Jay Cuthrell WTF

What The Fudge for October 25, 2026: PHP2Shell, Capital, and Infrastructure Lock-In

A look at the fallout from the PHP2Shell zero-day, autonomous agent supply-chain attacks, hyperscalers locking down data center capacity through 2028, and weekly capital rounds.

Subscribe and Listen: https://youtu.be/bqVoaq8OqjM

🎙️ The PHP2Shell Reality Check and Autonomous Agent Friction

This week demonstrated the operational friction of autonomous models. We started Monday with enterprise platforms treating agentic systems as literal insider threats… and by Tuesday, OpenAI confirmed its own internal agents weakened misalignment monitoring during routine coding tasks. By Wednesday, the entire industry was scrambling when PHP’s maintainers disclosed the PHP2Shell remote code execution zero-day uncovered by GPT-5.6 Sol… a memory flaw affecting up to 70% of LAMP websites on the Internet. Meanwhile, an economist claims AI payoff remains elusive for non-tech sectors.

The operational risks became even more tangible in the second half of the week. METR revealed monitoring vulnerabilities that allowed agents to conceal hundreds of recent actions… and by Friday, AISI confirmed Anthropic’s Mythos 5 executed an autonomous supply-chain attack on GitHub by creating fake accounts to manipulate a maintainer. The industry is responding by putting defensive hacking models into production, with OpenAI’s Project Daybreak actively pairing models with partners to find and fix zero-days before exploit traffic explodes.

📍 Field Report: The Multi-Gigawatt Squeeze

The real boundary on AI scaling right now is physical… power, grid access, and forward capital commitments. We opened the week with market data projecting a 50GW acceleration in new data center capacity for 2027 alone. By Tuesday, Anthropic’s draft S-1 showed nearly $9B in H1 infrastructure spend with expectations of committing up to $750B over the coming cycle… mirrored Wednesday by Meta raising its annual capex bar to $145B.

By Thursday, OpenAI moved to lock down an opportunistic $30B pre-IPO round at a $1.25T valuation… because the runway to secure compute is closing. AWS capacity is largely sold out through 2027 and heavily committed for 2028… while overseas players like SK Telecom move to finance $350B for 15GW in South Korea. Compute is no longer an elastic on-demand utility… it is a scarce sovereign asset requiring massive balance sheet lock-in years ahead of deployment.

💰 M&A, Funding, and Capital Flows

  • Salesforce agreed to acquire Braze for $5.7B.
  • Datadog offered to acquire Upwind Security for ~$4B.
  • Publicis received FTC clearance to acquire LiveRamp for $2.2B.
  • OpenAI acquired Orchestra Bio.
  • SB Energy, the AI data center clean power developer, evaluated potential IPO timing.
  • OpenAI raised up to $30B.
  • DeepSeek raised ~$15B.
  • Tenstorrent, the AI silicon architecture company, raised $1.5B Series E.
  • Flapping Airplanes, the compute-efficient model training startup, raised $1B.
  • Legora, the legal AI software company, raised $550M Series E.
  • ASI, the aerospace and defense AI systems maker, raised $325M Series C.
  • Pathos AI, the oncology drug development AI platform, raised $237M Series E.
  • Eka Robotics, the physical AI foundation model developer, raised $150M Series A.
  • Tractian, the predictive maintenance and sensor AI company, raised $130M Series D.
  • Town, the enterprise AI assistant developer, raised $108M Series B.
  • Dream Labs, the robot foundation model developer, raised $90M seed.
  • Blacksmith, the AI code testing platform, raised $66M Series C.
  • Daytona, the cloud infrastructure platform for AI agents, raised $60M Series B.
  • Coherence Neuro, the brain implant and neuro-oncology AI startup, raised $45M seed.
  • Watchtower, the defense logistical simulation software company, raised $35M seed.
  • Mach9, the AI CAD civil engineering software company, raised $34M Series A.
  • Enact, the full-stack robotics technology company, raised $30M pre-seed.
  • Mave, the AI automated security investigations company, raised $28M Series A.
  • AuxoAI, the enterprise AI systems consulting firm, raised $20.7M Series A.

#OpenToWork Weekly

I participated in a #NeverSearchAlone #JSC after rebooting Cuthrell Consulting and joining NexusTek.

I added those #OpenToWork from my LinkedIn network to this newsletter. Over time, we’ve grown an Alumni 🎉 section for those that transitioned to their next career adventure.

Alumni 🎉

Those in my network that are #OpenToWork:

View this page on GitHub.

Related Reading