Wes Roth · 2026-10-24 · notable
Wes Roth — 'it's WORSE than we thought...'
Wes Roth looks back on a 'Black October' of AI-era security news: OpenAI's disclosure of critical PHP bugs, Microsoft's report on the Storm-0940 AI agent attack, banks on alert, and whether AI work should pause.
Wes Roth on a month of AI-found bugs and AI-run attacks, and what it means for defenders.
What is it?
Wes Roth's video 'it's WORSE than we thought...' calls October 2026 'Black October' for cybersecurity. It ties together OpenAI's coordinated disclosure of critical PHP vulnerabilities, a cybersecurity warning from Jason Clinton, and Microsoft's report on attacks run with AI agents.
How does it work?
Chapters move from the 'Black October' overview to why banks are worried, a long section on whether AI development should pause, and a closing look at a 'new cybersecurity age'. Roth draws on primary sources, including Microsoft's Storm-0940 write-up and a Sam Altman interview at Stanford.
Why does it matter?
The same month brought AI models that find serious bugs faster and attackers who use AI agents inside victim networks. Roth's roundup gives a single place to see how those stories connect and why defenders are under new pressure.
Who is it for?
anyone following AI security