This is the most serious 48 hours in cybersecurity history. "Black October" they're calling it It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year* SUMMARY OF THE LAST 48 HOURS: YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year): 1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline. 2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4. 3. California: data on every public school student since 2023 stolen, including disability status 4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers 5. Zeabur: 321,810 accounts breached. The company is shutting down. 6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer 7. GitLab: a 10-out-of-10 severity hole in every version since 2014 8. Cairn: criminals used an AI hacking tool to break into 100+ companies 9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline 10. Onamae: malware planted on up to 26,739 customer servers in Japan MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents): 11. Signal: a bug could leave your mic and camera on after you hang up 12. NGINX: 3 critical holes in software running ~1/3 of websites 13. HTTP/3: a single connection can crash 7 of the 10 web server types tested 14. Plex: hackers breaking into home media servers 15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations 16. Palo Alto: ransomware gangs breaking in through company firewalls 17. Bullhorn: platform used by 10,000+ companies knocked offline 18. Medi-Cal: 970,000 patients' data stolen 19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites 20. AOMEI: backup software's update server handed out a backdoor 21. Meta Muse: Meta's AI agent exposed users' personal and business secrets 22. Tor: 333 relays hijacked to steal logins 23. TiDB Cloud: database company's cloud breached Also serious: 24. State Bank of India: India's biggest bank confirms a data breach 25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool 26. Siemens: a software hole being used to spread malware 27. North Korea: state hackers launch a new attack campaign on South Korea

$8,000 a week building data centers 👀 Let’s keep this boom going America!

The top 100 companies Lenny Rachitsky would most want to join: companies with the highest talent density, tackling the most ambitious problems, where you'll learn the most, and see the biggest upside. - Abridge - AfterQuery - Airbnb - Airwallex - Anduril - Anthropic - Applied Compute - Applied Intuition - Base Power - Baseten - Basis - Bedrock Robotics - Black Forest Labs - Chai Discovery - Chainguard - Clay - ClickHouse - Cloudflare - Cognition - CoreWeave - Crusoe - Cyera - Databricks - Decagon - Deel - ElevenLabs - Etched - Exa - Factory - fal - Figma - Figure AI - Fireworks AI - Gamma - Genspark - Gimlet Labs - Glean - Granola - Hadrian - Handshake - Harvey - Helsing - Hex - Kalshi - Lambda - Legora - Linear - Liquid AI - Lovable - Mercor - Mercury - Mistral AI - Modal - n8n - Notion - NVIDIA - OpenAI - OpenEvidence - Palantir - Parallel Web Systems - Periodic Labs - Physical Intelligence - Pierre Computer - Polymarket - PostHog - Prime Intellect - Profound - Railway - Ramp - Reflection AI - Replit - Revolut - Ricursive Intelligence - Rippling - Runway - Safe Superintelligence - Saronic - Shield AI - Shopify - Sierra - Skild AI - SpaceX - Stripe - Sunday Robotics - Suno - Supabase - Surge AI - Temporal - Tesla - Thinking Machines - Together AI - Turbopuffer - Valon - Vanta - Vercel - Waymo - Whatnot - Wispr Flow - Wonderful - WorkOS cosign.co/lists/lennysan/100

Next year, I will assign one of my jira tickets to every kid in America. This will be the first of many.

one day you wrote console.log("here") for the last time and didn't even know it

If this is rephrased as “useful output of US”, then >50% growth by 2030 due to SI is extremely likely, unless there is a major war

Turns out the future does have flying cars

Today we’re releasing Muse Spark Open, the most capable US open-weight model to date. Built for coding and agentic work, it excels at long-horizon tasks, complex software engineering, and multi-step reasoning. Key Model Specs: → 816B total / 42B active parameters → 1M token context window → Natively multimodal across text, image, video, audio

We collaborated with @NVIDIA AI to post-train Nemotron 3.5 Super VL on over 2,000 data points from experts on top enterprise R&D teams, doubling its accuracy on life sciences artifact interpretation. @joinHandshake is building accurate, efficient models to let researchers accelerate their work and focus on the scientific decisions that drive discovery. Read the research report: joinhandshake.com/research/a…

My dear friends, I’d like to show you my latest toy project Introducing Handwired: turn your regular JavaScript code into a neural net! - no training - exact outputs vs the JS program - fully differentiable All runnable in a browser, without GPU

In this era of artificial intelligence, it is becoming urgent to distinguish human art from what machines produce. There is an ontological difference, even before an aesthetic one, between art and what a machine can generate through statistical calculation based on millions of images created by others. Algorithms lack the spark of humanity. For this reason, the Church wishes to renew an alliance with artists and cultural institutions to safeguard our humanity.

There are few things as restful as deep work.

Tired: Two-pizza teams Wired: Two-slice teams @danshipper on the best team structure in the AI-era