Alerts
Only when it matters. A short, plain-English warning when something serious is happening, and what to do about it. By email, or here.
- AI with its safety rules removed now rents for US$20 a month
Abliteration.ai sells access to frontier AI models with their refusals removed, with a free sign-up, no identity checks and no record kept of what's asked.
What to doNothing to change today. Make sure nobody moves money or shares a code because of a message alone: they call back on a number they already had.
Read the full story - Railway breached: the third platform in fifteen days to lose customers' keys
Railway, a hosting platform popular with developers, says someone accessed the secrets customers store with it, some decrypted. It believes it's part of a series of attacks on platforms, aimed at AI providers, after Fireworks AI and OpenCode.
What to doIf your company, family office or anyone building software for you uses Railway, OpenCode or Fireworks AI, ask them to change every stored key and password today, and to set spending limits on AI accounts.
Read the full story - Two critical PHP flaws now have a fix. Some firms report early attacks
PHP, the language behind about 7 in 10 websites, released fixes on 21 October. Some security firms report early attacks; others, and the US agency CISA, haven't seen any. PHP 8.1 and older get no official fix.
What to doAsk anyone who runs a website for you whether it now runs PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, or their vendor's fixed version. If it's on PHP 8.1 or older, ask for a plan to upgrade or take it offline. Ignore emails urging you to log in for a security update.
Read the full story - A leading open AI model, with its safety rules removed, is free to download
35 hours after DeepSeek released V4.1 Flash, a patch removing its refusals, including around cyber attacks, appeared on Hugging Face.
What to doNothing to do today. Expect scam emails, texts and calls to keep getting more convincing.
Read the full story