70% of the World’s Websites at Risk - Critical Global CyberSec Issues

[chuck83]

doing my IT/programmer due diligence! it's technical i don't expect everyone to understand but this is huge. from government sites to cloud to iot. you've been warned. upgrade, patch, and hotfix anything that needs it when they become available!

8 eMudhra certificates are compromised. Here's what you need to know

https://blog.cloudflare.com/emudhra-certificate-compromise/

 

AI Just Found a Bug That Puts up to 70% of the World’s Websites at Risk
https://www.wsj.com/tech/cybersecurity/ai-just-found-a-bug-that-puts-up-to-70-of-the-worlds-websites-at-risk-fd0902ea

Websites taken down worldwide as critical cyber-security update issued
https://www.bbc.com/news/articles/cmly0lg3w5x2o

Government websites go dark after AI-discovered flaw sparks security scramble

https://www.reuters.com/world/asia-pacific/eu-agency-warns-websites-may-need-be-taken-offline-php-prepares-patches-2026-10-21/

Security Disclosure: Wednesday October 21st

https://blog.railway.com/p/security-disclosure-wednesday-october-21st

 

at this point a lot of things can be at risk anything! again, smart with a web interface. today has been an ugly day in IT.  i see the financial system looking for ai to protect their interests. sooner or later quantum computing will be a thing and ai + quantum will likely be the way of the future... if this system lasts that long that is.

Edited 16 hours ago by chuck83

[chuck83]

Older news-

French supermarket fridges get hacked, heating to 122°F and sparking fires
https://www.cnbc.com/2026/10/13/france-supermarket-hack-cyberattack-fridges-fires.html

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/

i emphasize, if you have home cameras, nases, tvs, stoves, lights, clocks, power strips,  etc, and they're smart and have web gui's or access the cloud for you to access them. caution should be exercised. 

[secondofseven]

At my work we took main website and couple other services offline for the day. At least those with php in it.

 

Looked briefly also at this community cms but its not php based. 👍

[Eejay]

5 hours ago, chuck83 said:

at this point a lot of things can be at risk anything! again, smart with a web interface. today has been an ugly day in IT

This situation with the development of AI in the wrong hands puts me in mind of a time long ago:

"Jehovah then said: “Look! They are one people with one language, and this is what they have started to do. Now there is nothing that they may have in mind to do that will be impossible for them."Genesis 11:6

Jehovah took action then, and he will soon be taking action again. 

[chuck83]

just my opinion, i think this is very much a tower of babel moment given the rumors of whats in ai labs. we the public see a fraction of whats in the labs. time will tell.

[sania]

We are asked to trust only the information provided on the official website. But imagine if our website gets hacked and misleading information were published on it....😨

Hope Jehovah will not allow that to happen.. 

[secondofseven]

1 hour ago, sania said:

imagine if our website gets hacked

I always assume everybody has an external hard drive with all jwpub / mp3 / pdf / mp4 content downloaded, tucked away in the disaster backpack ... 😎

 

Off course also a rugged laptop to have it available without internet.

 

But maybe I read to much prepper blogs. 🫣

Edited 6 hours ago by secondofseven

[LeolaRootStew]

1 hour ago, sania said:

We are asked to trust only the information provided on the official website. But imagine if our website gets hacked and misleading information were published on it....😨

Hope Jehovah will not allow that to happen.. 

 

We know the voice of our shepherd.

 

Remember the letter the KGB intercepted and the fake one they sent out? Real Christians could tell that the new letter wasn't biblically-based and so will we. We have discernment - we know what the Bible teaches and how to reason on principles.

 

The GB will never ask us to sin, so we know not to follow those instructions. Our daily studies will make sure we are not fooled by false reasoning and we will easily spot and reject directions that go against scripture.

 

Any instruction besides that might be a trick (such as "turn yourselves in"), but if we follow such instructions and they turn out to be a trap - so what? Is Jehovah too weak to rescue us? Of course not! And Jehovah will see that we fell into such a trap because we have faith in him. He may even turn the situation to our favor.

 

So 1) we don't need to fear false scriptural directions because we know Jehovah's voice and 2) we don't need to fear a police trap because Jehovah can rescue us. What else is there to fear?

[Shawnster]

2 hours ago, sania said:

We are asked to trust only the information provided on the official website. But imagine if our website gets hacked and misleading information were published on it....😨

Hope Jehovah will not allow that to happen.. 

 

Also trust that the brothers are constantly monitoring the website so that, if it were to get hacked, the altered information would be removed quickly and that steps would be taken to prevent users (us) from seeing the wrong information. 

 

 

[Tortuga]

1 hour ago, Shawnster said:

 

Also trust that the brothers are constantly monitoring the website so that, if it were to get hacked, the altered information would be removed quickly and that steps would be taken to prevent users (us) from seeing the wrong information. 

 

 

True, its not likely we will ever see any of the GB wearing a MAGA hat or suggesting we vote because it will fulfill a Bible prophecy...🤣

[secondofseven]

1 hour ago, Shawnster said:

altered information would be removed quickly

 

Thats only in the scenario somebody has unauthorised access (identity theft for example) without comprimising the identity system itself.

 

Quick removal requires the rest of our infrastructure to remain intact. If for example our account systems for inlog / identification / authentication ever get hacked then access to every system connected to it will be blocked.

 

If somebody gains higher level access then changed content would be the least of our worries. Rerouting of the website to other servers, encrypting our data and ransomware it etc comes to mind.

[Osprey]

Hm just a question.. isn't this forum running on PHP?

[chuck83]

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html
 

Scoop: Unvetted AI agents are accessing U.S. bank accounts
https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access

ai will likely be governing the financial/economic systems soon. almost a guarantee.

[BlaqueCalalilly]

3 minutes ago, Osprey said:

Hm just a question.. isn't this forum running on PHP?

According to second of seven (joel)  it is not. It is the second response down from top...

[Osprey]

But I'm not sure that is true, this forum is based on Invision Community which is based on PHP.

[chuck83]

4 hours ago, Shawnster said:

Also trust that the brothers are constantly monitoring the website so that, if it were to get hacked, the altered information would be removed quickly and that steps would be taken to prevent users (us) from seeing the wrong information. 

 

2 hours ago, secondofseven said:

If somebody gains higher level access then changed content would be the least of our worries. Rerouting of the website to other servers, encrypting our data and ransomware it etc comes to mind.

exactly @secondofseven assuming they can get around the agents or just hackaton on authoritative dns by bad certificates like i posted above.

https://cybersecuritynews.com/node-js-releases-security-updates/
https://thehackernews.com/2026/10/threatsday-adobe-rce-dns-wallet-theft.html

 

granted its not affected dns servers yet like that. but anyone from their computer mac or pc can do this from command or terminal.

nslookup jw.org
 

Non-authoritative answer:
Name:    jw.org
Address: 18.65.25.82
Name:    jw.org
Address: 18.65.25.109
Name:    jw.org
Address: 18.65.25.22
Name:    jw.org
Address: 18.65.25.71

dns ties domain names to ip addresses. can you imagine trying to remember to type in those 4 ip addresses to get to our website?   i'm not saying the society doesn't have the tech to mitigate threats but on paper? 😬 dns is very important. if any sort of authoritative dns gets compromised because of the certificate issue. those ip addresses can be briefly changed, expose a hosted cloud pool, and so much more. they can leave our servers intact and just reroute to another host with ai agents.

so if the gov. or threat actors want to take over jw.org and make real some of the artwork in pubs/vids, misinformation and the things we talk about here a reality. we just have to be alert and aware. train discernment/conscience now. just my 2cents though.