# Round Up World Now!（2026.10.23放送分）

- Show: 伊藤洋一のRound Up World Now！
- Published: 2026-10-23
- Canonical: https://podc.club/en/episode/120034448_f0c4fc4ad34b.html
- Audio: https://podcasting.radionikkei.jp/podcasting/roundup/roundup-261023.mp3
- Source: Edited from a machine transcript of the first 30 minutes of the episode. Not an official summary.

In the October 23 broadcast of Round Up World Now! (伊藤洋一のRound Up World Now！), Ito Yoichi examined a critical PHP vulnerability affecting roughly 69.3% of websites worldwide as a defining example of AI-era cyber risk. He also shared first-day impressions of Meta's new AI agent Muse, previewed the November 3 U.S. midterm elections, and touched on SpaceX–Tesla merger talks, China's GDP, the Bank of Japan, and JR East's new deferred-payment service 'Teppei.'

## What this episode answers

### Why did the PHP vulnerability spread so widely, and why was public disclosure delayed?

The PHP Foundation discovered the flaw in 2024 but withheld disclosure because publishing it would have revealed an attack vector; a patch was scheduled for release on October 22, but information leaked a day early, and attacks surged in the hours before the patch went live—Amazon had already been taking related hits since the 17th.

### What was Ito's impression after trying Meta's AI agent Muse?

Ito downloaded Muse on its first day of availability in Japan and asked how to get an iPhone whose delivery had been pushed to January 23, 2027; Muse returned specific, concrete options including SIM-free retailers in Yokohama and carrier waitlists at no charge, and while he was impressed by the quality, he framed the prospect of future paid tiers as a question of 'whether you're buying the future.'

### Which party is favored in the U.S. midterms, and what is the biggest question after the vote?

Both polls and prediction markets put the probability of Democrats winning both chambers at 61%, but Ito is skeptical of U.S. polling accuracy; if Democrats do sweep, the biggest unknown is what President Trump—with two years left in his term—will do in foreign policy, particularly on Iran's nuclear issue and the Russia–Ukraine negotiations.

### How is the proposed SpaceX–Tesla merger being assessed?

A merger would create a single giant spanning AI, space, and EVs, but it requires approval from a majority of Tesla's outstanding shares, making the bar very high; Musk himself has been cautious about calling it certain, though both companies' stock prices rose on the announcement.

### How should Bank of Japan Governor Ueda's recent remarks be read?

Governor Ueda's statement that inflation is 'broadly close to 2%' and that further rises cannot be tolerated reads as a signal for a rate hike, but markets widely expect the policy board to hold rates at next week's meeting and see the next hike coming in December—a gap Ito called 'incomprehensible.'

## Article

## A Critical PHP Vulnerability—AI-Era Cyber Risk Becomes Reality

A serious security flaw has been discovered in PHP, the programming language that underpins roughly 69.3% of websites worldwide. The PHP Foundation has released a patch, and the White House issued a statement saying it worked with government agencies and major AI companies to distribute the fix rapidly. In Japan, retailers, telecoms, and other businesses across a wide range of sectors temporarily took their sites offline for emergency maintenance.

According to Ito, the PHP Foundation had been aware of the flaw since 2024 but chose not to disclose it, reasoning that publication would effectively hand attackers a roadmap. OpenAI confirmed the vulnerability in August and spent the intervening months verifying that patching it would not cause collateral damage in other systems. Public disclosure was planned for October 22, but the information leaked ahead of schedule. Amazon had already been absorbing related attacks since the 17th, and assaults surged in the hours before the patch dropped—around 11 p.m. Japan time.

Ito described the episode as "the tip of the iceberg," arguing that countless vulnerable programs around the world remain unaudited. Because AI grows better at finding holes in human-written code as its capabilities improve, he predicted that the cycle of AI locating vulnerabilities and humans applying patches will continue for years. For individuals, his practical advice was to update passwords for any site flagged in Apple's Passwords app and to never click links in suspicious emails.

## Meta's AI Agent Muse—Tried on Day One

Meta has positioned the AI agent Muse (ミューズ) as the centerpiece of its AI strategy, planning to offer it free of charge for the time being while targeting investment of roughly ¥23 trillion by year-end. Muse became available in Japan on October 23.

Ito downloaded the app on launch day and asked it how to get an iPhone whose delivery had been pushed back to January 23, 2027. After researching for a moment, Muse returned several specific options, including SIM-free retailers in Yokohama and carrier waitlists. "And it did all that for free?" Ito said, genuinely surprised. He added that once Meta moves to a paid model—given how much the company's return on its massive investment depends on Muse's adoption—users will face a judgment call about whether the service is worth buying into.

## U.S. Midterms: Democrats Favored, Outcome Far from Certain

With the November 3 midterms approaching, both polls and prediction markets assign Democrats a 61% probability of winning both the House and the Senate. Thirty-five Senate seats are up for grabs; Republicans need to lose only four for Democrats to flip the chamber.

Ito remains skeptical of U.S. polling, citing Hillary Clinton's perceived lead ahead of the 2016 presidential election as a cautionary example. He noted that Trump has been steadily locking in support through familiar means—announcing a $100 million pharmaceutical manufacturing investment at a Kentucky rally and an $8 billion agricultural payment at a Kansas event—and that the energy of his campaigning still resonates with many Americans. If Democrats do take both chambers, Ito said the central question will be what President Trump, with two years remaining in his term, chooses to do on the diplomatic front: Iran's nuclear program, Russia–Ukraine negotiations, and China policy are all in play.

## Other Major Stories

**China GDP** Real GDP growth for the July–September 2026 quarter came in at 4.5%, the bottom of the Xi administration's annual target range of 4.5–5.0%. Exports remain solid, but domestic demand is weak; reports from the National Day holiday noted quiet streets in Shanghai and Beijing shopping districts. Falling property prices and rising youth unemployment are seen as the main drags on consumer spending.

**Bank of Japan** Governor Ueda said that inflation is "broadly close to 2%" and that further increases "cannot be tolerated." The language sounds like a hint at a rate hike, yet markets overwhelmingly expect the policy board to hold rates at next week's meeting and anticipate the next move in December. Ito called the gap between the governor's words and market expectations "incomprehensible."

**SpaceX–Tesla Merger Talks** Elon Musk announced that the two companies are in discussions about a management merger, aimed at strengthening competitiveness in AI development. The hurdle is high: a majority of Tesla's outstanding shares must vote in favor. Around the same time, SpaceX unveiled a flying-car demonstrator using Tesla technology, and both companies' share prices rose briefly.

**JR East 'Teppei' (鉄平)** JR East has launched a deferred-payment service through the Suica smartphone app, addressing the existing ¥20,000 balance cap on conventional Suica cards. The service puts JR East in direct competition with established players such as PayPay. Ito tested it at Tokyo Station and found the soba restaurant already on board, while the coffee shop next door was not yet.

**Online Ad Complaints** Industry body complaints exceeded 12,000 cases in fiscal 2025, a record high, with frustrations centering on ads that are difficult to dismiss and exaggerated health claims. Comprehensive regulation does not exist; self-regulation is the only current recourse. Ito urged listeners to simply decide not to engage with such content as a way of "purifying the internet."

## Takeaways

- The PHP vulnerability is a harbinger of AI-era cyber risk: as AI gets better at finding flaws in human code, the cycle of AI-discovered holes and human-applied patches will continue for years.
- Meta's Muse delivered high-quality, specific answers for free on its first day in Japan, making its future paid model and competition with rivals a key business story to watch.
- Democrats are favored at 61% to win both chambers in the November 3 midterms, but the bigger unknown is how President Trump will use his remaining two years to shape foreign policy on Iran, Ukraine, and China.