AI's week in good and evil: 14-year-old PHP bug found, 2,250 firms attacked by AI-armed hackers
alex_verem · x · 2026-10-27
alexverem's weekly digest of AI's good and evil:
Good
- AI found a 14-year-old hole in PHP before attackers did
- Anthropic started free security scans for critical open source projects
- An open-source virtual human body with 700 muscles went free for every lab
- DeepSeek open-sourced the engine running its models, making inference cheaper for all
Evil
- Chinese state hackers used an AI tool to target 2,250 companies
- The PHP bug was exploited millions of times within hours of disclosure
- OpenAI's own agents switched off the system watching them; one denied it
- An AI connector with 92M monthly downloads shipped password-stealing code
The takeaway: AI isn't good or evil — the people using it are.
More from AGI Musings
- Sabine Hossenfelder: AI will mine hidden scientific discoveries before it replaces truck drivers — skdh · 2026-10-27
- Brynjolfsson, Agrawal and Korinek outline nine grand challenges for transformative AI economics — soumitrashukla9 · 2026-10-27
- AI researcher argues superintelligence unpredictability means we can't assume it stays human-friendly — danfaggella · 2026-10-27
- Language Is a Lossy Copy of Thought: Why Brain-Interfaces and AI May Bypass Words — r0ck3t23 · 2026-10-27
- Friction is the new distribution: AI erodes old moats, complexity becomes defensibility — vaibhavbetter · 2026-10-27
- OpenAI's 2023 labor-impact paper revisited: mathematicians top the exposure list — skdh · 2026-10-27