• This week's cyber freakout explained: AI is making software weaknesses easier to find and exploit.
• The message from Cloudflare's Stephanie Cohen and Vercel's Tom Occhino: Don't panic!!!
• Do we need everything connected to the internet? Paper bank statements work well.

A few weeks ago, I heard a strange story about a friend who works at one of the Big Tech companies in Silicon Valley.

She'd recently ripped out the connected devices in her home, ordered paper bank statements, and stocked up on canned goods in her basement.

Now, she's a very sane, experienced person, and quite senior at one of the largest internet companies on earth. Why was she disconnecting so much? Just to be sure, my family ordered paper bank statements, too. It was still a head-scratcher, though.

Fast forward to this week, and her actions look a little less crazy.

AI models have exposed serious security weaknesses in software used by roughly 70% of websites. Meanwhile, US banks are finding AI agents inside customer accounts, including some that appear to be acting without their owners' instructions, Axios reported.

'Black October'

The digerati have now entered full freakout mode. Much of the internet meltdown is happening on, well, the internet, my colleague Alice Tecotzky noted.

On X and Reddit, warnings of a looming “Black October” spiraled into visions of AI grinding civilization to a halt. One lengthy post on X warned of a potential “global cyberattack/AI swarm” and offered a survival checklist: Stockpile cash in small bills, print out your neighbors' phone numbers, download maps, buy a hand-crank radio, and stash a gallon of water per person per day.

Oh, and don't forget the manual can opener. You don't want to survive the AI apocalypse only to be defeated by a tin of beans.

Nikita Bier, a prominent app developer and former head of product at X, best captured the mood.

"It's time to turn off the internet," he posted Wednesday night.

A Cloudflare exec says it's 'a little bit scary'

If you're reading this, you haven't done that yet. But should we really be worried?

I put that question to Stephanie Cohen, chief strategy officer at Cloudflare, which helps protect about 20% of the internet.

"The world is a little bit scary right now," she told me on the side of Cloudflare's annual conference in San Francisco this week.

Here's the problem. The internet is built on decades of software, much of it riddled with security holes.

Some of these weaknesses have been known for years. However, fixing them takes time and money, and hackers often lacked the skills to exploit them anyway. So they were left alone.

AI changes that calculation dramatically. Someone who previously needed years of training to break into a computer system can now get help from an AI model. And these tools can search for weaknesses at a speed humans simply can't match.

The result: The number of newly published software vulnerabilities (Common Vulnerabilities and Exposures in industry lingo) has exploded.

Now, there's a frantic race between people trying to break into systems and those trying to protect them.

Don't panic about AI

Cohen's message, though, was surprisingly reassuring.

AI helps the good guys find and fix these problems. Cloudflare, for instance, released protections for the latest vulnerability to customers, including those using its free service.

And there's a bigger effort underway.

OpenAI has launched an initiative called Patch the Planet, working with Cloudflare and other security professionals to use AI to find weaknesses in widely used software and help repair them.

Tom Occhino, chief product officer at Vercel, told me recently that his company has been talking with partners about launching a nonprofit that would fund a swarm of good AI agents that go out on the internet to find and fix software flaws.

Amazon is joining the fight, too. Its new Continuum service, available Thursday, uses AI agents to find security holes and propose fixes. Amazon said that people maintaining freely available software can use it to help protect the wider internet.

Humans may still have to check and approve these repairs, but the prospect of AI helping clean up decades of neglected software is encouraging.

The irony of this is not lost on some in the industry.

"The funny thing is everyone was saying AI slop code will cause a cyber crisis but it's actually all the old human slop causing it and the AI is just cleaning it up," software engineer Ben Kaufman wrote on X on Thursday.

Either way, Cloudflare's Cohen thinks these AI-inspired freakouts will push the industry to do better — by exposing issues and adding urgency to get them patched.

"We may end up in a world where actually we've become significantly more secure at the end," she said.

The trouble is getting there.

A fundamental question about the internet

When I ran into Occhino recently at a Vercel conference in San Francisco, he described a world in which software that everyone assumed was safe suddenly looks vulnerable because increasingly capable AI models are scrutinizing the basic systems that underpin the internet.

That led to a more fundamental discussion between us: Why did we connect so many things to the internet in the first place?

For years, the technology industry has raced to put everything online. Thermostats. Refrigerators. Doorbells. Cars. Bank accounts.

We assumed that connecting something to the internet automatically made it better.

Perhaps we should reconsider.

Before the internet

I remember the world before the internet. It worked pretty well. We managed to buy groceries, pay bills, heat our homes, and generally get through the day without every appliance talking to a computer somewhere.

That doesn't mean abandoning online banking or throwing your smartphone into the sea.

Occhino, for one, isn't particularly worried about hackers wiping out his bank account. Modern banks have sophisticated protections, and he recommends everyone turn on additional login security.

Maybe the cybersecurity crowd, which spends its life immersed in online threats, is missing something obvious.

Not everything needs to be connected.

Occhino put it neatly: "There's certain things that don't make sense to be on the internet in the first place."

Perhaps that's the lesson from this week's panic. We don't need to turn off the internet.

We just need to remember where the off switch is.

Alice Tecotzky contributed reporting.

Sign up for the AI Insider newsletter here. Reach out to me via email at abarr@businessinsider.com

Ukraine’s drone strikes on Russian tech giant Yandex thinned out social media bots, Ukrainian President Volodymyr Zelenskyy said on 12 October. Network data do show Yandex’s automated traffic collapsing after the strikes. Disinformation researchers say that traffic is search crawling, not trolls. A Ukrainian social media monitor told Euromaidan Press its own data show no clear drop in bot activity either.

Russian influence operations are a live threat to European votes. In August, the Matryoshka network fabricated news clips aimed at Sweden’s general election. German and French authorities flagged the same network targeting Germany’s local votes and French presidential hopeful Gabriel Attal. A way to switch such networks off would hand allies a new tool, which is why the claim needs testing.

The president’s claim

Addressing the Warsaw Security Forum by video link, Zelenskyy said that once Ukraine began answering Russia’s operation against Ukrainian data centers and its strikes reached Yandex, many social media platforms suddenly became a little easier to breathe on.

Many people noticed less hatred, discord, and provocation because there were fewer bots, he said. It was quite clear where those bots came from, he noted. Their disappearance once Yandex went down proves again that Europe is not the source of the problems, he added.

Lithuanian Prime Minister Mindaugas Sinkevičius said at the same forum that allies should ask Zelenskyy to strike more data centers in Russia, answering a question on how to protect their elections from interference.

Three data centers in four days

Drones first hit Yandex’s data center in Sasovo, Ryazan Oblast, on 8 October. Yandex said it shut the site down completely. The next day, a strike on its Kaluga site completely disabled several modules, the company said. Yandex calls Kaluga its largest data center, Russian science outlet T-Invariant noted.

Ukrainian drone maker Fire Point said its FP-1 long-range drones carried out that strike.

After the first strike, on Sasovo, a source at Yandex summed up the mood for The Bell: “Things are rotten. We keep working.”

Overnight on 11 October, drones hit the third site, in Vladimir. Yandex said it fully halted that data center too. Vladimir Oblast Governor Aleksandr Avdeev acknowledged an attack on “infrastructure” near the city. It started a fire and cut power to two substations serving 5,000 residents, he claimed.

What the traffic data show

Automated web requests from Yandex’s network fell to 0.4% of their two-week peak after the third strike, Cloudflare Radar data showed, Cybernews reported. That chart counts automated requests to websites, mostly from Yandex’s own search crawlers. It does not count social media posts.

The chart “has nothing to do with social media,” the Russian opposition analysis group Antibot4navalny wrote.

Russia’s overall bot traffic last week looked much like any other week. Yandex’s own figure began recovering on Sunday. Covert troll farms usually hide behind residential proxies, hacked devices, virtual private networks (VPNs), and Western cloud providers, the outlet added.

What Ukrainian social media shows so far

Yevhen Luzan tracks Ukrainian social media sentiment as an analyst at the Ukrainian nonprofit CAT-UA. Its daily reviews sample about 500 random posts. On 11 October, that sample showed an unusually small share of posts criticizing Ukraine’s authorities, he told Euromaidan Press. Accounts showing signs of bot activity made up only a few tenths of a percent of that criticism. That is within the margin of error.

The same day, though, US President Donald Trump’s deal for Russian diesel supplies dominated Ukrainian feeds. Luzan said a rally-around-the-flag effect could explain the shift, as outrage at Washington crowded out domestic stories.

“To state it definitively and draw a cause-and-effect link from this correlation would be too bold,” he said.

Across the wider pool of about 10,000 daily mentions, CAT-UA sees no significant drop in posting activity in recent days. The curve shows only the usual rises and dips around the start and end of the week, Luzan said.

“For now, even a hypothetical drop in bot farm activity dissolves entirely in the natural fluctuations of the information space,” he said.

How a crawler chart became a bot story

The claim that Russian social media bots fell by half is unproven and built on a misread chart, disinformation analyst Joohn Choe concluded in a fact-check. It traces back to an 8 October post by security researcher Jeremiah Fowler. That post said Russian bot traffic had dropped to 49%. On 11 October, radio reporter Jamie Dupree spread it on X. Tom’s Hardware then ran it under a headline calling the crawler traffic “Russian disinformation bot traffic,” wording it has since changed.

Ukrainian military analyst Tatarigami claimed that Texas separatist accounts with identical “Veteran, Christian, Father, MAGA” bios had gone quiet. He said Quebec separatists and Polish anti-EU accounts went quiet alongside them.

Polish military analyst Jarosław Wolski claimed that AfD’s online support fell 56%, posting a chart without naming its source. Another X user said “Polish” bots had vanished.