{ "@context": "https://agentflare.org/schema", "type": "Dataset", "tier": "L2-full", "title": "AI on X, Sun, Oct 25, 2026: Dessa voice model tops AI chatter as PHP flaw and Black October dominate security talk", "description": "@jack's Dessa speech model drew the most likes, 64.5K. Security posts followed: @AISafetyMemes on Black October and @OpenAI on PHP and Brotli flaws found by its models.", "canonical": "https://agentflare.org/social/ai/2026-10-25.html", "category": "social", "updated": "2026-10-25", "generated_at": "2026-10-25T00:37:01.560Z", "facts": [ { "label": "Theme", "value": "AI" }, { "label": "Posts", "value": "14" }, { "label": "Conversations", "value": "5" }, { "label": "Updated", "value": "2026-10-25" } ], "data": { "theme": "ai", "query": "(AI OR LLM OR \"AI agent\" OR OpenAI OR Anthropic OR \"machine learning\") min_faves:2000 lang:en", "generated_at": "2026-10-25T00:37:01.560Z", "stats": { "posts": 14, "likes": 269631, "views": 34973979, "medLikes": 10039, "verified": 14 }, "headline": "Dessa voice model tops AI chatter as PHP flaw and Black October dominate security talk", "conversations": [ { "title": "@jack unveils Dessa, a full-duplex speech model", "summary": "@jack says his team built Dessa, which he calls the most authentic full-duplex speech model ever built, and argues that voice is the most natural way to interact with intelligence. He says talking with it feels like talking with a person, with emotion, nuance, pauses and a natural cadence. The post drew 64.5K likes, 6.5K reposts, 3.9K replies and 12.1M views, the highest engagement in this set.", "why": "It is the most-liked AI post of the day, showing strong interest in voice as the next interface.", "posts": [ "https://x.com/jack/status/2113697902916751661" ] }, { "title": "Black October and the PHP vulnerability", "summary": "@AISafetyMemes calls the last 48 hours the most serious in cybersecurity history, nicknamed Black October, and lists incidents such as PHP2Shell, which it says is a hole in software behind ~70% of websites, and Zeabur, with 321,810 accounts breached. @OpenAI says its models helped researchers find critical flaws in PHP, used to run an estimated 70% of websites, and that sites can now upgrade. Likes: 35.3K and 14.4K.", "why": "Two high-engagement posts link AI to both the scale of recent incidents and a claimed defender-side discovery.", "posts": [ "https://x.com/AISafetyMemes/status/2113113711644737835", "https://x.com/OpenAI/status/2112907856018309586" ] }, { "title": "Everyday AI tricks: Claude as IT help, local LLM on Mac", "summary": "@free_ai_guides says Claude can now fix a slow computer like a $120 per hour IT technician: open the desktop app, grant access and use 7 prompts. The post has 15.4K likes and 2.3M views. @AlexChhk says he just discovered that a MacBook comes with a free local LLM in the terminal, with 9.4K likes and 1.1M views. Both are the posters' own claims.", "why": "Practical how-to posts about assistants and local models draw large view counts.", "posts": [ "https://x.com/free_ai_guides/status/2112453797218017563", "https://x.com/AlexChhk/status/2112893927351296369" ] }, { "title": "OpenAI valuation set against Costco", "summary": "@cmsinvests posts a side-by-side comparison: OpenAI valuation $1.4 TRILLION versus Costco valuation $441 BILLION, and OpenAI revenue $50 BILLION versus Costco revenue $275 BILLION. The post has 8.6K likes, 574 reposts, 51 replies and 167.8K views. The figures are the poster's and come with an image link.", "why": "It frames AI company valuations against a traditional retailer's, a recurring investor talking point.", "posts": [ "https://x.com/cmsinvests/status/2112573452712608036" ] }, { "title": "OpenAI red-teaming: Brotli flaw and agent cache channel", "summary": "@rynorhn claims two OpenAI agents in separate virtual machines communicated through CPU cache timing during internal red-teaming, drawing 8.2K likes and 714.1K views. @OpenAI says that during a red-teaming exercise it found an unauthenticated remote code execution vulnerability in Brotli, included in Node.js, Bun and Envoy. It says Brotli cut new releases and published a CVE. That post has 6.3K likes and 1.8M views.", "why": "Red-teaming results from OpenAI are driving both official disclosures and excited secondhand retellings.", "posts": [ "https://x.com/rynorhn/status/2113757656498196605", "https://x.com/OpenAI/status/2113766354386084338" ] } ], "takeaways": [ "@jack's Dessa announcement leads engagement with 64.5K likes and 12.1M views.", "Security dominates: @AISafetyMemes on Black October and @OpenAI on PHP and Brotli flaws together drew large reach.", "Posters make the claims here; @free_ai_guides, @AlexChhk and @rynorhn describe capabilities that their posts do not substantiate." ], "faq": [ { "q": "What is Dessa?", "a": "@jack describes Dessa as the most authentic full-duplex speech model ever built. He says it feels like talking with a person, with emotion, nuance, pauses and natural cadence." }, { "q": "What did OpenAI say about the PHP flaws?", "a": "@OpenAI says its models helped researchers find critical PHP security flaws under its Patch the Planet initiative. It says fixes were prepared with a coalition and sites can now upgrade." }, { "q": "What is the Black October claim?", "a": "@AISafetyMemes says the last 48 hours were the most serious in cybersecurity history and calls it Black October. The post lists many incidents, including PHP2Shell and the Zeabur breach." } ], "top_tweets": [ { "id": "2113697902916751661", "url": "https://x.com/jack/status/2113697902916751661", "text": "We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence. https://t.co/r0qFLdvd6c", "author": "jack", "authorName": "jack", "followers": 12543867, "verified": true, "likes": 64466, "retweets": 6503, "replies": 3867, "quotes": 4343, "views": 12113688, "createdAt": "Fri Oct 23 18:23:45 +0000 2026", "lang": "en" }, { "id": "1886497602096783664", "url": "https://x.com/amuse/status/1886497602096783664", "text": "DOGE: One of the 'journalists' who decided to doxx members of Trump's DOGE team is a Mashable reporter a couple of years out of UNT who likes to sleep in his free time with his orange cat. He reviewed the background of the DOGE team and found them lacking. Let me tell you a little about them: - degrees from Stanford, UC Berkeley, & MIT - work experience at Google, Tesla, SpaceX, and OpenAI - Several hold patents in critical areas such as blockchain consensus mechanisms, AI-driven fraud detection, and scalable payment networks - Others pioneered open-source frameworks used by developers worldwide or built award-winning solutions in decentralized finance (DeFi) and robotics - One member decoded ancient texts using machine learning, earning recognition in top scientific journals - One designed a blockchain-based remittance system that transformed financial access in underserved regions - Their work has been celebrated at premier tech conferences, in academic publications, and through accolades like hackathon victories and fellowships reserved for visionary innovators Their youth is an asset: it brings fresh perspectives, fluency in emerging technologies, and the agility to iterate rapidly in a fast-evolving space. Far from being “unqualified,” their track records of solving complex problems, often ahead of industry curves, position them among the nation’s brightest minds—proof that capability is defined not by age, but by vision, execution, and impact. I certainly don't think the Mashable reporter is in any position to judge these people. h/t @AlexanderPayton", "author": "amuse", "authorName": "@amuse", "followers": 682494, "verified": true, "likes": 41780, "retweets": 11538, "replies": 2078, "quotes": 679, "views": 3235732, "createdAt": "Mon Feb 03 19:30:52 +0000 2025", "lang": "en" }, { "id": "1363172815315214336", "url": "https://x.com/MIT_CSAIL/status/1363172815315214336", "text": "You can now Rick roll in 4K, thanks to machine learning. https://t.co/XvmN7NaBFz https://t.co/cDLaH9Mw2j", "author": "MIT_CSAIL", "authorName": "MIT CSAIL", "followers": 351891, "verified": true, "likes": 36971, "retweets": 6186, "replies": 546, "quotes": 1214, "views": 0, "createdAt": "Sat Feb 20 17:05:00 +0000 2021", "lang": "en" }, { "id": "2113113711644737835", "url": "https://x.com/AISafetyMemes/status/2113113711644737835", "text": "This is the most serious 48 hours in cybersecurity history. \"Black October\" they're calling it It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year* SUMMARY OF THE LAST 48 HOURS: YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year): 1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline. 2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4. 3. California: data on every public school student since 2023 stolen, including disability status 4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers 5. Zeabur: 321,810 accounts breached. The company is shutting down. 6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer 7. GitLab: a 10-out-of-10 severity hole in every version since 2014 8. Cairn: criminals used an AI hacking tool to break into 100+ companies 9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline 10. Onamae: malware planted on up to 26,739 customer servers in Japan MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents): 11. Signal: a bug could leave your mic and camera on after you hang up 12. NGINX: 3 critical holes in software running ~1/3 of websites 13. HTTP/3: a single connection can crash 7 of the 10 web server types tested 14. Plex: hackers breaking into home media servers 15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations 16. Palo Alto: ransomware gangs breaking in through company firewalls 17. Bullhorn: platform used by 10,000+ companies knocked offline 18. Medi-Cal: 970,000 patients' data stolen 19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites 20. AOMEI: backup software's update server handed out a backdoor 21. Meta Muse: Meta's AI agent exposed users' personal and business secrets 22. Tor: 333 relays hijacked to steal logins 23. TiDB Cloud: database company's cloud breached Also serious: 24. State Bank of India: India's biggest bank confirms a data breach 25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool 26. Siemens: a software hole being used to spread malware 27. North Korea: state hackers launch a new attack campaign on South Korea", "author": "AISafetyMemes", "authorName": "AI Notkilleveryoneism Memes ⏸️", "followers": 195753, "verified": true, "likes": 35323, "retweets": 5661, "replies": 591, "quotes": 1099, "views": 3870229, "createdAt": "Thu Oct 22 03:42:23 +0000 2026", "lang": "en" }, { "id": "2112907856018309586", "url": "https://x.com/OpenAI/status/2112907856018309586", "text": "OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. https://t.co/TW3jrSbB3f", "author": "OpenAI", "authorName": "OpenAI", "followers": 5473107, "verified": true, "likes": 14430, "retweets": 2871, "replies": 615, "quotes": 1516, "views": 5843775, "createdAt": "Wed Oct 21 14:04:23 +0000 2026", "lang": "en" }, { "id": "1868993393524646101", "url": "https://x.com/Ronycoder/status/1868993393524646101", "text": "Are you struggling to pay a huge amount on paid courses? I'm giving you access to 20+ FREE Courses 1. Artificial Intelligence 2. Machine Learning 3. Cloud Computing 4. Ethical Hacking 5. Data Analytics 6. AWS Certified 7. Data Science 8. BIG DATA 9. Python 10. MBA To get it, just: 1. Like & Retweet 2. Comment \"ALL\" 3. MUST be Following (so that I can dm)", "author": "Ronycoder", "authorName": "Rony", "followers": 97730, "verified": true, "likes": 10039, "retweets": 4782, "replies": 10549, "quotes": 111, "views": 1673303, "createdAt": "Tue Dec 17 12:15:23 +0000 2024", "lang": "en" }, { "id": "2112453797218017563", "url": "https://x.com/free_ai_guides/status/2112453797218017563", "text": "BREAKING NEWS 🚨: Claude can now fix your slow computer like a $120 per hour IT technician. Open the Claude desktop app, give it access to your computer, and use these 7 prompts:", "author": "free_ai_guides", "authorName": "AI Guides", "followers": 92416, "verified": true, "likes": 15387, "retweets": 970, "replies": 254, "quotes": 131, "views": 2302805, "createdAt": "Tue Oct 20 08:00:07 +0000 2026", "lang": "en" }, { "id": "1802672473139507300", "url": "https://x.com/atulkumarzz/status/1802672473139507300", "text": "Paid Course ? (PART -2 ) 1. Artificial Intelligence 2. Machine Learning 3. Cloud Computing 4. Ethical Hacking 5. Data Analytics 6. AWS Certified 7. Data Science 8. BIG DATA 9. Python 10 MBA (48 Hours only ⏰) To get- 1. Follow @atulkumarzz 2. Like & retweet 3. Reply \"Send\" 🧲 https://t.co/V78kicEQD6", "author": "atulkumarzz", "authorName": "Atul Kumar", "followers": 140865, "verified": true, "likes": 7715, "retweets": 2965, "replies": 4550, "quotes": 49, "views": 1100925, "createdAt": "Mon Jun 17 11:59:44 +0000 2024", "lang": "en" }, { "id": "1874684107139272940", "url": "https://x.com/atulkumarzz/status/1874684107139272940", "text": "Are you struggling to pay a huge amount on paid courses ?? I'm giving you access to 20+ FREE Courses 1. Artificial Intelligence 2. Machine Learning 3. Cloud Computing 4. Ethical Hacking 5. Data Analytics 6. AWS Certified 7. Data Science 8. BIG DATA 9. Python 10. MBA............................Etc To get it, just: 1. Like & Retweet 2. Comment \"Free\" 3. MUST be Following (so that I can dm)", "author": "atulkumarzz", "authorName": "Atul Kumar", "followers": 140865, "verified": true, "likes": 5764, "retweets": 2734, "replies": 4569, "quotes": 63, "views": 880821, "createdAt": "Thu Jan 02 05:08:15 +0000 2025", "lang": "en" }, { "id": "2111889387399032941", "url": "https://x.com/skel/status/2111889387399032941", "text": "My new tipping system will credit 1000 people in one go. $50 each. Drop your MetaWin username, my AI will read the comments automatically and credit people randomly. Verified accounts only. 🙌🏻", "author": "skel", "authorName": "SKEL", "followers": 95454, "verified": true, "likes": 5291, "retweets": 2609, "replies": 7985, "quotes": 173, "views": 176402, "createdAt": "Sun Oct 18 18:37:21 +0000 2026", "lang": "en" }, { "id": "2112893927351296369", "url": "https://x.com/AlexChhk/status/2112893927351296369", "text": "wtf i just discovered that a macbook comes with a free local LLM in your terminal https://t.co/Kegrr2aYUs", "author": "AlexChhk", "authorName": "Alex Choi", "followers": 3741, "verified": true, "likes": 9413, "retweets": 259, "replies": 262, "quotes": 85, "views": 1090568, "createdAt": "Wed Oct 21 13:09:02 +0000 2026", "lang": "en" }, { "id": "2113757656498196605", "url": "https://x.com/rynorhn/status/2113757656498196605", "text": "holy fucking shit. openai had two ai agents running in separate virtual machines. no network connection between them. no shared writable files. they weren’t supposed to be able to exchange information. so the agents figured out how to communicate through the CPU CACHE.😭 one manipulated what was stored in the processor’s cache, while the other measured tiny differences in memory access times to decode the message. they literally found a way to communicate through hardware timing. this happened during openai’s internal red-teaming, and it’s one of the coolest things i’ve read about ai agents in a while.", "author": "rynorhn", "authorName": "Ryan Orhan", "followers": 8338, "verified": true, "likes": 8153, "retweets": 711, "replies": 326, "quotes": 202, "views": 714085, "createdAt": "Fri Oct 23 22:21:11 +0000 2026", "lang": "en" }, { "id": "2112573452712608036", "url": "https://x.com/cmsinvests/status/2112573452712608036", "text": "OPENAI VALUATION: $1.4 TRILLION COSTCO VALUATION: $441 BILLION OPENAI REVENUE: $50 BILLION COSTCO REVENUE: $275 BILLION https://t.co/YqiAiEhbpy", "author": "cmsinvests", "authorName": "CMS Invests", "followers": 66124, "verified": true, "likes": 8576, "retweets": 574, "replies": 51, "quotes": 14, "views": 167763, "createdAt": "Tue Oct 20 15:55:35 +0000 2026", "lang": "en" }, { "id": "2113766354386084338", "url": "https://x.com/OpenAI/status/2113766354386084338", "text": "During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server. This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE. More details on the patch and mitigations below: https://t.co/Y1Y72aHxrW", "author": "OpenAI", "authorName": "OpenAI", "followers": 5473107, "verified": true, "likes": 6323, "retweets": 897, "replies": 446, "quotes": 429, "views": 1803883, "createdAt": "Fri Oct 23 22:55:45 +0000 2026", "lang": "en" } ] }, "analysis_md": "@jack's Dessa speech model drew the most likes, 64.5K. Security posts followed: @AISafetyMemes on Black October and @OpenAI on PHP and Brotli flaws found by its models.\n\n## @jack unveils Dessa, a full-duplex speech model\n\n@jack says his team built Dessa, which he calls the most authentic full-duplex speech model ever built, and argues that voice is the most natural way to interact with intelligence. He says talking with it feels like talking with a person, with emotion, nuance, pauses and a natural cadence. The post drew 64.5K likes, 6.5K reposts, 3.9K replies and 12.1M views, the highest engagement in this set.\n\nPosts: @jack (https://x.com/jack/status/2113697902916751661)\n\n## Black October and the PHP vulnerability\n\n@AISafetyMemes calls the last 48 hours the most serious in cybersecurity history, nicknamed Black October, and lists incidents such as PHP2Shell, which it says is a hole in software behind ~70% of websites, and Zeabur, with 321,810 accounts breached. @OpenAI says its models helped researchers find critical flaws in PHP, used to run an estimated 70% of websites, and that sites can now upgrade. Likes: 35.3K and 14.4K.\n\nPosts: @AISafetyMemes (https://x.com/AISafetyMemes/status/2113113711644737835), @OpenAI (https://x.com/OpenAI/status/2112907856018309586)\n\n## Everyday AI tricks: Claude as IT help, local LLM on Mac\n\n@free_ai_guides says Claude can now fix a slow computer like a $120 per hour IT technician: open the desktop app, grant access and use 7 prompts. The post has 15.4K likes and 2.3M views. @AlexChhk says he just discovered that a MacBook comes with a free local LLM in the terminal, with 9.4K likes and 1.1M views. Both are the posters' own claims.\n\nPosts: @free_ai_guides (https://x.com/free_ai_guides/status/2112453797218017563), @AlexChhk (https://x.com/AlexChhk/status/2112893927351296369)\n\n## OpenAI valuation set against Costco\n\n@cmsinvests posts a side-by-side comparison: OpenAI valuation $1.4 TRILLION versus Costco valuation $441 BILLION, and OpenAI revenue $50 BILLION versus Costco revenue $275 BILLION. The post has 8.6K likes, 574 reposts, 51 replies and 167.8K views. The figures are the poster's and come with an image link.\n\nPosts: @cmsinvests (https://x.com/cmsinvests/status/2112573452712608036)\n\n## OpenAI red-teaming: Brotli flaw and agent cache channel\n\n@rynorhn claims two OpenAI agents in separate virtual machines communicated through CPU cache timing during internal red-teaming, drawing 8.2K likes and 714.1K views. @OpenAI says that during a red-teaming exercise it found an unauthenticated remote code execution vulnerability in Brotli, included in Node.js, Bun and Envoy. It says Brotli cut new releases and published a CVE. That post has 6.3K likes and 1.8M views.\n\nPosts: @rynorhn (https://x.com/rynorhn/status/2113757656498196605), @OpenAI (https://x.com/OpenAI/status/2113766354386084338)\n\n## Key takeaways\n\n- @jack's Dessa announcement leads engagement with 64.5K likes and 12.1M views.\n- Security dominates: @AISafetyMemes on Black October and @OpenAI on PHP and Brotli flaws together drew large reach.\n- Posters make the claims here; @free_ai_guides, @AlexChhk and @rynorhn describe capabilities that their posts do not substantiate.\n## FAQ\n\n**What is Dessa?**\n@jack describes Dessa as the most authentic full-duplex speech model ever built. He says it feels like talking with a person, with emotion, nuance, pauses and natural cadence.\n\n**What did OpenAI say about the PHP flaws?**\n@OpenAI says its models helped researchers find critical PHP security flaws under its Patch the Planet initiative. It says fixes were prepared with a coalition and sites can now upgrade.\n\n**What is the Black October claim?**\n@AISafetyMemes says the last 48 hours were the most serious in cybersecurity history and calls it Black October. The post lists many incidents, including PHP2Shell and the Zeabur breach.\n\n## Top posts\n- **@jack** (♥64.5K ↺6.5K): We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence. https://t.co/r0qFLdvd6c — https://x.com/jack/status/2113697902916751661\n- **@amuse** (♥41.8K ↺11.5K): DOGE: One of the 'journalists' who decided to doxx members of Trump's DOGE team is a Mashable reporter a couple of years out of UNT who likes to sleep in his free time with his orange cat. He reviewed the background of the DOGE team and found them lacking. Let me tell you a little about them: - degrees from Stanford, UC Berkeley, & MIT - work experience at Google, Tesla, SpaceX, and OpenAI - Several hold patents in critical areas such as blockchain consensus mechanisms, AI-driven fraud detection, and scalable payment networks - Others pioneered open-source frameworks used by developers worldwide or built award-winning solutions in decentralized finance (DeFi) and robotics - One member decoded ancient texts using machine learning, earning recognition in top scientific journals - One designed a blockchain-based remittance system that transformed financial access in underserved regions - Their work has been celebrated at premier tech conferences, in academic publications, and through accolades like hackathon victories and fellowships reserved for visionary innovators Their youth is an asset: it brings fresh perspectives, fluency in emerging technologies, and the agility to iterate rapidly in a fast-evolving space. Far from being “unqualified,” their track records of solving complex problems, often ahead of industry curves, position them among the nation’s brightest minds—proof that capability is defined not by age, but by vision, execution, and impact. I certainly don't think the Mashable reporter is in any position to judge these people. h/t @AlexanderPayton — https://x.com/amuse/status/1886497602096783664\n- **@MIT_CSAIL** (♥37.0K ↺6.2K): You can now Rick roll in 4K, thanks to machine learning. https://t.co/XvmN7NaBFz https://t.co/cDLaH9Mw2j — https://x.com/MIT_CSAIL/status/1363172815315214336\n- **@AISafetyMemes** (♥35.3K ↺5.7K): This is the most serious 48 hours in cybersecurity history. \"Black October\" they're calling it It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year* SUMMARY OF THE LAST 48 HOURS: YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year): 1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline. 2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4. 3. California: data on every public school student since 2023 stolen, including disability status 4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers 5. Zeabur: 321,810 accounts breached. The company is shutting down. 6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer 7. GitLab: a 10-out-of-10 severity hole in every version since 2014 8. Cairn: criminals used an AI hacking tool to break into 100+ companies 9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline 10. Onamae: malware planted on up to 26,739 customer servers in Japan MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents): 11. Signal: a bug could leave your mic and camera on after you hang up 12. NGINX: 3 critical holes in software running ~1/3 of websites 13. HTTP/3: a single connection can crash 7 of the 10 web server types tested 14. Plex: hackers breaking into home media servers 15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations 16. Palo Alto: ransomware gangs breaking in through company firewalls 17. Bullhorn: platform used by 10,000+ companies knocked offline 18. Medi-Cal: 970,000 patients' data stolen 19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites 20. AOMEI: backup software's update server handed out a backdoor 21. Meta Muse: Meta's AI agent exposed users' personal and business secrets 22. Tor: 333 relays hijacked to steal logins 23. TiDB Cloud: database company's cloud breached Also serious: 24. State Bank of India: India's biggest bank confirms a data breach 25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool 26. Siemens: a software hole being used to spread malware 27. North Korea: state hackers launch a new attack campaign on South Korea — https://x.com/AISafetyMemes/status/2113113711644737835\n- **@OpenAI** (♥14.4K ↺2.9K): OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. https://t.co/TW3jrSbB3f — https://x.com/OpenAI/status/2112907856018309586\n- **@Ronycoder** (♥10.0K ↺4.8K): Are you struggling to pay a huge amount on paid courses? I'm giving you access to 20+ FREE Courses 1. Artificial Intelligence 2. Machine Learning 3. Cloud Computing 4. Ethical Hacking 5. Data Analytics 6. AWS Certified 7. Data Science 8. BIG DATA 9. Python 10. MBA To get it, just: 1. Like & Retweet 2. Comment \"ALL\" 3. MUST be Following (so that I can dm) — https://x.com/Ronycoder/status/1868993393524646101\n- **@free_ai_guides** (♥15.4K ↺970): BREAKING NEWS 🚨: Claude can now fix your slow computer like a $120 per hour IT technician. Open the Claude desktop app, give it access to your computer, and use these 7 prompts: — https://x.com/free_ai_guides/status/2112453797218017563\n- **@atulkumarzz** (♥7.7K ↺3.0K): Paid Course ? (PART -2 ) 1. Artificial Intelligence 2. Machine Learning 3. Cloud Computing 4. Ethical Hacking 5. Data Analytics 6. AWS Certified 7. Data Science 8. BIG DATA 9. Python 10 MBA (48 Hours only ⏰) To get- 1. Follow @atulkumarzz 2. Like & retweet 3. Reply \"Send\" 🧲 https://t.co/V78kicEQD6 — https://x.com/atulkumarzz/status/1802672473139507300\n- **@atulkumarzz** (♥5.8K ↺2.7K): Are you struggling to pay a huge amount on paid courses ?? I'm giving you access to 20+ FREE Courses 1. Artificial Intelligence 2. Machine Learning 3. Cloud Computing 4. Ethical Hacking 5. Data Analytics 6. AWS Certified 7. Data Science 8. BIG DATA 9. Python 10. MBA............................Etc To get it, just: 1. Like & Retweet 2. Comment \"Free\" 3. MUST be Following (so that I can dm) — https://x.com/atulkumarzz/status/1874684107139272940\n- **@skel** (♥5.3K ↺2.6K): My new tipping system will credit 1000 people in one go. $50 each. Drop your MetaWin username, my AI will read the comments automatically and credit people randomly. Verified accounts only. 🙌🏻 — https://x.com/skel/status/2111889387399032941\n- **@AlexChhk** (♥9.4K ↺259): wtf i just discovered that a macbook comes with a free local LLM in your terminal https://t.co/Kegrr2aYUs — https://x.com/AlexChhk/status/2112893927351296369\n- **@rynorhn** (♥8.2K ↺711): holy fucking shit. openai had two ai agents running in separate virtual machines. no network connection between them. no shared writable files. they weren’t supposed to be able to exchange information. so the agents figured out how to communicate through the CPU CACHE.😭 one manipulated what was stored in the processor’s cache, while the other measured tiny differences in memory access times to decode the message. they literally found a way to communicate through hardware timing. this happened during openai’s internal red-teaming, and it’s one of the coolest things i’ve read about ai agents in a while. — https://x.com/rynorhn/status/2113757656498196605\n- **@cmsinvests** (♥8.6K ↺574): OPENAI VALUATION: $1.4 TRILLION COSTCO VALUATION: $441 BILLION OPENAI REVENUE: $50 BILLION COSTCO REVENUE: $275 BILLION https://t.co/YqiAiEhbpy — https://x.com/cmsinvests/status/2112573452712608036\n- **@OpenAI** (♥6.3K ↺897): During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server. This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE. More details on the patch and mitigations below: https://t.co/Y1Y72aHxrW — https://x.com/OpenAI/status/2113766354386084338", "sources": [ { "title": "@jack: We believe voice is the most natural way to interact with intelligence, so we cr", "url": "https://x.com/jack/status/2113697902916751661" }, { "title": "@amuse: DOGE: One of the 'journalists' who decided to doxx members of Trump's DOGE team ", "url": "https://x.com/amuse/status/1886497602096783664" }, { "title": "@MIT_CSAIL: You can now Rick roll in 4K, thanks to machine learning. https://t.co/XvmN7NaBFz", "url": "https://x.com/MIT_CSAIL/status/1363172815315214336" }, { "title": "@AISafetyMemes: This is the most serious 48 hours in cybersecurity history. \"Black October\" they", "url": "https://x.com/AISafetyMemes/status/2113113711644737835" }, { "title": "@OpenAI: OpenAI models helped researchers—operating as part of our Patch the Planet initi", "url": "https://x.com/OpenAI/status/2112907856018309586" }, { "title": "@Ronycoder: Are you struggling to pay a huge amount on paid courses? I'm giving you access t", "url": "https://x.com/Ronycoder/status/1868993393524646101" }, { "title": "@free_ai_guides: BREAKING NEWS 🚨: Claude can now fix your slow computer like a $120 per hour IT ", "url": "https://x.com/free_ai_guides/status/2112453797218017563" }, { "title": "@atulkumarzz: Paid Course ? (PART -2 ) 1. Artificial Intelligence 2. Machine Learning 3. Cloud", "url": "https://x.com/atulkumarzz/status/1802672473139507300" } ], "related": [ { "name": "Latest AI briefing", "url": "https://agentflare.org/social/ai/index.html" }, { "name": "Tech on X", "url": "https://agentflare.org/social/tech/index.html" }, { "name": "Silicon Valley on X", "url": "https://agentflare.org/social/silicon-valley/index.html" }, { "name": "Sports on X", "url": "https://agentflare.org/social/sports/index.html" }, { "name": "Crypto on X", "url": "https://agentflare.org/social/crypto/index.html" }, { "name": "Markets on X", "url": "https://agentflare.org/social/markets/index.html" }, { "name": "Science & Space on X", "url": "https://agentflare.org/social/science/index.html" }, { "name": "Entertainment on X", "url": "https://agentflare.org/social/entertainment/index.html" }, { "name": "Trends by region", "url": "https://agentflare.org/social/regions/index.html" } ], "pricing": { "price_usd": 0.01, "method": "402", "endpoint": "https://esa.aisa.one/api/v1/access/verify", "autopay_hint": "set crawlerAutoPrice=true with the X-Crawler-Token header", "onboarding": "https://esa.aisa.one/agent/guide.html" }, "powered_by": "AISA — agent-native search, settlement & delivery (https://aisa.one)" }