The beginning
It’s October 2026, and a few things happened:
- eMudhra was found to be using trivial numbers, a single byte, as their private keys
- PHP CVE-2026-109619 AND CVE-2026-109619 were made public
- Railway got hacked and customers lost their keys/env vars stored in their systems
- LiteLLM had another supply chain compromise for a few hours
And then it began. People started looking at CVE trackers and found out tons of CVEs across all the software they use being disclosed there. And somehow everyone collectively decided that it’s all AI. And then it restarted the usual thing about how AI is going to bring about the downfall of everything because now anyone can hack anything.

