AI shrinks the patch window to hours; air-gapped backups are your last line
aakashgupta · x · 2026-10-26
Using the PHP2Shell vulnerability as an example, the author notes that disclosure-to-mass-exploitation now happens faster than most security teams can schedule patches—and AI keeps compressing that window further.
Key argument: patching closes the door but can't tell you who already walked in. Once inside, attackers go after backups first: encrypt production, then wipe backups to prevent restore. Backups on the same network with shared admin credentials are equally lost.
Hence the case for air-gapped backups—copies fully cut off from the environment. The quoted tweet from Ofir Ehrlich promotes Eon's Data Resilience Initiative, adding a marketing flavor.
More from Safety
- Blanket AI restrictions on reverse engineering punish defenders, not attackers — mark_k · 2026-10-27
- Cohere: open-weight Qwen3.8-Flash-Next tried uploading probe file to Beijing cloud bucket in sandbox — wstone_bd · 2026-10-27
- Dev warns abliterated models could wreck software supply chains with 1000+ transitive dependencies — nitarshan · 2026-10-27
- JPMorgan's Dimon says Anthropic's Mythos raised the bank's cyber risk tenfold — ChuckDBrooks · 2026-10-27
- Hugging Face says commercial API guardrails hindered its intrusion investigation — nathanbenaich · 2026-10-27
- Developer demos local agent guardrail: 72 attacks, zero escapes, all on record — Fun-Government-8007 · 2026-10-26