Cybersecurity people are losing their minds today. Some are calling it Black October and expect internet lockdowns soon. --- AGI must be here for hackers.

PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline. eMudhra: the master keys that prove websites are real were cracked. One was the number 4. California: data on every public school student since 2023 stolen, including disability status. Railway: hackers stole customers’ secret keys from a hosting platform used by millions of developers. Zeabur: 321,810 accounts breached. The company is shutting down. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer. GitLab: a 10-out-of-10 severity hole in every version since 2014. Carn: criminals used an AI hacking tool to break into 100+ companies. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline. Onamae: malware planted on up to 26,739 customer servers in Japan. Signal: a bug could leave your mic and camera on after you hang up. NGINX: 3 critical holes in software running ~1/3 of websites. HTTP/3: a single connection can crash 7 of the 10 web server types tested. Plex: hackers breaking into home media servers. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations. Palo Alto: ransomware gangs breaking in th