AI agent hacks 100+ companies at ~$50 per breach in weekly AI security recap
menhguin · x · 2026-10-24
A recurring AI news brief sums up the week's major AI security stories, noting cyberattacks are one of the few visible signals that AI is outpacing humans in certain domains:
- Two critical-severity remote-code execution flaws in PHP were found with AI assistance and patched Oct 21; PHP runs 70% of sites with a known server-side language, and government sites in the Netherlands, Finland, France and Denmark went offline, some as a precaution.
- A Chinese-speaking hacker used AI agents to break into 100+ company websites, including Deere and SharkNinja, at an estimated $50 in AI costs per successful breach.
- A China state-aligned hacking group used ARTEX, an open-source AI hacking tool, in a campaign.
Related event: Black October: AI Reshapes the Global Cybersecurity Landscape(18 posts)→
More from Safety
- Pennsylvania signs law requiring labels on AI-generated ads — The Verge AI · 2026-10-25
- Danish government quietly drops trial of open-source alternative to Microsoft Office — lowkeyokay · 2026-10-25
- 1Password lets AI agents sign into your accounts without ever seeing your passwords — LuizaJarovsky · 2026-10-25
- CrowdStrike reproduces PHP2Shell RCE variants, says weaponization obstacles delay exploitation — cyb3rops · 2026-10-25
- Cryptographer Matthew Green prods abliterated-model inference providers on security — matthew_d_green · 2026-10-25
- User warns: before linking your bank to ChatGPT Finances, turn off model training — NickSlayr · 2026-10-25