Hi AInauts,
Welcome to this week's deep dive.
The same AI that takes work off our hands every day is doing the same for attackers. Finding vulnerabilities, building attacks, writing convincing phishing emails: work that used to take weeks can now take hours.
We saw what that means this week. The Netherlands took its government login service offline as a precaution. Several German federal portals went offline too.
Welcome to the week people on X are calling “Black October.”
Here's a small sample of what happened in the past few days. More to come…
Two critical PHP vulnerabilities that let attackers execute code on web servers without logging in, followed by the first attack attempts just hours after the fix. PHP powers a huge share of the web.
A breached cloud host that exposed customers' API keys.
Personal and health data from one of the largest US laboratory companies compromised in a breach.
By the time European authorities took websites offline as a precaution, including the Netherlands' DigiD login and several German federal portals, the story had reached the mainstream news.
Our timeline was full of “This is really bad!” messages from security researchers who rarely sound this nervous.
If you don't have the time or appetite for the details, start with this simple prompt:
