Building TaboriX: a managed home AI for families, where parents set the rules. 20 years in health tech. Startup builds and AI notes live here.
Grand Forks, ND
Joined April 2009
- Tweets3K
- Following751
- Followers1.3K
- Likes3.8K
Daniel Schott retweeted
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
ALT Critical vulnerability alert for PHP Core with CVE-2026-109618 and CVE-2026-109619, CVSS score 9.2, urging immediate patch and threat hunting.
Daniel Schott retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
Link for more information 🔗
TaboriX.Ai – at Grand Forks, ND
Under thirteen, wonder comes first.
Wait and Wonder asks the child to share a guess before the AI starts the assisted work. A child should not outsource the first thought. – at Grand Forks, ND
I appreciate your humor on this 😉. It’s really great to see progress on this topic of protecting children!
I had the opportunity to discuss AI alignment, human purpose, and faith with @DarrelFrater during his online gathering, First Fruits | Begin Your Workweek With Jesus, on Loopis.live.
Here’s a short clip from our conversation. I’m grateful for the opportunity to explore how our faith can inform the conversation about AI and humanity’s future. 🙏 – at Grand Forks, ND
Glad to see this. Kids' safety by default should be the industry standard.
At TaboriX we're taking it one step further: parents set the rules, each family gets its own private AI, and family data is never shared or used for training.
We're sharing progress on ChatGPT for Teens, our ChatGPT experience for people under 18, alongside a preview of College Planner, new study tools, and support for college advisers and teen voices.
ChatGPT for Teens applies automatically to accounts identified as belonging to someone under 18, with protections on by default.
Coming soon: College Planner brings application requirements, deadlines, tasks and financial-aid steps together for high school students in the U.S. planning to attend a four-year college.
We'll keep building these tools, evaluating how they and their protections work in practice, and sharing what we learn.
openai.com/index/teens-learn…
I explore these questions through independent AI alignment research, human agency, relationships, and a faith-informed perspective, along with 12 questions for discussion and progress.
Read the article and join the conversation: 🔗
loopis.live/post/xd742dtr7k8…
AI alignment is bigger than the lab.
How do we ensure AI supports human judgment rather than replaces it? And for people of faith, shouldn’t we also ask what God intended for humanity when He created us?
If we’re discussing humanity’s future with AI, our understanding of human purpose and God’s design belongs in that conversation, too.
I’m opening the discussion. 🧵
A family needs a system of its own.
Not a login on someone else's model. Not a picker that a child can switch. The rules follow the person who is signed in. That is the product. Home AI for families. – at Grand Forks, ND
Thank you @DarrelFrater and Dave Lambert of @RightSideCapVC for today's @TGNVentures Investor Office Hours, and for the chance to learn from you and share about our startups.
TaboriX is a private, family-first AI companion for kids. Parents set the rules, and the AI runs on a local box at home or in our secured server room, so family data stays private.
taborix.ai
Daniel Schott retweeted
Black Forest Labs released open weights for FLUX 3 Image Klein: a 5.6B image model that runs on 8GB GPUs. Free commercial use under $5M revenue. Full breakdown:
derringtoncollaborativeai.co…
Daniel Schott retweeted
"Software isn't dead. It's solved. Nobody will hire software engineers by 2028."
Reality:
• Writing code is being automated
• Defining what to build isn't
• Debugging production at 3 AM isn't
• Owning broken systems isn't
• Solving vague business problems isn't
AI didn't kill software engineers... it eliminated those whose only skill was typing code. The role shifts from "write code" to "own the outcome."
By 2028, will you be the engineer AI replaces or the one managing 10 agents?