The Most Terrifying Week in AI History...
Source: YouTube · Riley Brown · published Oct 26, 2026 · 29:38
This emergency podcast breaks down "Black Wednesday"—the worst week in AI cybersecurity, where a critical PHP bug and cheap models like DeepSeek 4.1 Flash made mass hacking accessible to nearly anyone 0:00.
Key Takeaways:
• A critical PHP bug gave attackers full root access to servers; the FBI/NSA urged owners to patch or take servers offline 0:59
• DeepSeek 4.1 Flash (~15 cents per million tokens, ~100x cheaper than Sonnet) made automated vulnerability scanning economical—exploits that once needed a hacker team now cost ~$50 4:45
• A vicious loop: hackers steal API keys from platforms like Railway/OpenCode, resell them at ~90% discounts on Chinese black markets, and labs distill Claude outputs into cheaper models that enable even cheaper hacks 8:19
• US guardrails ironically hinder defense—OpenCode had to use open-source Chinese models to investigate its own breach; OpenAI's "Daybreak" and Anthropic's cyber programs offer less-restricted access 13:21
• Defenses: set API spend limits, use 1Password service accounts, check haveibeenpwned.com, revoke app authorizations, use passkeys/2FA, sign in via Google/Apple, and run an always-on monitoring agent—it saved the guest's company ~$30,000 12:15
• Speakers fear the end of public frontier models and propose controversial US–China collaboration on AI safety guardrails 23:40
The closing mindset: assume you will be targeted, and rely on 24/7 agent monitoring as the last line of defense 28:21.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Everyone is talking about Black Wednesday because the internet seems to be breaking in real time. And I'm going to be honest with you, this is the scariest week I've seen in AI. PHP, which runs about 70% of the web, had a bug so bad the FBI and the NSA said, "Patch your application or take it offline." And at the same time, hackers were stealing API keys and reselling them on Chinese black markets. This used to take an entire team of hackers. Now, it takes one guy, a cheap AI model, and about 50 bucks. So, today I brought on Anj Nanda, one of the best developers I know to break down everything that's going on. Okay, an my first question to you is what the hell is going on >> there? There's a lot going on. I mean, this is the craziest week in cyber for ever since you remember Crowd Strike g…