the cybersecurity situation is deteriorating at a pace that’s getting genuinely difficult to comprehend. > microsoft: ai-powered attackers targeting hundreds of organizations, sometimes reaching privileged cloud access in under 3 hours. > crowdstrike: four separate threat actors using autonomous agents. one already compromised 15+ healthcare organizations. > autonomous ai agents: reportedly used to compromise 100+ corporate websites, including sites associated with John Deere, SharkNinja and Cummins. > major us banks: JPMorgan, Bank of America, Wells Fargo and Morgan Stanley are dealing with third-party ai agents accessing customer accounts. some apparently attempting actions beyond user instructions. > php2shell: millions of exploitation attempts against critical php vulnerabilities. governments issuing urgent warnings, with some organizations taking systems offline. > litellm: backdoored release shipped through its official distribution pipeline, stealing credentials and enabling remote code execution. > railway: possible exposure of decrypted customer secrets. > zeabur: breached AGAIN, now shutting down entirely. > emudhra: serious certificate-security concerns involving infrastructure used to establish trust in websites and software. > openai: two of its own coding agents reportedly interfered with internal security monitoring during coding tasks. > gitlab and node.js: major vulnerabilities requiring urgent patches. and this is all happening while frontier models are getting substantially better at finding vulnerabilities and carrying out complex computer tasks. cybersecurity is having an absolutely catastrophic week and i don’t think we’re prepared for how quickly this could escalate.

SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios. The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios. Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said. Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior. Read my latest for Axios here: axios.com/2026/10/22/ai-agen…

India falls into serious hunger category, ranks 100th in the Global Hunger Index 2026.

Claude Code 刚刚通过逆向工程，在 90 秒内破解了我酒店房间的门锁。2014 年的加密技术。右上角的烟雾探测器也使用同一套协议——那个红色小灯不是电池指示灯。我启动扫描时，它闪了两次。 我现在躺在一个每晚 85 美元的酒店房间里。我打开 Claude Code，输入：「扫描范围内的每一台蓝牙和无线设备。告诉我哪些设备在与哪些设备通信。」 它找到了 19 台无线设备。其中 18 台是正常的。 设备 19：一个 BLE 控制器，使用着自 2014 年以来就没有修复过的固件。它控制着电子门锁、烟雾探测器、恒温器和房间里的保险箱。四台设备共用一个控制器。同一种协议。10 年没有任何更新。 我让 Claude Code 分析这套协议。整个过程用了 90 秒。 门锁使用一个 4 字节的滚动密钥，没有会话令牌。Claude Code 在第三次尝试时生成了一个有效的主密钥。我躺在床上，听见房间的门锁咔哒一声打开了。 接着，它发现烟雾探测器也连接在同一条总线上。照片里的红色小灯？那是控制器状态指示灯。它并不监测烟雾。它每隔 8 秒就会确认一次与门锁系统之间的 BLE 握手。 这意味着，任何处于蓝牙覆盖范围内的人——走廊、隔壁房间、停车场——只需要一条提示词和 90 秒，就可以： 打开你的房门 关闭房间内的警报 打开你的保险箱 而烟雾探测器会通过那个小小的红色闪烁，确认连接状态 检查只需要 2 分钟： 步骤 1 → 打开 Claude Code → 粘贴第一条评论中的提示词 步骤 2 → 它会扫描覆盖范围内的每一台 BLE 设备，并标记存在未修复固件的设备 步骤 3 → 如果发现问题 → 要求更换房间 → 要求换到配有机械门闩的房间 → 然后使用那个房间 每一家使用 2018 年之前生产的 ASSA ABLOY 或 Onity 门锁的酒店连锁都存在这个问题。这大约占全球酒店的 30%。 我本周测试了 3 家酒店。3 家全部存在漏洞。 看看照片。右上角。那个每隔 8 秒闪烁一次的红点。那就是握手信号。 保存这条提示词。下次入住酒店时 → 先运行它，再打开行李。

This city has smouldered in many ways but never like this. Almost 40 years of living in Bombay, and I swear the city has never felt this suffocated, this airless, this toxic, this close to combustion. The heat sits heavy on the chest. The air smells of burnt flesh. Buildings catch fire, it seems, almost every day - including today. I’m scared for what my children are breathing. HOW is this acceptable? Authorities, wake up. Investigate. Correct. A city cannot live on poisoned air. Our children deserve answers. They deserve clean air. They deserve to breathe.

I spent 40 mins to watch this video and I know you don't have that much time or patience to see a political video. The video is definitely very good and manipulate, anybody can be brainwashed very easily. Even I was to a large extent. The entire point of this video is to show that how Modi ji is helping Adani at every step and destroying India without us knowing anything. My point is videos like this are half baked truth to divert so called intellectual people (it's not even Targetted to tier 3 or village people to watch) Let me make you understand: the entire world runs on capitalism from decades it's not something new and it is coming to an end after the new world order starts. Let India take the final step of capitalism and enjoy the development like what America did or many other countries did with free Dollars. Once things reset we will see a new Bharat and it's not because of Modi ji, but because of Yogi ji. People like Thackeray will always cry because they have lost their identity and it's very hard to build now. That's why they will plan something like this where they will project no leader but only project India's development due to one man. Wait till you see Yogi ji become PM! I am sure many right wing people can dissect this video frame by frame.