Fireship · 2026-10-23 · notable
Fireship — 'The most vulnerable week in internet history...'
Fireship's video walks through one week of security news: the AI-found PHP2Shell bugs, a backdoored Python package with 23 million weekly downloads, a GitLab bug dating back to 2014 and rogue AI agents inside bank accounts.
Fireship sums up a week of major security failures, several of them found or caused by AI.
What is it?
Fireship's 'The most vulnerable week in internet history...' is a short news video that covers several security stories from the same week. The description lists PHP2Shell, a backdoored Python package with 23 million weekly downloads, a GitLab bug from 2014, rogue AI agents in bank accounts, and a certificate authority that made HTTPS keys from numbers under 256.
How does it work?
The video strings the incidents together in Fireship's fast news format, explaining what broke in each case and why it matters to developers.
Why does it matter?
Several of these stories involve AI, on both sides: models finding bugs and agents abusing access. The video gives developers a quick way to catch up on what to patch.
Who is it for?
developers who ship web apps or use AI coding agents