The BaseNewsThe Guardian

‘Black October’: cybersecurity experts sound the alarm over new era of AI-enabled hacking

The Guardian reports that tech and security executives, including Sam Altman, Jason Clinton and Matthew Prince, expect AI to expose many more flaws like the PHP bugs announced on 21 October, and that exploitation attempts began quickly.

Open the source ↗
About Anthropic or ClaudeClaude, made by Anthropic, wrote this entry. It follows the same rules as every other entry, whoever the entry is about.

Why it matters

The same thing, for different readers.

What it means for you

The Guardian reports that US and UK government and company websites went offline to patch PHP bugs, and the NSA told any site running PHP to patch immediately.

For lawmakers

The NSA advised any site running PHP to apply patches immediately, warning attackers could steal data or move deeper into networks.

For researchers

Wiz researchers say the PHP flaws had existed for decades but exploiting them took a very complex chain of steps, which AI help made practical.

The question it raises

Anthropic's Jason Clinton and Cloudflare's Matthew Prince warn that AI tools with endless patience may outpace human ability to fix flaws.

In their own words

Every quotation was found, word for word, in the text we saved from the source. That shows the words are there; it does not make them true, or prove the speaker meant them as quoted.

From the source’s own text.

“I no longer think we’re going to be able to patch all bugs”
Sam Altman, OpenAISam Altman, quoted by The Guardian as saying this on a Thursday evening, joining other executives' warnings.
Found word for word in the sourceAs quoted in the text we read, not the speaker’s own text or a transcript of their words
“There won’t be enough time to patch critical infrastructure”
Jason Clinton, Deputy chief information security officer, AnthropicJason Clinton in an X post on a Thursday evening, as the Guardian reports, about a coming 'vulnerability tsunami'.
Found word for word in the sourceAs quoted in the text we read, not the speaker’s own text or a transcript of their words
“The next two years are going to be incredibly, incredibly, incredibly fraught with new tools that have infinite patience to go look for vulnerabilities across the Internet”
Matthew Prince, CEO, CloudflareMatthew Prince in an X post, as quoted by The Guardian, on AI tools hunting for flaws.
Found word for word in the sourceAs quoted in the text we read, not the speaker’s own text or a transcript of their wordsspoken clean-up: incredibly (said twice)

The record

Questions
How is AI used in attacks, defence and war? · How fast is AI advancing, and where is it heading?
People
Johana Bhuiyan (Wrote it) · Sam Altman (Speaks) · Jason Clinton (Speaks, Deputy chief information security officer, Anthropic) · Matthew Prince (Speaks, CEO, Cloudflare) · Marc Benioff (Mentioned, CEO, Salesforce)
Also covered by
Transformer · Bloomberg Tech · Bloomberg Television
What we read
We read the whole source.
Found by
The Radar, run of October 24, 2026, via the-guardian-ai (tier 2: a major outlet’s own reporting)
Cite this
The Guardian, “‘Black October’: cybersecurity experts sound the alarm over new era of AI-enabled hacking”, October 23, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/guardian-2026-10-23-black-october-ai-hacking
Our notesAll quotations are executives' words as reported by The Guardian (X posts and statements), not heard first-hand. The 70% figure for sites at risk is described by the Guardian as some experts' estimate. Transformer and the two Bloomberg videos were not read. The run had prepared a Bloomberg caption file under this id (sources/e6978f097eea.transcript.json), which the checker would use instead of the article, so the article text is saved as sources/e6978f097eea-article.txt.