I wanna make something cute for my @pudgypenguins fam Drop your Pudgy PFPs below and stay tuned! ❤️❤️❤️

Apollo economist: 'AI has delivered zero financial payoff' to most companies. If true, billions spent haven't moved the needle — rethink ROI & strategy. techcrunch.com/2026/10/25/ai… #AI

Stay SAFU! Is it just me, or is the world getting crazier?

We owe you an apology. On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe. Exposed: names, contact details, shipping addresses, and order details (items and prices). Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords. We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers. Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us. NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself. A detailed report is coming soon. Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance. Again, we're truly sorry to everyone affected.

OpenAI will stop training frontier models on the live internet, citing 'significant risks.' A major safety shift — but may hurt data freshness. techcrunch.com/2026/10/23/op…

Elon has done it. Grok Bot is officially the best AI agent on the planet. Half of these Bots would have taken a full engineering team months ago. 🧵: 10 insane Grok Bot use cases (tag your @bot to install these).👇

OpenAI courting $30B at a $1.25T valuation — a private‑company record. It could rewrite IPO math, supercharge investor frenzy, and raise governance/competition risks. techcrunch.com/2026/10/22/op… #AI

Testing my first n8n automation! I'm building an AI agent that researches news and turns it into social media content.

Everyone worried about AI hacking crypto, but the internet and banking systems rely on weaker encryption. That said, AI doesn’t need to break Bitcoin’s cryptography to cause damage, leaked data already enables more phishing, social engineering, etc, Stay SAFU!

in light of the AI cyberattack mayhem going on right now, it's a good time to reshare Karapthy's Digital Hygiene guide probably the most important thing you can read this week: > use a password manager for every account > set up physical security keys so attackers can't log in > enable face id and fingerprint everywhere > randomize your security question answers > encrypt your hard drive > get rid of unnecessary smart home devices > switch to signal for private messaging > use brave instead of chrome > switch to brave search instead of google > mint virtual credit cards for every purchase > get a virtual mailing address > never click links inside emails > use a vpn on public wifi > block ads and trackers at the dns level > install a network monitor to see which apps are spying on you

our bank negara just launched SSDS+, and it’s a much bigger deal than the dry acronym suggests. malaysia’s bonds and sukuk are going onchain, central bank edition. in simple terms: 1 | SSDS is the official registry where malaysian bonds live. SSDS+ rebuilds it on distributed ledger tech, built in-house by @BNM_official 2 | it’s wired into RENTAS+, the payment system banks use to settle with the central bank, now running 24/7. so the bond AND the cash move together, any hour, in central bank money 3 | why that matters: bond trades today settle in days, during office hours, with layers of middlemen reconciling records. tokenized bond + 24/7 settlement = minutes, anytime, and both sides’ records agree by construction 4 | no private stablecoins. crypto spent years arguing tokenized assets need stablecoins as the cash intermediary. BNM’s answer: the cash can be sovereign money directly. everything crypto showed was possible, but the ringgit stays with bank negara ('97 Asian financial crisis PTSD) 5 | our flex: malaysia dominates global sukuk issuance, and sukuk leads our $575.6B bond market. tokenized sukuk puts malaysia in position to set the standard for digital islamic finance 6 | what’s next: wholesale first, but BNM says the system is ready for tokenized government and retail bonds too. one day you might buy a govvie from your phone like a TnG topup this is basically 24/7 markets with the central bank running the engine. pretty big moment for malaysia 🇲🇾

they’re calling it “Black October” and i don’t think people realize how serious this is in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours any ONE of these would normally be the biggest story of the year PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10 Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26 Java: also compromised. three of the most used programming languages on earth hit at the same time GitLab: a perfect 10 out of 10 severity hole in every version since 2014 Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed Signal: a bug that could leave your mic and camera on after you hang up WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer and that’s not even half the list thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already this is not a normal week on the internet. this is something different

Too many hacks in the last 24h. If you do one thing today, do this 👇 > Update everything: browsers, OS, phones, desktop apps > Limit web browsing this week, don't click random links > Avoid untrusted Wi-Fi, use your hotspot > Watch out for phishing emails > iPhone 11-16? Turn Bluetooth off until Apple patches land > Devs: update all your repos S/O to @Eito_Miyamura for this practical checklist Stay safe everyone

Stop using the same email address for everything you do. Your name at gmail is great. Use it. But stop freakin using it for banking, crypto, and other sensitive log ins. I’m telling you, come up with a a few new non attributable email addresses that don’t reference your name, location, or personal info. Go 1:1 for each sensitive log in. It can feel like a pain, but if a bad actor gets into your primary email account that you use for everything then they will have access to everything. Harden your defenses.

Forever pengu ❤️

Lots of Security incidents today, here's some practical tips for those who just wanna protect yourself: 1) UPDATE EVERYTHING - main targets are: a) Browsers - Chrome, Safari, Firefox b) OS: : Settings -> General -> software update; Linux: sudo apt update && sudo apt upgrade; Windows: I think there's a button. Do this for any remote home servers & Openclaw/hermes boxes c) Phones: Update it all d) Desktop apps (Slack, Cursor, Discord, etc) 2) Limit web browsing this week: Stay within walled gardens (twitter, youtube, etc); don't click random links this week. Just wait until the patches go through. Do step 1 again after a week. 3) Avoid untrusted Wifi networks until your devices are updated 4) Stay vigilant about phishing emails offering "certificate fixes" or fraud updates 5) Have an iPhone 11-16? TURN BLUETOOTH OFF for the time being until apple patches come through. 6) Code/Dev: UPDATE ALL YOUR REPOS - @charliermarsh has already updated uv 0.13.4 which reacts to the eMudra incident for uv (Python), Typesript according to Claude has equivelant. Tell your agents to go and update all your active repos to update package manager across uv, npm, bun, cargo, etc etc What advice did I miss?

A quick explainer for everyone else. >half the internet runs on PHP >a big security bug dropped today >basically hackers can take over websites just by sending one special request (crazy!) >no password needed >patches are out >lots of sites are going down for emergency updates >if you have a website, tell your host to update PHP right now >if you don’t, just enjoy the random maintenance pages for now

RT @diol2n: هذا الحادثه المرعبه حدث في ماليزيا قبل ساعات قليلة: طالب ماليزي (16 عام) احضر ادوات حادة لمدرسته، وبدأ بث مباشر وهو في دورة ا…

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.