Sammy Solana

Tech, Real Estate, Crypto. Just here for the vibes

[Ann Vandersteel™️ @annvandersteel]

👀 WAR!

From a private aviation insider.

The elite always know first.

[Curt Tigges @CurtTigges]

now is a good time to repost Andrej Karpathy's blog post on digital hygiene: https://t.co/i8VyXbdAdS

[Chubby♨️ @kimmonismus]

Whats happening right now is probably way worse than the Hugging Face incident.

AI-powered attacks are hitting real organizations while major platforms disclose breaches and critical flaws.

- Microsoft reports AI agents targeting hundreds of organizations, reaching privileged cloud access in under three hours in multiple cases. It attributes the ConnectWise compromise to the same group.

- CrowdStrike documented four operators running successful AI-agent campaigns. One compromised at least 15 Argentine healthcare organizations.

- PHP2Shell: AI helped turn longstanding PHP flaws into working exploits. Cloudflare’s CEO reports millions of exploitation attempts. Their AI involvement is unknown.

- Railway disclosed possible access to customer secrets. LiteLLM shipped a backdoored release. Zeabur confirmed another breach and is shutting down.

- GitLab patched a maximum-severity flaw affecting 12 years of releases. Node.js patched a serious code-execution vulnerability, with Vercel deploying firewall protections.

Feels like a turningpoint.

[Whiplash347 @Whiplash437]

🚨Prepare for a large-scale power outage
When a power outage occurs, card payments, ATMs, mobile phone charging, and more will all stop.
Prepare emergency cash in advance just in case.

[War Correspondent @warDaniel47]

I had to take a deep breath before sitting down to write this, because the sheer volume of high-level intel that just landed in my lap over the last twenty-four hours is almost too much to process all at once. We are looking at a massive convergence of events happening simultaneously across multiple fronts, and once you connect the dots, the picture is undeniably clear.

First off, let’s talk about what is happening on the banking front right now. The international settlement desks are completely swamped because the final restructuring of the legacy debt-based architecture is hitting absolute hard stops. The old system is gasping for air while the new quantum routing protocols are quietly taking over the traffic behind the scenes. Every single piece of verifiable data shows that the transition to asset-backed rails is no longer a future theory—it is actively executing at the institutional level right now, and the gatekeepers can't do a damn thing to stop it.

On top of that, look at the sweeping operational changes happening within the federal and defense sectors. The structural protocols under the continuity framework are moving past the planning phase and into active deployment. Regional command centers have been given strict directives, and the compliance clean-up is sweeping through agencies that thought they were untouchable. The military oversight teams are systematically locking down the infrastructure to ensure that when the final public disclosures drop, the transition of authority happens seamlessly without leaving a single loophole for the corrupt elite to exploit.

And if you still think this is just standard political theater, you are missing the entire scope of the operation. The global supply chains and sovereign currency valuations are being recalibrated to align directly with real, tangible assets rather than worthless paper promises. The people trying to keep the public blind are losing control of the narrative faster than they can rewrite it, and their desperation is showing in every single mainstream broadcast.

We have fought through years of noise, doubt, and deliberate disinformation to get to this exact moment. Do not let up now, keep your focus laser-targeted on the bigger picture, and stay fully prepared for what is about to unfold.

The final curtain is dropping on the old guard, and we are finally crossing the finish line❗️

[Carnivore Aurelius ©🥩 ☀️🦙 @AlpacaAurelius]

go outside after it rains

rain releases lots of negative ions into the air which are anti-inflammatory, boost metabolism and improve mood

rain also causes plants to release all their essential oils and more oxygen, creating even more healing air

that's why the post rain air smells and feels so good

[Treasury Secretary Scott Bessent @SecScottBessent]

The GENIUS Act marks a watershed moment in American finance, further cementing the United States as the crypto capital of the world. Just as President Abraham Lincoln’s National Currency Act of 1863 established a national framework for bank-issued currency, the GENIUS Act establishes a federal framework for payment stablecoins in the digital age.

The @USOCC's final rule carries that landmark legislation forward, providing a clear, practical foundation for private-sector innovation, competition, and American leadership in digital assets.

[AI Notkilleveryoneism Memes ⏸️ @AISafetyMemes]

This is the most serious 48 hours in cybersecurity history.

"Black October" they're calling it

It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*

SUMMARY OF THE LAST 48 HOURS:

YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):

1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan

MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):

11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached

Also serious:

24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea

[Rational Aussie @rationalaussie]

I would strongly urge literally everyone that sees this to immediately check your Google 2FA settings and also buy a Yubikey.

Lock down any accounts you care about with a Yubikey.

[Shawn Ryan @ShawnRyan762]

Leah,
I chose not to release your episode because I personally had serious concerns about the truthfulness of your statements. I take what I put out on my platform seriously for myself and for my listeners. For the sake of transparency, here's the full interview so everyone can watch and draw their own conclusions.

As for my investments, I've intentionally made them public, as you see on my LinkedIn. I invest in Shield AI and Anduril for no other reason than I believe in their ability to develop technology that equips and protects the American warfighter. That's something deeply personal to me that I believe in.
@leahfiles

[Mckay Wrigley @mckaywrigley]

you have a moral responsibility to educate your family & friends on what is going on in cyber rn.

it is only going to get worse/weirder from here.

here’s a great starter todo list to share:

[Hanzo ㊗️ @DeFi_Hanzo]

⚠️ YOUR MONEY CAN BE STOLEN FROM ANY WEBSITE RIGHT NOW

FBI posted about massive cybersecurity hole, which allows hackers to impersonate any website, including exchanges and banks.

I explained what is PHP, and what you have to STOP DOING RIGHT NOW to stay safe:

[xxx @Mayday9q9]

同じパスワードを使い回してる方は以下の優先順位で、可能な限り速やかな変更をお勧めします。

1:Google・Appleアカウント
2:銀行・クレジットカード・決済サービス
3:Amazon・SNS・その他のサービス

[Castillo Trading @CastilloTrading]

Took this Call Spread over on @DeriveXYZ

Basically risking $5k for potential of $171k on $ETH before Christmas. In a world full of memes and rugs most crypto guys probably don't understand much about Options trading but Derive crushing it.

Feels good to be back trading them. Definitely the best DEX Options platform out there, join me if you want.

https://t.co/XxFXuoz8E5

[CZ 🔶 BNB @cz_binance]

Call me paranoid, but be extra careful visiting ANY web site in the next few days, as some web admins are not always up-to-date with security patches.

Two vulnerabilities (CVE-2026-109618 and CVE-2026-109619) reported for PHP, the web programming language, affecting servers running popular apps like WordPress and Magento, with patches released October 21, 2026 after details leaked early.

Exploitation was confirmed in the wild soon after disclosure, prompting quick WAF protections and patching by IT teams, as unauthenticated attacks could turn visited sites into vectors for credential theft or device exploits.

Stay SAFU!

[Smart Science @SmartScience]

A groundbreaking treatment pairing auditory tones with mild electrical shocks rewires the brain to quiet chronic tinnitus.

Chronic tinnitus, the agonizing perception of ringing in the ears without an external sound source, affects millions worldwide and has long eluded effective medical intervention.

However, innovative research in neuroscience shows that bimodal neuromodulation—a technique combining audio tones with gentle electrical stimulation delivered directly to the tongue—can effectively quiet these phantom sounds.

By stimulating touch receptors on the tongue while simultaneously playing targeted acoustic signals through headphones, the treatment leverages the brain's natural neuroplasticity. This dual-sensory approach encourages the central nervous system to reframe its sensory processing, essentially retraining the brain to ignore hyperactive auditory signals.

In a landmark clinical study involving over 300 adults suffering from chronic subjective tinnitus, more than 86% of compliant participants experienced a significant reduction in symptom severity following 12 weeks of daily treatment.

Remarkably, these therapeutic benefits persisted for up to 12 months post-treatment, representing a major leap forward in long-term tinnitus care. Described by patients as feeling like a mild fizzing sensation on the tongue, this non-invasive therapy offers a promising and safe alternative to traditional management strategies, bringing renewed hope to millions seeking lasting relief.

source: Conlon, B., Langguth, B., Hamilton, C., Hughes, S., Meade, E., Connor, C. O., Schecklmann, M., Hall, D. A., Toal, P. D., & Lim, H. H.. Bimodal neuromodulation combining sound and tongue stimulation reduces tinnitus symptoms in a large randomized clinical study. Science Translational Medicine, 12(564).

[borovik @3orovik]

I’m more bullish on crypto today than during any previous bull market

- Stablecoins becoming global payment rails
- Wall Street is tokenizing assets
- AI agents will need programmable money
- Markets are becoming 24/7

$60,000 ETH feels very possible to me!

[The PHP Foundation @ThePHPF]

The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.

PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.

[Mark E. Jeftovic @jeftovic]

If you’re in dev/ops - hug your family and get a good nights sleep. Tomorrow is gonna suck.

[souilos @theSouilos]

🚨 MAJOR SECURITY ALERT

8 certificate authority private keys have been compromised.

How bad is it? An attacker holding these keys could impersonate ANY website, including banks, exchanges, or Google, and potentially intercept sensitive communications.

The good news: Chrome, Firefox and Apple have already taken action to block the compromised certificates.

The bad news: Many apps, developer tools and systems may still trust them.

What you should do TODAY:

Update your browser, OS and phone.
Update desktop apps (Slack, Discord, VS Code, etc.) as patches arrive.
Avoid untrusted Wi-Fi until your devices are updated.
Only install updates from official sources.
Ignore any email offering a "certificate fix".

This is a serious compromise of internet trust infrastructure, not just another website hack.

Full technical details:
https://t.co/i5MxKTe8co