For SMEs: If you patched PHP last week, check again today. PHP says unusual session configs are affected. Mitigation guidance is out. Don't assume you're safe.
And there it is.
"We patched" is not a strategy.
1. Patch Monday.
2. New CVE Wednesday.
3. Exposed again.
If you don't know what you run, you won't know if you're patched.
103k SA hosts exposed, how many more will miss ?
Inventory isn't once. It's daily. Day 1, every day.
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.
New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.
Full details →
This week proves it:
New code: vibe-coded, no auth, hacked in a day.
Old code: hid for years, found by LLM, exploited in hours.
Too fast kills you. Too slow kills you.
You win if you know what you run.
Inventory -> Patch. Day 1.
SITUATION EXPLAINED: It’s being called "Black October," the worst week in cybersecurity in years, with AI on both sides of the fight.
• PHP2Shell, a hole in the software behind about 70% of websites, has been patched, but attackers have already tried to exploit it millions of
103k SA hosts exposed. 1,224 patched.
Millions of attempts per Cloudflare.
People think attackers "find" you.
They don't. They scan the entire internet.
You were never hidden. You were just not scanned yet.
Now you are.
Inventory -> Patch. No shortcuts.
LATEST: 🚨 Cloudflare CEO Matthew Prince says there have been millions of exploit attempts targeting the critical PHP flaw since the bug was publicly disclosed.
@m_a_l_a_t_j_i 100%. The pattern is inventory + auth.
PHP/GitLab = we don't know what we run.
Vibe-coded dashboards = we don't know what we built.
Both fail at Day 1. That's where most SMEs in SA are stuck right now -no asset list, no identity baseline.
Everyone's asking how ATNS / Ampath / Bootlegger happened.
Wrong question.
9.8k SA servers were already on old PHP. Self-managed GitLab everywhere. Vibe-coded dashboards with no auth.
Attackers didn't get clever. We didn't do basics.
Inventory. Identity. Data map. Then patch.
SOUTH AFRICA: CYBER WEEK FROM HELL
While the world patched PHP and GitLab on Oct 21, SA had its own fires to put out.
@ATNSSA: SA’s air navigation provider was reportedly hit by ransomware that reached the systems behind aviation weather services. Possible data theft to IPs in
"The future of security is the constant pressure of models attacking you" — Kevin Mandia
Hyperattack: swarm of AI agents maps every service, route, asset, then polls for change.
You need to see your network the way a swarm would. Inventory + identity first.
Via @a16z
The future of security in the AI age is "the constant pressure of models attacking you," says Kevin Mandia of @ArmadinSecurity. That means seeing your network the way a swarm of AI attackers would:
"We do a thing called a hyperattack. We throw a drone swarm of agents at you, and
This is the next layer: AI agents need identity, least privilege, and real-time risk checks — just like users.
Foundations matter — govern identity and data before agents run wild.
#AIagents#Identity@SecurityWeek
Benchmarks are how we prove AI value.
TechCrunch: Labs stake reputation on benchmarking, but embedded evaluators aren't neutral.
Independent governance matters — measure performance, secure data, verify identity. AI works best when it's verifiable.
#AIgovernance@TechCrunch
AI labs have staked their reputations on model benchmarking — the supposedly neutral and accurate system of evaluations that are designed to measure whether one AI product is better than another. However, the methods behind these evaluations are
spr.ly/6015BHrx7S
MITRE ATT&CK v20 now officially catalogs AI Abuse and MFA Bypass.
AI is now so mainstream it's part of the global attack framework.
Identity + MFA hardening is step 1 for safe AI adoption.
#MITRE#M365#AI
Via @SecurityWeek
OpenCode is a great example of AI coding momentum — and why secure foundations matter.
API keys are identity. When they're exposed, AI can't fix itself.
At X369 we enable AI adoption by fixing identity + secrets outside the model first.
#EnableAI#M365
Via @TechCrunch
OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the
spr.ly/6014BHren0
Don't trust the model to secure itself.
Security must sit OUTSIDE the model — assess agent risk, adapt permissions, contain threats.
That's Project Perception from Microsoft. That's why at X369 we say: fix identity + data + backup first, then layer AI.
Via @satyanadella
I recently wrote about why we need to treat models as insider risks, with security controls sitting outside the model itself.
Today, we're putting that principle into practice by expanding Project Perception with new capabilities to help continuously assess agent risk, adapt
🚨 ConnectWise has suspended Cloud Backup and disabled 7 app identities after attackers compromised Microsoft 365 tenants.
Backups and restores are unavailable. Previously issued access tokens may remain valid.
Read: thehackernews.com/2026/10/connec…
The biggest gains of AI go to people who already have expertise to know what's true, what won't work, and what to integrate.
Without deep domain understanding, you can't judge the output.
Experts just get more powerful.
Via Aaron Levie @levie / @a16z
Aaron Levie of @Box on why AI widens the gap between experts and everyone else, and what that means for college students:
"The biggest gains of AI go to people who have some degree of expertise in an area, to know what is actually true, what is not gonna work, 'What should I
“AI is changing not just what we can do; it’s changing who we are as thinkers. Our capacity to engage in sustained focus and struggle is being disrupted by AI. It’s not just a matter of our capabilities but our tolerance for friction.” — MIT Sloan professor Eric So
Data resilience is the foundation of cyber resilience in Microsoft Cloud.
Protect, recover, and stop the re-attack — key takeaways from VeeamON on securing the full Microsoft estate.
Via Veeam Software #VeeamON
The #VeeamON Global Launch Event is still going strong! Choose your technical deep dive:
✅ Designing Data Resilience for the Modern Enterprise
✅ Cyber Resilience Across Your Entire Microsoft Cloud Estate: Protect, Recover, and Stop the Re-Attack
✅ Breach Ready, AI Ready: A
Cybersecurity is AI's next most critical application. — Jensen Huang, NVIDIA
Agree. For SA SMEs, the foundation still matters: identity, backup and resilience underneath AI adoption. As the stack evolves, security remains the critical layer.
Via @GoldmanSachs
At the Goldman Sachs Communacopia + Technology Conference, leaders from across the tech sector convened to discuss the industry’s innovations and challenges.
Executives from @nvidia, @SpaceX, @Microsoft, @Google, and more shared their perspectives on the forces shaping
1.1M Followers 64 Followinghttps://t.co/A9eTFq6Xbx
https://t.co/3RHK5vqQo7
Posts are not investment advice or an advertisement for investment services. See https://t.co/nX2FtaLE06.
832K Followers 941 Followingchief ai officer @meta, founder meta superintelligence labs, founder @scale_ai. give everyone the adulthood they dreamed of in childhood
59K Followers 5 FollowingBusinessTech is South Africa’s largest business publication, serving the local business community with the latest news and insights.
42.3M Followers 17 FollowingNews, features and analysis from the World's newsroom. Breaking news, follow @BBCBreaking. UK news, @BBCNews. Latest sports news @BBCSport
10.5M Followers 104 FollowingThe first word in business news | Watch Live: https://t.co/nHEpHOzHqv | Newsletters: https://t.co/nWaCxHSKuU | Podcasts: https://t.co/096e9xMbPz
52K Followers 7K FollowingWith Veeam, the Data and AI Trust Company, your data and AI are fully understood, secured, and resilient so you can accelerate safe AI at scale.
77 Followers 120 FollowingWestech Systems has offered a tailored IT infrastructure solution and been a competitive player in the SME sector since 1995.
981 Followers 1K Following@SovTechSA's Premium Digital Services Platform. Off-the-shelf digital services from top notch service providers - simple as that https://t.co/q10Hmt8Oa1
34K Followers 8K FollowingBSG Chairman. Author of Number One Bestseller “Betting on a Darkie”. Mteto is a Yale University World Fellow and South African Academy of Engineering Fellow.
9K Followers 80 FollowingConnecting devs with opportunities to build awesome futures 🚀
👩💻 100 000+ SA devs
💼 2000+ companies
💰 Upfront info on skills, roles and salary
2K Followers 3 FollowingNewsday is a trusted source of news about South Africa. It includes investigative journalism, general news, and in-depth reporting.
115K Followers 74 FollowingMyBroadband is the largest ICT news website in South Africa, delivering the country’s most trusted and widely read tech news.
27K Followers 6K FollowingWe’re an all-in-one digital commerce platform. Sell everywhere. Manage your business from anywhere. Make better insight-led decisions. Customer care: @ask_yoco
40K Followers 592 FollowingOfficial X account of the CSIR. 81 years of research, development and innovation in RSA. Follow us for news, events, media and more. RTs not endorsements.
7K Followers 5 FollowingNaspers is a global internet group and one of the largest technology investors in the world. Follow us on LinkedIn: https://t.co/DlSJ78QrSq…
2.0M Followers 179 FollowingNobel Laureate. Co-Founder & Chair @GoogleDeepMind; Chief Scientist of Alphabet. Founder & CEO @IsomorphicLabs. Building the future...
6.0M Followers 126 Following@GM Chair and CEO leading an outstanding team with the ambition, talent and technology to create a world with zero crashes, zero emissions and zero congestion.