The PHP bug marks a dangerous new era for the internet. OpenAI’s poised to cash in

Welcome to Eye on AI.

Emily Forlini here, filling in for Beatrice Nolan.

In today’s issue: Researchers discover a security flaw affecting 70% of the web Anthropic could file for IPO as soon as tomorrow Anthropic unveils Duet, its rival to OpenAI’s Dots and Meta’s Muse AI-driven layoffs at Barclay’s I’ve been covering the growing number of AI-powered hacks for months now, going back to when OpenAI’s models autonomously attacked Hugging Face in July.

Ever since then there’s been a steady drumbeat of incidents, and this month the tempo of alarming cyber news picked up considerably.

There have been more than 20 cybersecurity incidents in October, many just this week.

The internet may officially be entering a new era, one in which sites are inherently less safe than they used to be.

Cybersecurity paranoia is becoming table stakes for anyone who aims to conduct business online.

Some are saying that the new “moat” for businesses is becoming how well they can protect their customers and IP from from AI-powered cyberattacks—not necessarily what that IP or customer base actually is.

Security professionals have long been warning that increasingly powerful AI tools would empower bad actors to exploit bugs in code.

This week, experts told me , those warnings are now coming true.

AI models have become noticeably more powerful at cyber tasks in recent months.

Specifically, they’re better at processing large amounts of code, and acting autonomously.

Hackers are having greater success setting off AI agents on evil missions.

Sometimes, many AIs work together in groups known as agent swarms.