Mike MurphyAI Handyman
Subscribe
Back to issues

AI Unplugged · by · sent October 23, 2026 · Issue 081

The Internet's Bad Security Day

Several big security problems hit at the same time this week. They weren't connected, but together they made a rough day for anyone running websites or AI tools.

🌲 Agent Evergreen Build Log

Hang in there, I haven’t forgotten about you. Thanks for following along!


🗞️ AI News of The Week: The Internet Has a Very Bad Cybersecurity Day

Several big security problems hit at the same time this week. They weren’t connected, but together they made a rough day for anyone running websites or AI tools.

TechCrunch rounded up the damage:

  • PHP: AI found critical flaws in PHP, the language behind a huge share of websites. Government sites around the world went offline, and the NSA told PHP users to update right away or take their systems offline.
  • LiteLLM: An attacker slipped malicious code into LiteLLM, a popular open-source tool that connects apps to multiple AI models.
  • Node.js: The project patched four high-severity flaws, including one that let attackers run their own code on a server.
  • eMudhra: Attackers stole private keys from this Indian certificate authority, the company that vouches a website is real. That could let them create convincing fake websites.

👉 Read Article

🧠 AI Term of The Week: Sandboxing

Definition: Sandboxing runs software inside a fenced-off space that limits which files, networks, and system resources it can reach.

Explain Like I’m 5: You give your helper a fenced workspace with only the supplies it needs.

Real examples:

  • An AI assistant organizes copies of campaign files in one folder but can’t open your other client folders.

💬 Quote of the Week

“Tell me and I forget. Teach me and I remember. Involve me and I learn.” — Benjamin Franklin

🧰 AI Tool of The Week: Claude Duet

What is Claude Duet: Claude Duet is Anthropic’s new proactive AI agent app (personal agents), built for professionals and small business owners with more on their plates than they can track.

What it does:

  • Sends a morning brief and checks your connected apps every few hours, messaging you only when something needs attention.
  • Keeps working in the background on its own virtual computer, so your laptop doesn’t need to stay on.
  • Drafts work on its own but asks your approval before it sends messages, makes payments, signs documents, or deletes anything.

👉 Explore Claude Duet

🛠 AI Tutorial Of The Week: Hyperframes Studio: Make Promo Videos With Claude Code

Description: Learn to make a branded promo video for your newsletter, podcast, or website with HyperFrames Studio and Claude Code.

🤖 What You’ll Learn

  • Install HyperFrames Studio and the HyperFrames skills for Claude Code and Codex.
  • Build a promo with the launch video recipe: hook, proof, turn, and call to action.
  • Pull your fonts, colors, and logo from your website URL, then edit scenes by drawing, commenting, or prompting.
  • Add a free music bed, export in 1080p or 4K, and turn any folder into a project with npx hyperframes init.

📺 Watch Tutorial on YouTube


Mike Murphy — The AI Handyman 🧰 Helping creators & small businesses turn their content & documents into AI-powered tools.