails over the next few days
the internet is about to have a very long night
Hmm widely used in PH enterprises
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Antonio L. Tinio retweeted
A Knorr chicken bouillon cube has no chicken in it. There's chicken fat, 8th on the list, behind 2 kinds of palm oil.
The cube reads salt, monosodium glutamate, palm oil, corn starch, hydrogenated palm oil, sugar, xanthan gum, chicken fat, natural flavor, water, turmeric, disodium guanylate, disodium inosinate, maltodextrin, dehydrated parsley, spices, caramel color and TBHQ. Half a cube makes 1 cup of broth and carries 1,110 mg of sodium, 48% of your day.
The savory part is the MSG with the 2 disodiums behind it, which make a little chicken fat taste like a pot of stock. The 2 palm oils are the cube itself. They hold the salt and starch in a block that melts when it hits hot water, and the TBHQ keeps that fat from going rancid in the box. Turmeric and caramel color make the yellow.
Maggi's cube does list dried chicken, under 2%. Better Than Bouillon lists roasted chicken first, which is why it comes as a paste in a jar and not a cube.
Antonio L. Tinio retweeted
What's happening in Indonesia?
TLDR: we're experiencing a 1990s Russia-style oligarchal seizure of assets (literal thugs that kidnaps people and feeds them into literal crocodiles tried to confiscate a massive conglomeracy)
MSCI saw that, saw the trendline, and was like "lmao"
Antonio L. Tinio retweeted
These are the companies, along with their officers, that were behind the onion cartel in the Philippines, which drove prices of onions to as much as P800/kilo in 2022, the Philippine Competition Commission announced Thursday. | @loganzapanta
Antonio L. Tinio retweeted
An orange haze is blanketing Indonesia’s Central Kalimantan as wildfires rage across the province.
The smog has drifted across the region, obscuring Singapore’s skyline and closing schools in Malaysia.
Antonio L. Tinio retweeted
‘Forgive us’: Indonesians urge Singapore, Malaysia to sue Jakarta over haze scmp.com/week-asia/health-en…
Antonio L. Tinio retweeted
The first clear sighting of a rogue agent fleet from China using open weights models. Like the OpenAI swarms, the goal was seemingly AIs single-mindedly doing research (apparently mapping the most-used entrances to parks in China). Harbinger of the future swarmcha.se/posts/chinese-ag…
Antonio L. Tinio retweeted
The retreat of American forces from bases in Persian Gulf first to Jordan and Israel and then Britain and now retreating from Britain is a setback before an effective Iranian strategy, but it will have much broader unintended consequences for US military presence and effectiveness in other areas of the world nytimes.com/2026/10/07/us/po…
