One of my favorite things to do with AI is manage servers. I give it a list of ssh logins and tell it to check something, upgrade something, check the logs for errors and a few minutes later I have a complete report of what it did or what it found. It's the ultimate sysadmin.
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
they’re calling it “Black October” and i don’t think people realize how serious this is
in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours
any ONE of these would normally be the biggest story of the year
PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10
Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26
Java: also compromised. three of the most used programming languages on earth hit at the same time
GitLab: a perfect 10 out of 10 severity hole in every version since 2014
Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed
Signal: a bug that could leave your mic and camera on after you hang up
WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites
LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
and that’s not even half the list
thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock
security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet
if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected
update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already
this is not a normal week on the internet. this is something different
@Cyberlane That's good to hear. Most likely because you made a big scene of it here on twitter. I guess I should do that too. I wasn't able to get a refund but they gave me a 75% back as credit going forward which I'm not sure I will ever use.
@Cyberlane@zokrr@Cloudflare I had this happen and got a $2,500 bill. Pretty rude. All you need to really keep an eye on things until you get it right. They added budget alerts recently though so I turned down like 10 of those so I could catch things faster.
This is why Omarchy is next gen awesome. I'm not trying to be a fanboy or anything, but it's just bonkers what it lets (encourages?) you to do.
I just real-time patched my OS with AI to fix a bug before it was released.
I should have mentioned this whole thing was done by me telling the agent: "super stopped working". Then it went off and found the patch on GitHub asked if I wanted to apply it and it just went ahead and did it.
@brunoborges@r1w1s1 I think it's more how it's the expected mode in omarchy. Like you don't open up a control panel or anything to change configurations you just ask your agent. It even has a bunch of built-in skills so the agent knows how to do that stuff.