Thursday · Oct 22, 2026
·
The Signal · Issue No. 75
Notable
Daily AI intelligence, translated for business operators.
Today's Signal
A flaw in the code behind 70% of websites was found by AI. Check whether yours is patched this week
Two critical, decade-old flaws in PHP, the language behind roughly 70% of websites, were caught with OpenAI's GPT-5.6 Sol and patched. The bugs let attackers take over a server with no login. The NSA says anyone who can't patch right away should pull systems offline, and Cloudflare reports early attacks already emerging. OpenAI says more significant finds are still being fixed.
What this means for you
If your website, online store, booking tool, or customer portal runs on PHP (WordPress does), ask whoever manages it today whether the patch is installed, and get a plain yes or no. The bigger lesson: AI now finds old weaknesses faster than most small teams can respond, so you need someone or something that watches your systems for you.
See how we build it in →
02Platforms
Salesforce is buying Braze for $5.7 billion, and your software bundle may get tighter and pricier
Salesforce agreed to acquire customer messaging platform Braze to build out its AI marketing stack. Big software vendors are racing to own the whole customer journey inside one product.
For you: If you run on one of these suites, expect bundling pressure and price changes, so know what you can export and what you could swap out before a renewal forces the question.
Go deeper →
03The Market
AI agents are starting to shop for your customers, so your product info has to be readable by machines
Brands are rewriting how they describe and structure products so automated buying tools can compare and pick them. The sales pitch is no longer aimed only at people.
For you: Clean, consistent pricing, specs, and service details on your site may soon decide whether an AI assistant recommends you or skips you.
Go deeper →
04Tools
AI that acts on its own is coming to your tools, so decide now what it's allowed to touch
Forbes argues marketing AI is shifting from waiting for prompts to anticipating needs and triggering actions itself. That means less hand-holding but also less visibility into what it's doing.
For you: Before you let any tool act for you, set clear goals, limits, and a person who reviews what it did.
Go deeper →
05Models
Last-generation AI is already strong enough to break old systems, so don't wait for the next model to act
The PHP flaws were found by a model now well behind the frontier, with Google's Wiz also catching them using Gemini 4 Argon. Newer models are only getting better at this.
For you: You don't need the newest AI to benefit or to be at risk, so put what's available today to work on your own operations.
Go deeper →
06Signal Check
The one thing a smarter model can't fix: nobody was watching your systems
The headline is that AI found bugs that sat hidden for ten years. But the model only found them because people pointed it at the right target and then coordinated the fix. The model is the engine, and an engine alone doesn't get you anywhere. The businesses that come out ahead will be the ones with an operating system around the AI that knows their stack, their data, and who owns each decision.
InGen editorial · Oct 22