AI Unplugged · by Mike Murphy · sent October 23, 2026 · Issue 081
The Internet's Bad Security Day
Several big security problems hit at the same time this week. They weren't connected, but together they made a rough day for anyone running websites or AI tools.
🌲 Agent Evergreen Build Log
Hang in there, I haven’t forgotten about you. Thanks for following along!
- Waitlist Signups: 5
- Read the full manifesto: mikemurphy.ai/articles/agent-evergreen-manifesto
- The Founding waitlist: mikemurphy.ai/evergreen
🗞️ AI News of The Week: The Internet Has a Very Bad Cybersecurity Day
Several big security problems hit at the same time this week. They weren’t connected, but together they made a rough day for anyone running websites or AI tools.
TechCrunch rounded up the damage:
- PHP: AI found critical flaws in PHP, the language behind a huge share of websites. Government sites around the world went offline, and the NSA told PHP users to update right away or take their systems offline.
- LiteLLM: An attacker slipped malicious code into LiteLLM, a popular open-source tool that connects apps to multiple AI models.
- Node.js: The project patched four high-severity flaws, including one that let attackers run their own code on a server.
- eMudhra: Attackers stole private keys from this Indian certificate authority, the company that vouches a website is real. That could let them create convincing fake websites.
🧠 AI Term of The Week: Sandboxing
Definition: Sandboxing runs software inside a fenced-off space that limits which files, networks, and system resources it can reach.
Explain Like I’m 5: You give your helper a fenced workspace with only the supplies it needs.
Real examples:
- An AI assistant organizes copies of campaign files in one folder but can’t open your other client folders.
💬 Quote of the Week
“Tell me and I forget. Teach me and I remember. Involve me and I learn.” — Benjamin Franklin
🧰 AI Tool of The Week: Claude Duet
What is Claude Duet: Claude Duet is Anthropic’s new proactive AI agent app (personal agents), built for professionals and small business owners with more on their plates than they can track.
What it does:
- Sends a morning brief and checks your connected apps every few hours, messaging you only when something needs attention.
- Keeps working in the background on its own virtual computer, so your laptop doesn’t need to stay on.
- Drafts work on its own but asks your approval before it sends messages, makes payments, signs documents, or deletes anything.
🛠 AI Tutorial Of The Week: Hyperframes Studio: Make Promo Videos With Claude Code
Description: Learn to make a branded promo video for your newsletter, podcast, or website with HyperFrames Studio and Claude Code.
🤖 What You’ll Learn
- Install HyperFrames Studio and the HyperFrames skills for Claude Code and Codex.
- Build a promo with the launch video recipe: hook, proof, turn, and call to action.
- Pull your fonts, colors, and logo from your website URL, then edit scenes by drawing, commenting, or prompting.
- Add a free music bed, export in 1080p or 4K, and turn any folder into a project with npx hyperframes init.
Mike Murphy — The AI Handyman 🧰 Helping creators & small businesses turn their content & documents into AI-powered tools.