New Training Program:How to build an AI Champions Program→
Latest edition · Thu, Oct 22Latest · Oct 22
Menu ▾
THE AI DAILY BRIEFSubscribe
// Thursday · October 22, 2026

The AI vs AI Battle for the Internet

Anthropic ships Claude Duet — and it still can't hold the main slot. A PHP vulnerability touching perhaps 70% of the web, a breach at Railway, and millions of AI-driven exploit attempts within hours of disclosure mark what may be the transition between two eras of cybersecurity: one where long-held norms made exploits manageable, and a new one where it's AI versus AI and the winner is whoever coordinates fastest.

Listen ▸SpotifyAppleYouTubeAll platforms
Ad-free on Patreon
Sponsored by KPMG · Section · CData · Blitzy · all offers →
The One Idea

Cybersecurity's new era is AI versus AI — and whoever coordinates faster wins.

PHP2Shell was found by a frontier model, disclosed with a defender's window, leaked ten hours early, and exploited millions of times across Cloudflare's network within hours. Add the Railway breach and the OpenCode attack and the shape of the new normal is clear: swarms of cheap, relentless agents on offense versus governed fleets on defense. The old era of manageable exploits and long-held norms is ending; the new one is a coordination race fought at inhuman speeds — and long-term optimism about more secure software doesn't deny how painful the transition is going to be.

// 01

By the Numbers

70%
Websites and web apps potentially vulnerable to PHP2Shell
Millions
Exploit attempts across Cloudflare's network after disclosure
10 hrs
How early knowledge of the exploit leaked ahead of disclosure
1.5%
OpenCode users breached in last weekend's API-key attack
40%
Higher order values from Walmart's Sparky shoppers vs non-agentic
25%
Active Meta Muse users already shopping with the agent
$200
Average value of a Muse agentic purchase
$135–145B
Meta's data-center spend this year, low end revised up
$700B
Equity Meta could still raise without Zuckerberg losing majority control
// 02

The Brief

ModelsEng▶ 13:00

Project Glasswing warned us this was coming

When Anthropic announced Glasswing in April, it said AI models could now surpass all but the most skilled humans at finding and exploiting software vulnerabilities — its Mythos preview had already found thousands of high-severity flaws in every major operating system and browser. The warning then: such capabilities would soon proliferate beyond actors committed to deploying them safely, with potentially severe fallout for economies and national security.

AI Daily Brief
EnterpriseEngOpsExec▶ 14:00

PHP2Shell is the defender's worst nightmare

The vulnerability — discovered two months ago by GPT 5.6 Sol via a researcher at Caliph and independently by Wiz — could affect as much as 70% of websites and web apps, allowing attackers to take control of backend servers and run code without logging in, even on the latest versions. PHP's Volker Dusch called it the most severe security issue the language has faced in over a decade, comparing it to 2014's Heartbleed.

AI Daily Brief
EnterpriseEngOpsLegal▶ 16:00

The defender's window closed 10 hours early

OpenAI spent two months coordinating with PHP's maintainers, Wiz, and Cloudflare so that frontier AI would find the flaw before attackers did. Technically true — but knowledge of the exploit spread roughly ten hours ahead of disclosure, before anyone could patch. The NSA recommended organizations take systems offline until patched, and the FBI's Cyber Division asked for intrusion reports.

AI Daily Brief
EnterpriseExecEng▶ 17:00

Even the reflexive skeptics say this one is real

NLW's default is skepticism toward sky-is-falling cyber stories — but the people who know this space are rattled. One startup reported 100% of its cookies exposed, its source code stolen, its site defaced, and legal docs leaked; a former intelligence officer called it 'the calm before what is likely to be the biggest destruction event to the internet in 20 years,' with 70% of sites possibly already compromised without anyone knowing.

AI Daily Brief
EnterpriseEngOps▶ 18:00
“

Hundreds of thousands within two hours, and millions now.

— Matthew Prince, Cloudflare CEO. Cloudflare saw thousands of exploit attempts in the ten hours before PHP2Shell was announced, tens of thousands in the 45 minutes after, and millions since — the clearest hard data on how fast AI-driven attacks now scale.

The AI Daily Brief
◆ The Take▶ 18:00

Years of vague X-risk warnings may have distracted from this

Some rationalists are claiming vindication, but NLW finds that framing a little disingenuous — cyber chaos isn't close to the main thing that crowd warned about, and one could argue the focus on vague existential scenarios distracted from much more current issues like these. The best counterpoint: being concerned about one thing doesn't mean you can't be concerned about another.

The AI Daily Brief
EnterpriseOpsEngExec▶ 19:00

Everyone now lives and dies on patch velocity

Ethan Mollick reports companies struggling with the rate of patches required as AI defenses find issues ahead of inevitable AI attacks — and consumers are next. Meanwhile much of the world is blasé: one big-tech employee, whose entire infrastructure runs on PHP, responded to the warning with 'Thanks, I'll try to patch it in a few days as I'm out of office right now.'

AI Daily Brief
EnterpriseEngLegal▶ 20:00

Why they couldn't just ship the patch first

Critics asked why two months of coordination produced a 'in 24 hours you're all screwed' rollout. The answer from those who know: the patch itself makes the exploit obvious, so releasing it is effectively releasing the vulnerability to a storm of script kiddies scanning everything they find. That's why the NSA told organizations to take sites down ahead of disclosure and get ready to update the moment it landed.

AI Daily Brief
Enterprise▶ 21:00

PHP2Shell may turn 15 years of old sites into lost media

4chan has gone read-only and Something Awful shut its forums as sites brace for the patch; Pinboard, Choice of Games, Damn Interesting, and the Explain xkcd wiki are offline too. The lament: there's 15 years' worth of old PHP sites that may simply never come back.

AI Daily Brief
EnterpriseEngOps▶ 22:00

Railway gets hit — and it's part of a pattern

The AI hosting service disclosed that an unauthorized third party may have accessed encrypted customer environment variables — API keys, database and registry credentials — and decrypted some of them, with keys actively being drained. Railway believes it's part of a series of attacks targeting platform companies to compromise AI inference providers, mirroring last weekend's OpenCode exploit that breached 1.5% of users and ran up API bills.

AI Daily Brief
EnterpriseEngOpsExec▶ 23:00
“

The only reason we're surviving is because we have agents going twenty-four seven.

— Dax, OpenCode. OpenCode's post-exploit advice to the Railway team sums up the new normal: the attackers aren't going to stop, they'll get more sophisticated, they'll target every surface and every employee, and long-forgotten projects will be found and used against you. 'Really it's a collective problem we're all facing together.'

The AI Daily Brief
EnterpriseEngOps▶ 23:00

Where the nuclear analogy breaks: you can stop an AI with an AI

One entrepreneur rotated every key across a large number of projects in minutes — an absolute nightmare not long ago — and called AI's defensive value underrated. You can't stop a nuclear weapon with another nuclear weapon, but you can stop an AI attack with an AI. The pessimistic counter-scenario, from a former OpenAI staffer: 'Feels like March 1st, 2020 for cyber. Internet lockdowns in a couple of months?'

AI Daily Brief
EnterpriseExecEngFinance▶ 24:00

Cyber may burn 100x more tokens than anyone is imagining

Box's Aaron Levie argues we now have a tireless workforce that can hunt down, discover, patch, or attack any system ever created — and we'll use far more tokens on the attack-defend loop than currently imagined, scanning every log and every line of code. His jobs corollary: cybersecurity becomes one of the biggest enterprise investment areas, and even as the work goes autonomous, more talent will be needed to point agents, review findings, and respond to incidents.

AI Daily Brief
EnterpriseExec▶ 26:00

Fleets versus swarms: whoever coordinates faster wins

Enclave's Tal Hoffman frames the future of cybersecurity as governed agent fleets on defense versus cheap, relentless agent swarms on offense. Others see structural consequences: markets may not be pricing in how fast banks and healthcare will have to merge just to acquire enough scale to defend against AI-driven vulnerabilities — while the 'fix your shit' camp says the only way out is through.

AI Daily Brief
PolicyLegalExecEng▶ 26:00

Brockman floats government 'authorized defenders' that patch the internet

In 'Towards Securing the Internet,' OpenAI's president says models can now find vulnerabilities with internet-scale impact and new defensive solutions will be needed — potentially including authorized defenders such as government scanning the internet for vulnerable hosts and, in extreme cases, patching those systems remotely. A remarkable proposal to sit with.

AI Daily Brief
◆ The TakeExec▶ 27:00

Long-term optimism doesn't deny the pain of the transition

The most optimistic take — Martin Casado's — is that AI ultimately makes software far more capable, secure, and reliable, 'but before that, things are going to get much, much worse.' NLW agrees: he's an incredible long-term optimist across AI, but that doesn't deny the potential chaos, pain, and agony of the short and medium term. It's true for jobs, and it's certainly true for cybersecurity. And boy, are we in it now.

The AI Daily Brief
ModelsProduct▶ 01:00

Anthropic joins the personal agent race with Claude Duet

Duet answers Grokbot, Meta Muse, and OpenAI's Dots with a professional and small-business twist: a proactive morning brief across your connected apps, interruptions only when something needs attention, and tasks from scheduling to forecasts to prototyping web apps. It ships as a waitlisted research preview — and for much of the community, the real differentiator was that it's built on Opus 5.5.

AI Daily Brief
BusinessProductExecMarketing▶ 03:00

The agent race is now about owning the relationship, not the model

Pretty much every major AI company now has a personal agent except Google — Meta's Muse, Anthropic's Duet, OpenAI's Dots, SpaceX's Bots. The competition is shifting from who has the smartest model to who owns the persistent relationship with the user, arguably because peak intelligence for most of the world's workflows was reached early this year or late last. Meanwhile nothing about the category is settled: not form factor, not interaction modes, not whether we'll have one agent or many.

AI Daily Brief
◆ The TakeExec▶ 04:00

Duet may be part one of a pre-IPO one-two punch

If NLW were a betting man: release your answer to all the personal agents floating around, then give it a new model that makes everyone feel hopelessly behind. In other words, maybe Duet is just prelude to Fable 5.5 heading into Anthropic's IPO.

The AI Daily Brief
BusinessSalesProductLegal▶ 05:00

Walmart opens the doors to third-party shopping agents

While Amazon, JPMorgan, and Bank of America say no, Walmart will let customers link personal agents with configurable spending limits starting next month — surprising given its proprietary Sparky agent already drives order values 40% higher than non-agentic shoppers. Its terms could become a template for safer agentic commerce: no actions beyond shopper intent, no modifying payment methods, approval by default, and returns protection even when a compliant agent makes a mistake.

AI Daily Brief
BusinessMarketingSalesFinance▶ 06:00

A quarter of Muse users are already shopping with it

Meta's earnings call revealed that 25% of active Muse users shop through the agent, with average purchases of $200 — numbers that surprised even e-commerce veterans. Zuckerberg said Plaid told Meta it hadn't seen activity like its connector is seeing on any other service. If the early adopters of agentic shopping are this valuable, Walmart's welcome mat makes a lot more sense.

AI Daily Brief
BusinessFinanceExec▶ 07:00

Meta funds the build-out with equity — minus the voting rights

Alongside Q3 earnings that nudged this year's data-center budget to $135–145 billion, Meta announced a new class of non-voting stock trading from January. It lets the company sell equity without diluting Zuckerberg's voting control — what CFO Susan Lee called expanding funding tools for 'the unprecedented momentum we're seeing across every part of our business driven by AI.'

AI Daily Brief
BusinessFinance▶ 08:00

Is the bond market tapped out on AI debt?

Some read Meta's equity pivot as a sign the AI debt market is exhausted; others note Meta's $900 billion in liabilities — including $350 billion in non-cancellable data center contracts — against only about $83 billion in issued long-term bonds. The Occam's razor read: Moelis says Meta needs several hundred billion in any scenario, so it's tapping every pool of capital. Shareholders apparently agree — the stock was up overnight despite the dilution.

AI Daily Brief
Machine-readable ▸Download .mdTranscript .md— feed it to your own agent

Got this from a colleague? Get the brief every day.

Subscribe — all platformsApple PodcastsSpotifyYouTube