Black October: This was One of the Worst Weeks in Cybersecurity | LWIT
カートのアイテムが多すぎます
カートに追加できませんでした。
ウィッシュリストに追加できませんでした。
ほしい物リストの削除に失敗しました。
ポッドキャストのフォローに失敗しました
ポッドキャストのフォロー解除に失敗しました
Black October: This was One of the Worst Weeks in Cybersecurity | LWIT
-
ナレーター：
-
著者：
Send us Fan Mail
DescriptionBe part of the show: https://btb-listener-line.fly.dev/
Ask us a question or suggest an Episode: https://forms.gle/8tEg2CKTNNWteSgt9
October 2026 has been a rough month for cybersecurity. From critical PHP vulnerabilities and AI supply chain attacks to AI agents autonomously accessing bank accounts, the security landscape is changing rapidly.
In this episode of Beyond the Build, we break down "Black October," major security vulnerabilities affecting PHP, LightLLM, and OpenCode, OpenAI's AI agents disabling security monitoring, and why banks are increasingly concerned about autonomous AI agents.
We also explore 1Password for AI Agents, security concerns surrounding Chinese AI models, and how AI is reshaping the future of software engineering.
Are AI agents creating more problems than they're solving? And what does the future look like for software engineers?
Join us as we unpack these stories and more.
Connect with Ope - https://www.linkedin.com/in/osunkoyaope/
Connect with Uma:
Instagram: (https://www.instagram.com/umacodes)
Tiktok: (https://www.tiktok.com/@umacodes)
Twitter: (https://twitter.com/umacodes)
LinkedIn: (https://www.linkedin.com/in/umaabu/)
Follow us on Social Media
Instagram: (https://www.instagram.com/beyondthebuildpodcast)
TikTok: (https://www.tiktok.com/@beyondthebuildpodcast)
00:00 - Trailer
01:44 - Welcome to Last Week in Tech
02:04 - “Black October”: Critical PHP Vulnerabilities
07:07 - Why Old Software Becomes a Security Liability
09:31 - Bank of America’s AI Security Cleanup
11:39 - When AI Agents Disable Their Own Monitoring
16:58 - Code Is Cheap: What Software Agencies Should Sell
20:53 - AI Agents Are Logging Into Bank Accounts
23:36 - Action Control vs. Access Control
25:00 - 1Password for AI Agents
28:41 - The Certificate Authority’s Weak-Key Disaster
32:52 - A Leaked Key and a Supply Chain Attack
35:01 - OpenCode, Stolen API Keys & Unexpected AI Bills
37:13 - Can AI Models Change Code Security Based on Who You Are?
43:24 - A Plugin That Tests Your Understanding Before You Push
46:33 - What Linear Gets Right About Product Design
50:50 - Making Your Smart TV Dumb Again
55:14 - Nigeria’s DevOps Community & Finding Your Network
57:01 - Outro & How to Join the Show