People-and-technology executive. Tech leader running AI for real.
Angel investor. Board-level view on AI risk and security.
#TechwDR #DavidOnAITechwDR.com A to the ZJoined October 2026
October's supply chain hits:
Infected npm and PyPI packages. Malicious GitHub workflows. Malware in an official plugin. Backdoored CLI binaries. A certificate authority's keys found too weak to trust.
The risk was in the code we trust.
#TechwDR#DavidOnAI
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulner…#NodeJS#Security
@WaitWhat same - having to rewrite a bunch of process and route work back to other tools like Claude. The biggest killer is anytime the @bot has to use the virtual desktop it just eats up the usage. Try to do as much research and work through connectors. @spacexai@poteto please help
We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent.
It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.
Does every agent in your test environment have a named owner?
New TechwDR Short: EU look at AI agents that escaped testing. My take as a tech leader: named owner, written scope, tested off switch.
Created with my AI avatar.
@TechwDR#TechwDR#DavidOnAI
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show
One-click mitigation for php2shell vulnerability:
If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.
dash.cloudflare.com/?to=/:account/…
This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.
Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. cfl.re/487DNbG
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines.
If you run either stack in production, keep an eye on official advisories and apply patches promptly.
Security maintenance doesn't stop at your application code. Your runtime matters too.
Node.js advisory: nodejs.org/en/blog/vulner…
If you run PHP, patch today.
Two critical unauthenticated RCE flaws (CVE-2026-109618, CVE-2026-109619, CVSS 9.2). Fixed in 8.5.12, 8.4.27, 8.3.36, 8.2.35. On 8.1 or older: apply PHP's source backports, upgrade, or isolate.
#TechwDR#DavidOnAI#php#php2shell #php
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
77 Followers 294 FollowingEquity Analysis at Rebellionaire. Finance and energy nerd. Giga-dad of 7 young kids. Catholic. Tweets are not financial advice!
1K Followers 7K FollowingEquity Analysis at Rebellionaire. Finance and energy nerd. Giga-dad of 7 young kids. Catholic. Tweets are not financial advice!
222 Followers 233 Following#Visionary Technologist. Passionate about transformational leadership, #innovation SaaS, & IT as driver of digital business. CXO
1.9M Followers 2 FollowingClaude is an AI assistant built by @anthropicai to be safe, accurate, and secure. Talk to Claude on https://t.co/ZhTwG8d1e5 or download the app.
323K Followers 5K FollowingCloudflare is the world’s leading #ConnectivityCloud, and we have our eyes set on an ambitious goal — to help build a #BetterInternet.
317K Followers 8K FollowingFounder and CEO of @acquiredotcom. https://t.co/wRMIssDmhl has helped 1000s of startups get acquired and facilitated $500m+ in closed deals.
481K Followers 849 Following"The Writing Guy" | Christian | Host: How I Write Podcast | I tweet about writing, beauty, and architecture | My writing: https://t.co/SOE9HtxXdi
214K Followers 18K FollowingBuilding https://t.co/od97B0HVrk at @audiohook in public. Raising all the boats with kindness.
🎙️ https://t.co/6w69DZmi8H · ✍️ https://t.co/lpnor5rsTW
1K Followers 908 Following21 | Building with AI, for work & fun.
Sharing experiments, startup thoughts & lessons in growth.
Goal: $10K MRR.
Work & collabs: DM.
5K Followers 862 FollowingBuilding a holding company of SaaS products.
https://t.co/REhfkDvLyD agent harness for builders
https://t.co/BbNeO6HId6
... and more on https://t.co/y0Dgfnfo16
79K Followers 4K FollowingHead of AI @clickup. Tweets about AI, computing and their impacts on society. Previously founder @codegen / ML @palantir / startups. Not a pseudonym.
601K Followers 3K FollowingNVIDIA Director of Robotics & Distinguished Scientist. Co-Lead of GEAR lab. Solving Physical AGI, one motor at a time. Stanford Ph.D. OpenAI's 1st intern.
1.1M Followers 6K FollowingPresident & CEO @ycombinator —Founder @garryslist—Creator of GStack & GBrain—designer/engineer who helps founders—SF Dem accelerating the boom loop
829K Followers 939 Followingchief ai officer @meta, founder meta superintelligence labs, founder @scale_ai. give everyone the adulthood they dreamed of in childhood