they’re calling it the black October lmao.
> node.js: security vulnerability.
> PHP: critical RCE vulnerabilities.
> tensorlake: npm package infected.
> liteLLM: malicious PyPI + Docker releases
> Railway: customer secrets exposed
> zeabur - infrastructure breached.
> OpenCode: AI API keys exposed.
> OVHcloud CLI: official binaries backdoored.
> RankMath PRO: malware inside official plugin.
> TeamUpdraft: customer data compromised.
> ConnectWise: cloud backup identities compromised.
> SubQuery: backdoored npm package.
> GhostAction: GitHub repos with malicious workflows (related to the broader Shai-Hulud/ChainDrop activity).
> eMudhra: certificate authority keys compromised (with downstream impact on Tailscale).
this some complete madness bro. 1/3 of the internet is fucked.
France, and the rest of Europe, could learn a lot from Japan. Beautiful country, beautiful people. Hope they keep shining the light.
We have huge respect for the engineering at Vercel and are excited they are building with Pi-Durable
Introducing 𝚍𝚞𝚛𝚊𝚋𝚕𝚎-𝚑𝚊𝚛𝚗𝚎𝚜𝚜. Run Pi, OpenCode, Codex, Claude Code, eve, fx, or your own harness durably on Vercel.
With 𝚍𝚞𝚛𝚊𝚋𝚕𝚎-𝚑𝚊𝚛𝚗𝚎𝚜𝚜, agents automatically resume work after failures and run for hours, days, or months. vercel.com/blog/making-every…
Pablo Figueroa retweeted
Pi is one of the coolest projects in the AI world today. I'm on their team. Giving developers and companies choice of model, control over the runtime, data, skills, plugins… Excited to have great support on @vercel:
vercel.com/blog/making-every…
Claude Security now keeps up with your code as it changes.
Connect your repositories once. Claude runs a deep first scan, then re-scans as changes land, so findings stay close to the current state of your code.
In public beta on Claude Enterprise.
Pablo Figueroa retweeted
Use Grok 4.7 in Viktor
Viktor × @SpaceXSI
The AI employee 70,000+ teams have hired. Now with Grok 4.7.
Try it at viktor.com
✅ Everything is back up
Ubuntu published the backported PHP fix very fast, great work @ubuntu and @ThePHPF team!!!
I pre-emptively disconnected ALL my sites / VPS servers from the web
I'll wait for the patch to hit at 2 PM UTC
If you have a PHP website, probably good to take them down until you patch PHP
69.3% of the web runs on PHP so this is going to be intense!
Good time maybe to buy cybersecurity stocks? (not financial advice)
Try Grok @Bot
Pablo Figueroa retweeted
Here's how to use Grok Bot with the action button on your iPhone
1. Open Settings
2. Search for Action Button
3. Swipe to Shortcut
4. Tap Choose a Shortcut
5. Search for Grok Bot
6. Tap Start Voice Chat under Grok Bot
7. Press the Action Button to start a voice chat


































