Cybersecurity’s Black October: How to protect yourself

Each day brings news of another AI-powered attack, or a newly discovered vulnerability. Here’s what’s happening and how ordinary people can protect themselves online. Cybersecurity professionals are having a brutal month. What’s being dubbed Black October isn’t even over, and it’s already brought about several dozen major cyberattacks and AI-identified vulnerabilities across the internet. When critical vulnerabilities in PHP, the programming language used by around 70% of websites, were uncovered with the help of AI tools and >disclosed by the PHP Foundation on Oct. 21, the race to patch servers around the world began. Cloud services provider Cloudflare reported millions of attempts to exploit the vulnerability after its disclosure, following thousands of attempts in the preceding hours. Some countries, including France and Finland, temporarily pulled access to certain websites while the US National Security Agency (NSA) >warned organizations to patch the flaws immediately or take affected systems offline. “We are at Security Armageddon now,” >said NEAR founder Illia Polosukhin. Anthropic’s chief security adviser Jason Clinton >warned that, “as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better.” Citizens of the United Kingdom are even being >urged to “be ready” for an emergency, such as severe weather or cyberattacks, that could cut off access to critical infrastructure such as water, electricity or the internet. US military installation have been told to prep for 90 days of independent operation under the FORTRESS initiative. Beyond rushing out to stockpile canned food and walkie-talkies, is there anything else ordinary people can do to mitigate their exposure? “It’s really bad. It looks like the rest of the internet is waking up to the reality we had three months ago,” Rob Hamilton, a Bitcoin security researcher involved in the Bitcoin Red Team, tells Magazine. UK government is urging citizens to be ready for an emergency. Source: gov.uk In the past week or so, cloud platform Railway >disclosed that an attacker has accessed and decrypted customer