Our new tech is hacking into our old tech

Your bank has a problem with your AI agent

Wizard typing on a laptop at a folding table in a shuttered alley, a steaming mug and a pot on a camp stove beside him

Howdy wizards,

Last week I wrote that I’m vibe coding my own beehiiv replacement. 

I got inspired after seeing that Marc Lou is doing it. He even got Tyler Denk (beehiiv's CEO) more than a tiny bit triggered, saying no one serious will ever use a vibe coded email platform.

Which makes me all the more excited to see if I can actually pull this off.

I’ve already built everything. So far so good, but the trickiest part is ensuring high deliverability. I’ll test that gradually over the next 2 months before I transition fully.

Whatever the outcome, I’ll show you how my vibe coded solution performs against beehiiv. I have 20K subscribers and 3 years of sending history there, so it should make for a solid comparison.

Here’s what’s brewing in AI.

The big thing

AI found two hefty security holes in PHP, the software most of the web runs on.

A post on X by Nikita Bier (@nikitabier): “There is nothing to worry about. Nothing important is run on PHP or old software, except the water & electrical grid, a few government services like our missile defense systems and a handful of electrified fences at the zoo (for the lions, tigers and cobras).”

These security issues basically let strangers take over a server without logging in.

The problem is particularly humongous because PHP is the programming language that WordPress and a lot of the internet run on.

OpenAI says it's one of the most impactful security issues in recent memory.

Before this went public, attempts to hack PHP were in the thousands, but reached millions in just a few days, which shows how easy it is to hack away with AI.

Why it matters

Our new tech is quickly revealing all the weaknesses of our old one, and we're not prepared.

A big part of the internet is decades-old tech that isn't necessarily super secure (PHP is 31 years old), but at least it used to take a lot of effort to read through and try to hack. So people fixing it could actually keep up.

Not anymore, though. Thousands of AI agents being pointed at a system to read the codebase and finding holes in it probably wasn't on the bingo cards of the people making these systems.

And while it's gotten really cheap to find these security issues, fixing them still remains slow and expensive. Humans still need to oversee the process and make judgement calls, because it means changing software millions of people depend on.

OpenAI says it has found more security holes like this, and expects more findings to be revealed in the coming months.

IN PARTNERSHIP WITH GRANOLA

Granola Briefs: a Your Brief card reading Always be prepared for back-to-back meetings, ringed by source chips for Past Meetings, Emails and Web LinkedIn

You’re two minutes out from a client call. You can’t remember what you discussed last time. You’re scanning old emails and digging through notes, piecing it together as the call starts.

It’s not that you’re disorganised. Prep takes time nobody has between back-to-backs.

Granola’s Briefs is a meeting prep feature that gathers context for you before you even ask.

Overnight, Briefs pulls together who you’re meeting, what you discussed last time, recent company news and any email threads (if you connect Gmail). By the time you join the call, you glance at two or three lines of prep. Everything’s sourced, so you can dig deeper if you need to. No setup. No prompting.

NEWS NEWS NEWS ❦ NEWS NEWS NEWS

All the small things

Industry moves

  • Big US banks are restricting AI agents after finding them inside customer accounts. People are giving agents their bank logins, which breaks most banks’ rules even when the customer agrees. Some of those agents are calling the bank’s support line, and in some cases seemingly acting on their own. <-- Banks are calling this "horrifying" but what's equally horrifying to me is how outdated their systems are. The problem here is actually the bank, not AI. They need to get with the times and create a good API for their users with proper permission handling. Stripe already has this and Claude runs everything I do with Stripe for me now — works really well I think. Try at home at your own risk though.

  • ChatGPT advertisers can target you by what you type, and by your email or phone number. 404 Media bought ads in ChatGPT to test it. The ad sits under ChatGPT’s answer, marked as sponsored, and only shows up when your chat touches what the advertiser sells. An advertiser can also upload a list of emails or phone numbers, so only the people on it see the ad. <-- Google and Meta have offered that kind of targeting for years, and AI companies are now following suit. Ads only show on the Free and Go plans, though, which I think limits the usefulness for a lot of B2B advertising where I suspect their target group are most often on a paid plan.

  • Anthropic published its own hiring numbers: juniors fell from 27% to 9% of its technical hires. That’s the share, not the count: technical hiring there still grew. By August, AI agents at Anthropic were clocking six times the hours of its employees. One engineer described the job as facing “an army of Claudes, with every one asking for my attention.” <-- hey, that's how my job feels too! Anyone else?

New tools & product features

  • Anthropic launched Claude Duet, their answer to OpenAI’s Dots. Duet sends you a morning brief from your connected apps and only messages you when something needs you. It's meant to ask before it sends, pays, signs or deletes anything. Some things, like moving money between accounts, are off-limits even if you say yes. It’s a research preview for Pro and Max subscribers in the US, with a waitlist. <-- Grok Bot, Dots, Claude Duet… these are basically the same thing with different LLMs underneath. A big upgrade for people used to just regular Claude. I personally use Claude Code + a VPS (an always-on computer that I rent and Claude accesses remotely) to achieve much of the same thing, but in an even more flexible way. It's a great alternative to these out-of-the-box options if you're a bit technically inclined or have some time on your hands to learn.

Models

  • Meta is back near the top with Muse Wonder. Apparently, it's right behind Claude Opus 5.5 and ahead of GPT-6 Astra in terms of performance. Meta’s pitch is exactly the same as any other model release lately: an agent that keeps working until the job is done. <-- I saw someone test it on PokĂ©mon Red and apparently it spent $96 and couldn't get past the first forest. Then again, the forest is a tough place for LLMs apparently:

A Reddit comment: “The forest is where LLMs go to die apparently. Watched the stream highlights and it was just circle walking simulator with occasional menu opening. $96 to watch an AI have a mental breakdown in tall grass is a new kind of performance art.”

A new kind of performance art

IN PARTNERSHIP WITH UPDF

UPDF brings PDF editing, annotation, conversion, OCR, AI summarization, organization, and e-signing into one workspace. Get up to 66% off UPDF now, plus up to two months of UPDF AI free.

❦

You are a delight.

Disclosure: To cover the cost of my email software and the time I spend writing this newsletter, I sometimes work with sponsors and may earn a commission if you buy something through a link in here. If you choose to click, subscribe, or buy through any of them, THANK YOU – it will make it possible for me to continue to do this.