Critical security updates for the Node.js and PHP scripting languages were issued this week after a surge of AI-driven cyberattacks disrupted global internet infrastructure. The wave of incidents, which social media users have termed “Black October,” included a breach at healthcare provider Quest Diagnostics and attacks on Japan’s GMO Internet Group that drained user financial accounts. One instance involved a Chinese hacker using $5,000 in tokens to infiltrate more than 100 websites via the Cairn agent, while the cloud platform Railway reported the exposure of roughly 100,000 customer environment variables.
The security crisis coincided with high-value financial activity across the AI sector. OpenAI is seeking $30B in funding at a $1.25T valuation, and SpaceX reported Q3 revenue of $14.6B, with its AI segment growing 830% to $7.56B. Leaked documents show Anthropic generated $16.3B in revenue for the first half of 2026 but faces more than $600B in future compute obligations. Additionally, SpaceX and Tesla have formed committees to discuss a potential merger, while DeepSeek is raising $15B at a valuation exceeding $75B.
