Additionally most of these services that haven't been upgraded in years or haven't had a competent developer working on them, aren't built around least-privilege isolation. It's not just the website that gets compromised, it's the whole box and absolutely everything on it.
This will be huge. Wordpress, lots of old-school govt websites (such as some in Thailand, DLT as an example): all vulnerable to being compromised rapidly once this is disclosed in 34 minutes. Guaranteed that many hackers have their multi-agent dorkers + autopwn already ready for the disclosure. Be careful out there.
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
This is the doom I predicted a few days ago, coming for Photoshop. A clean-room open-source reimplementation.
No prizes for guessing that they decompiled Photoshop to source code, processed that to some kind of non-code specification language, then fed the spec to an LLM with an instruction to generate Rust.
Adobe just got nuked. And closed source is dead, dead, dead.
https://t.co/0sxtGNaPtq
Bangkok Declares All 50 Districts Disaster Zones After Record Rainfall
Bangkok Governor Chadchart Sittipunt has declared all 50 districts disaster-affected areas after nearly 48 hours of continuous rain caused widespread flooding and traffic disruption.
Around 30 million cubic metres of water accumulated across the capital, with rainfall reaching 274.5 mm in Min Buri and 273 mm in Khlong Sam Wa. Additional water also flowed into Bangkok from Nonthaburi and Pathum Thani.
Authorities are operating pumps at a combined capacity of 1,200 cubic metres per second and distributing one million sandbags. Unaffected Bangkok schools are being opened as temporary shelters, while assistance is being prioritized for vulnerable residents, including bedridden patients.
Officials said water levels in major canals were beginning to stabilize and could improve within six hours if no further rain falls. Residents have been advised to stay home and avoid flooded roads, particularly in Ramkhamhaeng, New Phetchaburi, Ekkamai, Sena Nikhom 1, King Kaeo, and Lat Krabang.
Vid from Phetburi-Thonglor via @shiro_sh
#Thailand #Bangkok #น้ำท่วม #น้ำท่วมกรุงเทพ
introducing herdr-projects
what they said. but you know - for @herdrdev
install: herdr plugin install eliasstravik/herdr-projects
repo: https://t.co/qgPlKxBFNg
enjoy!
got Jev to review my PRs. ~200x cheaper than Claude and it answers in half a second
6 real PRs in the video. $0.00007 each. 1,000 PRs = 7 cents vs ~$14.50 on Opus 5
paste a diff → ONE call to @typesafeai → 14 typed checks come back as probabilities:
hardcoded secret, sql injection, touches auth, deletes tests, breaks api, migration, debug leftovers, does the description actually match the diff, blast radius, reviewer effort…
code turns that into a verdict: BLOCK / security review / nits / merge. anything a critical check isn't sure about (0.35–0.65) gets escalated to a human or a big model instead of guessed
Researchers mathematically proved that AI will cause something worse than mass unemployment.
It’s called “The Tragedy of the Cognitive Commons."
For the last three years, everyone has obsessed over a single question: Will AI steal our jobs?
That’s the wrong question.
A breakthrough research paper just exposed a much darker reality.
The real danger is that AI will quietly destroy the human capacity to do anything well.
Here is how the it works.
Every industry relies on what researchers call the "Cognitive Commons”, a shared pool of deep professional expertise that regenerates itself generation after generation.
How is that expertise built?
Through friction. Through doing the boring, difficult, junior-level work. Through manual trial and error.
That is how you build "Internalized Mastery."
When companies adopt AI to automate entry-level work, the logic looks airtight on a quarterly balance sheet. Cut costs. Speed up output. Skip the grunt work.
Every individual company is making a rational choice. But collectively, they are draining the pool dry.
When you eliminate junior roles, you destroy the pipeline that creates senior experts.
The researchers call the result the Validation Tether.
Effective human oversight of AI depends entirely on deep domain expertise.
As professionals increasingly delegate thinking to machines, they lose the mastery required to spot when the AI is wrong.
The experts validating AI outputs today look competent.
The terrifying question is: Who comes after them?
When the current generation of veterans retires, who will be left with the skills to audit the systems running our economy?
Nobody.
We are trading our long-term intellectual independence for short-term productivity boosts.
Every time you let AI bypass the struggle, you are borrowing expertise from the future.
And the interest rate is your profession's ability to think for itself.
It looks like ~4,000 BTC just moved from the Liquid Network bridge all at once with an OP Return saying, "we are whitehats. contact us on chain".
TXID:
c103de95817b43f2df635ec6f35ff126ca26a7c6d20570c4b01866b2b3e69a19
153,000,000 American driver licenses leaked in KYC hack
This is 63% of all American driver licenses
In US driver licenses function as valid government-issues photo IDs
https://t.co/zGltbJhf8J
If you run Core Lightning: when the release is published: upgrade with signed binaries, or start your node with `--offline`.
Details stay under embargo for two weeks. Previous releases, including 26.04, are unsupported.
Full details when the embargo lifts. The 26.09 release is still planned for late September.