BlueSky announcing their pivot to AI vibe code slop, not via BlueSky but X, was on my bingo card.

Consulting giant Accenture has told many employees that the company will now only spend $29 a month per person on Claude. Employees subject to the cap, some of whom had been spending as much as $1,000 monthly, are scrambling to find ways to make sure they can keep spending as much as they already are.

https://www.404media.co/accenture-tells-employees-they-can-now-spend-only-29-on-claude-per-month/

Microsoft will keep getting record numbers of CVEs through the next 12 months as there's decades of under investment, particularly in Windows but other areas too.

For the record any basic code scanning tool, not AI, would (and did) highlight these things. I sat on the calls where we discussed them. Nobody would fund fixing it.

RE: https://cyberplace.social/@GossiTheDog/114504451845204949

An update - one good side effect of the GenAI boom is it’s forcing Microsoft to fix decades of under-investment in security engineering. The DWM stuff is finally getting patched each month.

The new vibe coded Epic project is great

10/10 slop

Fun side quest if anybody wants to join me - check out Epic Games Launcher for security vulnerabilities.

Orgs using vibe coded as a sales pitch, Lord.

“Programming is hard,” Epic says in a blog post. “So, instead of doing that, we vibe coded a new Epic Games Launcher”

💀

https://www.theverge.com/games/1010751/epic-games-launcher-vibe-coded-ai-linux

RE: https://techhub.social/@Techmeme/117438919395096744

AI safety = regulation which protects the current market leaders. They’re begging Daddy to be regulated, because they know it’s the way to get locked in as The market.

They’re rebooting Baywatch as a full TV show with the lead from Arrow as Mitch. The special effects look impressively bad.

If you use Bumble I'd recommend finding a different dating service and deleting your prior data if you don't use it now, as it sounds likely it is being purchased for AI training data.

https://www.bbc.co.uk/news/articles/cm9qzwjgnjxlo

Character.AI, the GenAI site that convinced some children to kill themselves, has gone bankrupt after parents sued them.

https://futurism.com/artificial-intelligence/google-character-ai-bankruptcy

There’s a Beeb piece here. https://www.bbc.co.uk/news/articles/c9y7l0pm8jkko

RE: https://hachyderm.io/@evacide/117434963703286230

The Yandex decrease in threat activity narrative was a nonsense peddled by the Ukrainian government. People confuse legit search engine bots with social media bots.

Russian propaganda operations don’t run from Yandex. They never have. I deal with them all the time on Mastodon. There was no dip.

It’s a reminder that wars have propaganda - and the propaganda was coming from Ukraine this time.

Men aren’t okay

RE: https://fedi.computernewb.com/@vncresolver/117431367237175833

2026 cybersecurity guide for industrial systems

1) put them online
2) install VNC
3) pick no password
4) done, go watch The Chase

Ivanti Secure Connect has an in the wild zero day allowed unauth RCE, patch is out

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

CVE-2026-104935

related to the above

German authorities are reminding orgs not to directly connect food cooling solutions to the Internet. https://www.allianz-fuer-cybersicherheit.de/SharedDocs/Downloads/Webs/ACS/DE/BSI-CS/BSI-CS_154.html

RE: https://cyberplace.social/@GossiTheDog/117339554795906452

The manufacturer has confirmed this was caused by unpatched systems being internet-facing. The French government CERT has also issued an advisory saying the same. The patch in question removed the date-based backdoor password. https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-012/

The upcoming AI bubble endangers the global financial system - the IMF. https://www.theguardian.com/business/2026/oct/13/ai-share-crash-risk-global-imf-debt-corrowing-cyber-attacks