🚨 Your Investor Portal Was WIDE OPEN Yesterday

22 Oct 2026 · 1 min

Watch on YouTube

1:24

In this urgent video, Bridger Pennington warns viewers about a massive, ongoing cyber‑attack wave dubbed “Black October.” Over the past 24 hours, numerous high‑profile organizations—including WordPress, MetaMuse, Palo Alto Networks, and SafePay—have reported breaches. More than 400 banks, primarily in Latin America, disclosed attacks, while U.S. banks are detecting unauthorized third‑party AI agents performing man‑in‑the‑middle credential interception, even capturing dual‑authentication tokens to access accounts. The U.S. NSA and FBI have issued emergency advisories urging any entity using PHP to either patch immediately or take systems offline. Microsoft attributes the campaign to a China‑linked group exploiting an open‑source agent framework, affecting over 2,250 Microsoft 365 tenants worldwide. Pennington urges viewers to stay updated, share additional information, and treat the situation as a rapidly evolving global crisis.

Chapters

One of the largest cyberattacks in history is going on right now. It's been the last 24 hours with all of these groups saying they're hacked and had and/or have had problems. People are calling this Black October. These incidents are happening, it feels like every hour. Many of these would be the biggest incident of the year. This has all happened in the last 24 hours. You can pause and read through these if you want. These aren't like small companies. I mean, we got WordPress, we got MetaMuse, we've got Palo Alto. I mean, these— SafePay. I mean, these are huge organizations. So this morning, over 400 banks Primarily in Latin America said that they were having some kind of attack on them. U.S. banks are detecting also unauthorized third-party AI agents. They're calling it man-in-the-middle, where it sits and watches your credentials. Even can watch your dual authentication happen to then access bank accounts. This prompted NSA Cyber to say effectively all organizations using PHP for their systems are advised to prepare to update those things or take them offline. They essentially said, and FBI Cyber as well said, just start taking devices offline if you cannot update them right now. Now everyone's trying to figure this out in real time. But apparently Microsoft believes this is a China-alleged group using open-source agent framework to hit 2,250+ Microsoft 360 tenants, and there's some kind of coordinated effort going on around the world. Well, rip the internet. It was fun while it lasted. I don't know what's going on. I guess follow along to stay in the loop. Comment down below if you have more details that we should share, and I guess it's kind of an ongoing situation, so pretty interesting.