Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

The watch

The watch follows developing stories through dated public records. The account is reviewed against its sources; the watch log (daily to 30 October, Mondays and Thursdays since) is unreviewed working material, and its entries are not findings.

Follow this section and its investigations

Unreviewed Daily log, , latest read logged 14:20 UTC.

Start here · Finding

A PHP emergency, from an early attack trace to published fixes

An attributed early attack trace, defensive discovery and published fixes, with deployment and attack outcomes unmeasured.

22 October 2026 · Developing · Later evidence 30 October 2026

  1. The PHP emergency: a developing story

    Reviewed notices and unreviewed daily logs in one dated thread.

    Developing story · 30 October 2026

  2. PHP watch: the log

    Unreviewed dated readings from fixed sources; changes await review before becoming findings.

    Unreviewed log · 9 November 2026

  3. What AI activity costs the shared internet

    What does AI activity cost the infrastructure everyone shares, as the people who run it report and as public traces show, and is any of that activity sustaining or spreading itself outside a lab?

    Investigation · 9 November 2026

  4. When a model finds the bug

    When an AI model finds a serious flaw in software the internet runs on, and writes a working exploit for it, what happens next in public, who says what and when, how do the signals defenders rely on respond, and where does the fix land?

    Investigation · 10 November 2026

  5. Where does a software update go?

    The question, current account and studies behind the software-update investigation.

    Investigation · 10 November 2026