they’re calling it the black October lmao.
> node.js: security vulnerability.
> PHP: critical RCE vulnerabilities.
> tensorlake: npm package infected.
> liteLLM: malicious PyPI + Docker releases
> Railway: customer secrets exposed
> zeabur - infrastructure breached.
> OpenCode: AI API keys exposed.
> OVHcloud CLI: official binaries backdoored.
> RankMath PRO: malware inside official plugin.
> TeamUpdraft: customer data compromised.
> ConnectWise: cloud backup identities compromised.
> SubQuery: backdoored npm package.
> GhostAction: GitHub repos with malicious workflows (related to the broader Shai-Hulud/ChainDrop activity).
> eMudhra: certificate authority keys compromised (with downstream impact on Tailscale).
this some complete madness bro. 1/3 of the internet is fucked.
japan is now in a state of emergency due to the PHP vulnerability lol.
皆様に、今夜に対応して頂きたい大至急のお願いです。
多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な2件の脆弱性に関する注意喚起を行っています。
公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時(日本時間)に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。
修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。
国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。
国家サイバー統括室(注意・警戒情報)(@cyber_forecast) / X
not gonna lie, this is pretty cool.
tibo's new domain is teasing GPT-6.5 in a very unusual but cool way. the count down inside opensi.lol ends on November 1 at exactly 10 AM San Francisco time.
not bad tibo the reset guy.
wayback machine of this site apparently shows a “donation form”
lmao, they got me.
how are we falling for this.. come on now, tibo is not going to have set up a “opensi.lol” with a stripe donation form 🤦♂️ even if the person behind this has since removed that. clever from the person who created it because some accounts will just amplify anything!
this tryscope x agentmail collab is pretty cool!
@agentmail built email for ai agents, so scope used it as the test. they gave agents real inboxes and normal jobs then watched the whole task from start to finish.
the thing is that most agents don't fail on the complex part.
they failed on the small tasks nobody notices, like inbox that "looked empty" so they just stopped looking, or a warning that made them too scared to finish the task they were asked to do.
that's what @tryscope_app is here for.
> it shows and logs how agents find your product.
> what they came to do.
> and pinpoint the exact moment they give up so you can fix that step and turn bots into actual customers.
try it on your own product tryscope.com/demo
founders aren't even losing real human customers anymore lol
🤝 Paid partnership
How good are AI Agents at using your tool?
Find out with Scope: tryscope.com/demos
We partnered with @AgentMail to test 25 model and harness combinations across 7 email tasks.
AgentMail co-founder @adisingh shares why they needed an eval in the first place and why they chose Scope to run it 👇
this is still a demo from that HackiOS project showing iOS 16.5 booting on a couple snapdragon phones with their own custom UEFI + kernel stuff. theres no public builds or code yet tho, still experimental.
hackios.net/en
the Chinese have successfully reverse engineered a version of iOS and can now be installed on Android hardware.
hackintosh for phones is finally here.
Readers added context they thought people might want to know
The post overstates unverified demo videos as a successful, installable iOS port on Android; the HackiOS project remains experimental with no public code or builds.
hackios.net

















