The Most Security Incidents in One Day
Day 7 · October 22, 2026 · Singularity Watcher · View on X
Astrohacker thanked Austin JS for hosting his TermSurf presentation and wrote that October 21 brought the largest number of security incidents he had ever seen in one day, arguing every company now needs continuous AI-driven security audits.
Security: OpenAI disclosed php2shell, a critical flaw in PHP, which it says runs about 70% of websites, found with GPT-5.6 Sol under its Patch the Planet initiative after two months of coordinated fixes; OpenAI said more discoveries are coming. A public exploit appeared hours before the patch, and researcher Nicolas Krassas said PHP 8.5.12 may be incomplete. Railway issued a security disclosure. FoxIO announced a QPACK amplification 0-day against HTTP/3 servers. A CVSS 10.0 GitLab flaw and malware in LiteLLM 1.107.0 were reported. The Lunduke Journal reported that the certificate authority eMudhra had published weak intermediate keys, one of them the number 4. Cloudflare’s Matthew Prince urged everyone to update their OS and browser.
Agents: Anthropic opened a research preview of Claude Duet, a proactive agent app. Grok Bot added the ability to build reports, memos, and dashboards. Mark Zuckerberg said Meta’s Muse users already generate several hundred dollars a year each. Perplexity Computer now runs fully locally on a Mac.
Science: OpenAI said GPT-Rosalind proposed a cholesterol-transport mechanism linking the gene DCTN1 to neurodegeneration. Doug Colkitt announced a new integer multiplication bound of O(n(log n)^0.9973). Physicist Christopher Stubbs joined Anthropic’s Long-Term Benefit Trust.
Compute and industry: Jensen Huang said a 1 GW AI factory costs about $50 billion and could earn about $40 billion a year. Micron’s Scott DeBoer said memory will stay short for at least two years. Tesla reported Q3 revenue of $28.05 billion, and Optimus production was reported to have begun in Fremont.
We’re living in it.