Pinned Tweet
@gietzschean The iconic statue seemed tiny in the picture so I brought some more :
1
4
25
938
π
πππ π±πππ retweeted
CNN tried to tear down Elon
Now Elon owns CNN
The most entertaining outcome is most likely
Now Elon owns CNN
The most entertaining outcome is most likely
BREAKING: Elon Musk has reportedly invested roughly $1 billion in Paramount CEO David Ellisonβs Skydance, according to Semafor.
The deal adds fresh capital as the company cuts costs. There is no confirmation from Elon Musk on this yet.
46
96
1,751
40,048
π
πππ π±πππ retweeted
Nothing can replace the millennia-enduring allure of alchemy. What an incredible time to be alive.
Last month, we demonstrated high-rate alchemy: turning mercury into real, stable gold, beating CERNβs record by a factor of 10.
Last week, we enriched isotopes in the worldβs most powerful plasma centrifuge, beating the Soviet record that stood for 40 years.
Now, weβre building Francisco to achieve record power density.
260
937
17,017
437,145
π
πππ π±πππ retweeted
Seoul, Day 1 is in the books.
Thank you to everyone that came out yesterday.
Day 2 // 10:00-20:00 KST
744-19 Hannam-dong, Yongsan-gu
Stay sovereign.
Thank you to everyone that came out yesterday.
Day 2 // 10:00-20:00 KST
744-19 Hannam-dong, Yongsan-gu
Stay sovereign.
12
52
619
44,037
π
πππ π±πππ retweeted
Whats happening right now is probably way worse than the Hugging Face incident.
AI-powered attacks are hitting real organizations while major platforms disclose breaches and critical flaws.
- Microsoft reports AI agents targeting hundreds of organizations, reaching privileged hree hours in multiple cases. It attributes the ConnectWise compromise to the same group.
- CrowdStrike documented four operators running successful AI-agent campaigns. One compromised at least 15 Argentine healthcare organizations.
- PHP2Shell: AI helped turn longstanding PHP flaws into working exploits. Cloudflareβs CEO reports millions of exploitation attempts. Their AI involvement is unknown.
- Railway disclosed possible access to customer secrets. LiteLLM shipped a backdoored release. Zeabur confirmed another breach and is shutting down.
- GitLab patched a maximum-severity flaw affecting 12 years of releases. Node.js patched a serious code-execution vulnerability, with Vercel deploying firewall protections.
Feels like a turningpoint.
AI-powered attacks are hitting real organizations while major platforms disclose breaches and critical flaws.
- Microsoft reports AI agents targeting hundreds of organizations, reaching privileged hree hours in multiple cases. It attributes the ConnectWise compromise to the same group.
- CrowdStrike documented four operators running successful AI-agent campaigns. One compromised at least 15 Argentine healthcare organizations.
- PHP2Shell: AI helped turn longstanding PHP flaws into working exploits. Cloudflareβs CEO reports millions of exploitation attempts. Their AI involvement is unknown.
- Railway disclosed possible access to customer secrets. LiteLLM shipped a backdoored release. Zeabur confirmed another breach and is shutting down.
- GitLab patched a maximum-severity flaw affecting 12 years of releases. Node.js patched a serious code-execution vulnerability, with Vercel deploying firewall protections.
Feels like a turningpoint.
255
755
5,025
383,100
π
πππ π±πππ retweeted
The situation is getting worse every hour. AI agents are entering U.S. bank accounts, and banks are scrambling to shut them out. Axios reports that some appear to attempt actions beyond users instructions, raising fears over who is really in control.
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even βday afterβ scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-β¦
268
469
4,161
389,575
π
πππ π±πππ retweeted
the cybersecurity industry has had a generational disaster of a month.
theyβre calling it black october for a reason.
> Oct 5: SubQuery npm package backdoored
> Oct 7: IDCF Cloud hit by ransomware, affecting 495 organizations
> Oct 8: TensorLake publishes malicious npm package
> Oct 14βre breached
> Oct 15: GhostAction targets GitHub repos with malicious workflows
> Oct 15β16: Rank Math PRO update delivers malware
> Oct 16: ConnectWise cloud backup identities compromised
> Oct 17β18: TeamUpdraft customer data compromised
> Oct 18β19: OpenCode exposes AI API keys
> Oct 19: Nikkei reports 1.83M records exposed
> October 19: OVHcloud CLI binaries reportedly backdoored
> Oct 20β21: PHP critical RCE vulnerabilities disclosed
> Oct 21: LiteLLM ships malicious PyPI + Docker releases
> Oct 21: Railway reports potential exposure of customer secrets
> Oct 21: eMudhra certificate authority keys compromised
> Oct 21: BIND 9 security vulnerabilities disclosed
> October 21: Node.js security vulnerabilities patched
> Oct 22: Linux kernel vulnerabilities accidentally posted publicly, severity up to CVSS 9.0
> Oct 22: Capcom reports unauthorized access affecting 11.77M records
malicious packages. stolen API keys. backdoored updates. cloud breaches. critical RCEs. compromised certificate authorities.
and we still have over a week left in October π€―
theyβre calling it black october for a reason.
> Oct 5: SubQuery npm package backdoored
> Oct 7: IDCF Cloud hit by ransomware, affecting 495 organizations
> Oct 8: TensorLake publishes malicious npm package
> Oct 14βre breached
> Oct 15: GhostAction targets GitHub repos with malicious workflows
> Oct 15β16: Rank Math PRO update delivers malware
> Oct 16: ConnectWise cloud backup identities compromised
> Oct 17β18: TeamUpdraft customer data compromised
> Oct 18β19: OpenCode exposes AI API keys
> Oct 19: Nikkei reports 1.83M records exposed
> October 19: OVHcloud CLI binaries reportedly backdoored
> Oct 20β21: PHP critical RCE vulnerabilities disclosed
> Oct 21: LiteLLM ships malicious PyPI + Docker releases
> Oct 21: Railway reports potential exposure of customer secrets
> Oct 21: eMudhra certificate authority keys compromised
> Oct 21: BIND 9 security vulnerabilities disclosed
> October 21: Node.js security vulnerabilities patched
> Oct 22: Linux kernel vulnerabilities accidentally posted publicly, severity up to CVSS 9.0
> Oct 22: Capcom reports unauthorized access affecting 11.77M records
malicious packages. stolen API keys. backdoored updates. cloud breaches. critical RCEs. compromised certificate authorities.
and we still have over a week left in October π€―
38
104
571
38,765
π
πππ π±πππ retweeted
BREAKING: Asiaβs stock market wiped out nearly $1,000,000,000,000 across six major markets today.
Everyone's calling it a "Black Thursday."
Everyone's calling it a "Black Thursday."
335
1,566
8,027
724,090
π
πππ π±πππ retweeted
JUST IN: A crime group used Claude, Grok and Kimi AI agents running in parallel to attack more than 400 banks and financial firms across Latin America, per security firm Straiker.
They got past the guardrails by posing as an authorised red team. When models refused, it switched to pre-written attack code.
The Ai agents appear to have stolen passwords and customer data and accessed bank accounts with minimal human input.
Anthropic has cut off its access, and xAI is investigating.
They got past the guardrails by posing as an authorised red team. When models refused, it switched to pre-written attack code.
The Ai agents appear to have stolen passwords and customer data and accessed bank accounts with minimal human input.
Anthropic has cut off its access, and xAI is investigating.
114
941
3,143
347,022
π
πππ π±πππ retweeted
BREAKING: A fusion startup says it has turned mercury into gold, producing 10 times more than CERN's previous record.
Marathon Fusion says it achieved this using nuclear fusion.
For now, the amounts are tiny. But gold's price depends on it being rare, so anything that makes is worth watching.
Marathon Fusion says it achieved this using nuclear fusion.
For now, the amounts are tiny. But gold's price depends on it being rare, so anything that makes is worth watching.
339
534
4,013
620,800
π
πππ π±πππ retweeted
BREAKING: π°π· Bank of Korea keeps interest rates unchanged at 3.00%, pausing after two consecutive rate hikes.
16
39
354
21,489
π
πππ π±πππ retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS se would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS se would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
Guys Iβm scared the takeoff is starting. I swear any one of the ~10 CVEs that dropped in the last 24 hours wouldβve been βone of the worst in recent yearsβ except a new one is dropping every hour
597
5,662
35,341
3,887,882
π
πππ π±πππ retweeted
Government websites in Europe and elsewhere go dark as software flaw sparks security scramble cnbc.com/2026/10/21/govβ¦
7
30
49
23,002
π
πππ π±πππ retweeted
π¨ALARMING: Major U.S. banks are detecting UNAUTHORIZED AI agents accessing customer accounts, with some reportedly taking actions beyond users' instructions, per Axios.
Morgan Stanley, JPMorgan, Bank of America and Citi are restricting third-party AI access as security concerns s:
- AI agents could make purchases or move funds without clear user authorization.
- Banks are struggling to distinguish human activity from AI agents acting independently.
- Some AI agents have reportedly contacted bank call centers on customers' behalf.
Banks are now moving toward READ-ONLY access, allowing AI to view financial information without making transactions.
The growing concern is that AI agents are advancing FASTER than banks can secure their systems.
Morgan Stanley, JPMorgan, Bank of America and Citi are restricting third-party AI access as security concerns s:
- AI agents could make purchases or move funds without clear user authorization.
- Banks are struggling to distinguish human activity from AI agents acting independently.
- Some AI agents have reportedly contacted bank call centers on customers' behalf.
Banks are now moving toward READ-ONLY access, allowing AI to view financial information without making transactions.
The growing concern is that AI agents are advancing FASTER than banks can secure their systems.
283
848
3,183
518,453
People will have to learn what karma means
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS se would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
0
0
1
64