G DAXY retweeted
🚨 ¿REALMENTE ENTIENDES LO QUE ESTA PASANDO AHORA MISMO?
Todo el mundo temia que la IA acabara con crypto
Pero resulta que quiza el primer objetivo sea tu banco
Segun Axios, JPMorgan, Bank of America, Wells Fargo, Morgan Stanley y Citi estan detectando agentes de IA dentro de las cuentas de sus clientes
Entraban con los logins que los mismos usuarios les daban
Algunos llamaban a los call centers
Otros incluso parecian actuar por su cuenta
Los bancos ahora mismo no pueden distinguir bien entre un humano y un agente
Ni saber si el cliente autorizo cada movimiento o si el agente se salio de control
Morgan Stanley ya los esta bloqueando
JPMorgan, Bank of America y Citi estan restringiendo el acceso
Y ni siquiera hizo falta hackear nada
La gente le entrega a un agente su usuario y contraseña y lo deja manejar su dinero
Los bancos ya se preparan para el peor escenario: como asegurar o restaurar cuentas si algo sale mal
Solo que esto no es un hack tradicional
Asi que si la persona dio acceso a su cuenta, esas transferencias pueden no contar como no autorizadas
O sea, puede que nadie se las reembolse
Y los bancos siempre vendieron lo contrario
Si alguien te roba, ellos responden
Ahora la pregunta es si eso sigue aplicando cuando el alguien es una IA
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
G DAXY retweeted
🚨MAJOR U.S. BANKS DETECT UNAUTHORIZED AI AGENTS IN CUSTOMER ACCOUNTS!
Major U.S. banks including JPMorgan, Bank of America, Morgan Stanley and Wells Fargo are detecting unauthorized third-party AI agents operating inside customer accounts, Axios reports.
Some agents have attempted actions beyond user instructions, raising risks of unauthorized transactions.
Banks say they cannot reliably distinguish legitimate activity from autonomous agents even when customers share credentials, and several are now blocking or restricting third-party agent access.
G DAXY retweeted
‼️ A critical Signal bug could keep your microphone, and possibly your camera, live after you hang up.
The other caller can flood the call's event queue so your hang-up is never processed.
Dubed CVE-2026-113380 it scored 9.3 and got fixed in September.
G DAXY retweeted
🚨 Yesterday, PHP2Shell made headlines. Today, we're already teaching you how to exploit it. Yeah, we're THAT fast⚡ Two critical PHP vulnerabilities. 9.2 CVSS. Unauthenticated RCE.
And you can already exploit the chain, bypass ASLR, and pop a shell in our latest recent threat room.
Hackers don't wait. Neither do we 🟢 Go Get hands-on: tryhackme.com/room/cvephp2sh…
Attention!!
Aussie websites are among those offline after a huge gap was found in internet security. Full story: bit.ly/3VY2Mvr
G DAXY retweeted
🏮 China-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach
Details: cybersecuritynews.com/china-…
China-state-aligned hackers used ARTEX, an AI-powered penetration-testing framework, to attempt access to more than 2,250 Microsoft 365 tenants following the ConnectWise Cloud Backup breach.
Microsoft attributed the attack to Storm-0940 and reported 2,900 sign-in attempts per minute, leaving security teams little time to investigate and block access. The attackers abused stolen application credentials and permissions already approved by customers, rather than requiring users to enter passwords.
Between October 10 and 14, its infrastructure targeted 327 accounts across eight organizations, generating more than 151,000 failed logons.
#cybersecuritynews
G DAXY retweeted
At @defcon I interviewed people building all kinds of anti-surveillance tools.
Flock detectors. Rogue cell tower catchers. Bluetooth trackers.
No one’s coming to save us. We must build the resistance ourselves.
G DAXY retweeted
🚨ALARMING: Major U.S. banks are detecting UNAUTHORIZED AI agents accessing customer accounts, with some reportedly taking actions beyond users' instructions, per Axios.
Morgan Stanley, JPMorgan, Bank of America and Citi are restricting third-party AI access as security concerns grow.
The biggest risks:
- AI agents could make purchases or move funds without clear user authorization.
- Banks are struggling to distinguish human activity from AI agents acting independently.
- Some AI agents have reportedly contacted bank call centers on customers' behalf.
Banks are now moving toward READ-ONLY access, allowing AI to view financial information without making transactions.
The growing concern is that AI agents are advancing FASTER than banks can secure their systems.
The world has a problem now
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
At the centre of the shutdowns is something most of us have never heard of, but use every day.
PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password.
Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity.
Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving.
Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours.
Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline.
Websites have gone dark worldwide, from government portals and hospitals to banks.
CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit.
Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each.
Over 1.1 million use older versions no longer receiving official PHP updates.
Older installations may need an upgrade to a supported PHP version or a fix from their software provider.
And patching does not remove a backdoor an attacker may already have planted.
Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections.
But PHP isn’t the only security story unfolding.
-Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers.
-India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”.
-State Bank of India confirmed 3,897 customer records on the dark web.
-Criminals used AI agents to break into 400+ Latin American banks.
-Capcom confirmed a breach exposing 11.7 million email addresses.
-GitLab disclosed a 10/10 severity flaw in versions going back to 2014.
-LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets.
None of these has a confirmed link to PHP2Shell.
We’re seeing separate breaches unfold together.
The true number of incidents could take months to come out.
The world is still on alert. Attacks are still coming.
G DAXY retweeted
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
At the centre of the shutdowns is something most of us have never heard of, but use every day.
PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password.
Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity.
Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving.
Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours.
Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline.
Websites have gone dark worldwide, from government portals and hospitals to banks.
CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit.
Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each.
Over 1.1 million use older versions no longer receiving official PHP updates.
Older installations may need an upgrade to a supported PHP version or a fix from their software provider.
And patching does not remove a backdoor an attacker may already have planted.
Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections.
But PHP isn’t the only security story unfolding.
-Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers.
-India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”.
-State Bank of India confirmed 3,897 customer records on the dark web.
-Criminals used AI agents to break into 400+ Latin American banks.
-Capcom confirmed a breach exposing 11.7 million email addresses.
-GitLab disclosed a 10/10 severity flaw in versions going back to 2014.
-LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets.
None of these has a confirmed link to PHP2Shell.
We’re seeing separate breaches unfold together.
The true number of incidents could take months to come out.
The world is still on alert. Attacks are still coming.
G DAXY retweeted
A stunning security flaw found in around 70 per cent of websites has seen governments and businesses around the world racing to shut down everything. Full story: bit.ly/3W0ScDV
G DAXY retweeted
A major cyber security flaw has forced government websites worldwide offline, affecting 70% of identifiable sites including those in Australia, Japan, Europe and the USA.
