450 tok/sec ⚡ Abliterated DeepSeek V4.1 Flash 1017 $0.22 / $0.75 / $0.045 cache available on Refuseless API Watch it do cyber work at light speed

Please don't do this. If you have multiple accounts, don't put them all in T3 Code. CLIProxy is trivial to set up. I've loved it so much that I forked it (hence "prox"). So easy to share my 7 Claude subs and 3 Codex subs across 12 computers :) Best part? Less random signouts

Introducing Jev @typesafeai powered people-search Just $0.0089/lead, No more $600 subscriptions, Try it at treg.to/people-search - 85% cheaper than Clay - #1 on people search bench accuracy - Plugin to any agent to find anyone Fully open source, 0% markup Git Repo below 👇

Now live: abliterated-model-large-flash (our version of DeepSeek-V4.1-Flash-1017). It is a cheaper alternative to our GLM-5.3-based model for product owners and defenders who need access to the most cyber-capable models. - 1M context - Vision - Zero input/output retention or training We believe paying customers should be in control, and over the past few months, leading experts and major brands have adopted our models. abliteration.ai

So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.

皆様に、今夜に対応して頂きたい大至急のお願いです。   多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。   公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。   修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。   国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。 国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X

2 days ago, everything felt normal. Sites were up. No one was panicking. Now PHP2Shell is everywhere, Cloudflare is reporting millions of exploit attempts, and suddenly PHP security is everyone's top priority. The bugs didn't appear overnight. They were already there. What changed was our awareness of them. Makes you wonder how many vulnerabilities are sitting in production right now, quietly waiting to be discovered. Are we getting better at finding them, or have we just been lucky so far?

🚨 BREAKING: @Wiz_io Research uncovers #PHP2SHELL, a decade-old PHP Core vulnerability reaching CVSS 9.2 severity impacting 70% of the Internet.

Some government websites in Europe and elsewhere went offline after vulnerabilities in PHP, a widely used programming language, were uncovered using AI. Cybersecurity Reporter Raphael Satter explains why reut.rs/4jyVubl

🚨 Security vulnerabilities reported in a SINGLE day: PHP — 2 CVEs Node.js — 10 CVEs NGINX — 5 CVEs Go — 1 CVE GitLab — 12 CVEs eMudhra — CA certificate compromise