Last week was a bad week for the internet. As AI models get smarter, they're getting better at finding the weak spots in the code we all rely on, and last week several of those weak spots were exploited at once.

The biggest was a flaw in PHP, the coding language behind around 70% of the internet, including WordPress, WooCommerce stores, web apps and even government services. The flaw had existed for over a decade, but AI found a multi-step way to exploit it that could expose login credentials and secure information. Noel explains what it means if you run a simple website, whether your contact forms could be at risk, and why "keep your plugins updated" is still the right advice.

He also covers the OpenCode breach, where stolen API keys were used to fund attacks on other sites, and the Railway breach, which Noel was caught up in himself. He knew something was wrong at 7am when a Clyde update wouldn't go through, but Railway's email didn't arrive until the evening.

The practical advice: use separate API keys for every tool and project, set spending caps and billing alerts, know where the off switch is for every app you run, and use Claude, ChatGPT or Gemini to check exactly which code versions your site is running so you know what needs updating.

Plus Google's new Genie 4, which lets you build and move around in realistic 3D worlds for ads and video.

Send us Fan Mail

How to find us:

We have a free LinkedIn group (AI Automations For Business), the group is open to all.

Interested in learning WebMCP check out webmcp.academy

Check out Clyde, our multi-agent AI platform that connects to 1000+ apps and lets you build powerful automations without the complexity. Join the free Clyde Skool community to learn how to get the most out of it, share workflows, and connect with other builders putting AI to work in their businesses.

New for 2026, you can also find us on Substack, click here to subscribe and get all the latest news and updates from us.

If you would like dedicated help with your automations or would like us to build them for you then you can find our agency at makeautomations.ai

Or you can contact us via email at hello@makeautomations.ai.