NewsPicks Daily Briefing w/ NP AI Lab · News
【10月23日】要確認！AIサイバー攻撃は「ここを押さえろ」 ほか
Meta's stock fell nearly 8% on October 23, 2026, despite beating revenue forecasts, after the company raised its capital expenditure plan to roughly ¥21 trillion and the CFO warned that returns on AI-agent investments would take time. A critical PHP vulnerability dormant for over a decade—uncovered with the help of a latest-generation AI model—caused global service outages after exploit code leaked before patches could spread, forcing emergency maintenance at Japan's National Tax Agency, major banks, and more. The October 23 broadcast also covers AI-era cyberdefense strategy, Netflix's structural decline, and ride-hailing app GO's autonomous-driving roadmap with Waymo.
Listen to this episode Go to the show page
What this episode answers
Why did Meta's stock fall nearly 8% despite reporting strong earnings?
Meta raised its planned capital expenditure to roughly ¥21 trillion, and the CFO's statement that returns on investments such as AI agents would take time reignited investor anxiety, pushing default-risk indicators to record highs and triggering broad risk-off selling across the market.
How did the PHP vulnerability lead to service outages on a global scale?
The vulnerability had lain dormant for over a decade before being discovered using a latest-generation AI model; exploit code leaked before the patch was widely distributed, triggering millions of hacking attempts worldwide and forcing emergency maintenance at Japan's National Tax Agency, Japan Meteorological Agency, major banks, and game companies.
How should defenders respond to AI-powered cyberattacks?
Attackers are already using AI to accelerate vulnerability discovery and attack-code generation at unprecedented speed; defenders face two obstacles—real-time processing delays and false positives—so the practical solution is assigning humans and AI to appropriate roles by domain, such as detection and analysis.
Why is Netflix—once the undisputed king of streaming—losing momentum?
A structural shift has emerged in which YouTube is beating Netflix in TV-screen watch time and short-form video is capturing mobile attention; the company laid off 6% of its staff and its market cap nearly halved in a year, compounded by a drought of hit content and slowing revenue growth.
How is ride-hailing app GO preparing for the autonomous-driving era through its partnership with Waymo?
GO plans to launch driverless robotaxis in partnership with Waymo in 2027; with the current app-dispatch rate at only about 30% there is significant upside, and GO's president has declared a strategy of maintaining horizontal division of labor to prevent overseas players from controlling the gateway.
Meta's Stock Plunge — The "Dream and Cost" of AI Investment
The biggest market story on October 23, 2026 was Meta's stock falling nearly 8%. The company's revenue beat market expectations, yet the market's reaction was decidedly cold.
The primary culprit was a sharp upward revision to its capital expenditure plan. Planned investment was raised to approximately ¥21 trillion, and the CFO's remark that "returns on investments such as AI agents will take time" instantly reignited investor concern. Anxiety over AI infrastructure spending—compared to "a house where only construction costs keep rising with no completion date in sight"—pushed credit-default-swap spreads to record highs and drove broad risk-off sentiment across the market.
PHP's Critical Vulnerability — Exploit Code Leaked Before the Patch Spread
A critical flaw was discovered in PHP, the programming language used by roughly 70% of websites. The vulnerability had lain dormant for more than a decade and was identified with the help of a latest-generation AI model.
What made the situation severe was what happened next. Information about the attack method leaked before the fix was widely distributed, and exploit code spread rapidly. Millions of hacking attempts flooded systems around the world, prompting government agencies, banks, and transportation providers to preemptively shut down services. In Japan, the National Tax Agency, the Japan Meteorological Agency, major banks, and game companies all initiated emergency maintenance, choosing safety over convenience.
In the comment section, many praised the swift preemptive shutdowns, while others noted that "designs need to account for recovery and alternatives" and that "aging legacy systems and poorly managed rogue applications also need urgent attention." The dominant tone called for adapting to an era in which both attacks and defenses are AI-driven.
The AI Cybersecurity Frontlines — Dividing Roles Between Humans and AI
A NewsPicks article titled "Must Read: Here's What to Watch for in AI Cyberattacks" explains how generative AI is enabling attackers to find vulnerabilities and generate attack code at unprecedented speed.
The instinct to simply deploy AI on the defensive side is natural, but two obstacles stand in the way: real-time processing delays and false positives. Just as "inspecting every vehicle with high-precision AI would cause a massive traffic jam," comprehensively monitoring all traffic at high accuracy is impractical in terms of both cost and speed. The practical solution is to assign humans and AI to appropriate roles for each domain—detection, analysis, and so on. The article also covers the growing naturalness of Japanese-language spam and the use of international security frameworks.
Netflix's Slowdown — The King Caught Between YouTube and Short-Form Video
Netflix laid off 6% of its workforce and saw its market cap nearly halve over the course of a year. A drought of hit content, slowing revenue growth, and failed acquisition attempts have all dimmed the company's former momentum.
The article's standout framing is "YouTube panic." A structural shift has taken hold: YouTube is beating Netflix in TV-screen watch time, and short-form video is claiming mobile attention. The situation is described as resembling "a movie-theater king being pushed aside by the energy of street performers." Struggles in advertising and early experiments with short-form content are also covered.
GO × Waymo — A Ride-Hailing App's Strategy for the Autonomous Era
Ride-hailing app GO announced a partnership with Waymo to launch driverless robotaxis in 2027. The current app-dispatch rate stands at only about 30%, meaning a future where widespread autonomous driving makes all rides app-dispatched would represent a major tailwind for GO.
GO's president acknowledged that Waymo will also dispatch rides through its own app, but emphasized maintaining the strengths of horizontal division of labor, stating the company will "not let overseas players control the gateway." He also affirmed a commitment to protecting Japan's transportation infrastructure. The article examines the long-term cost structure of robotaxis and the industry's approach to taxi regulations.
Other Notable Content
An article titled "Abs Are Out — Women Flaunting Their Biceps" tracks an American trend of women building and showing off their upper-arm muscles. Featuring an anecdote about a woman performing arm-stunt work for Matt Damon in a film, it conveys how muscle has become "a symbol of genuine strength that hard work cannot fake," boosting self-esteem and sparking everyday conversation.
On the video side, a dialogue titled "A Vision of the World in the Quantum Computing Age" offered a critical reading of 40 years of technology history since the Mac's debut in 1984—tracing how the original dream of distributed, free computing mutated into big-tech monopolization and dystopian ideologies, and discussing the risk of quantum computing breaking current encryption.
The book of the day was Kenji Takagi's (高木健二) *Construction Business: An Accessible Guide to the Industry for Everyone from Students to Professionals*. Reaching its tenth printing in just three months, it covers little-known realities of the construction industry: regional imbalances in the carpenter workforce, the prohibition on fee-charging employment agencies, disaster-site applications of drones and 3D printers, and interviews with popular carpenter YouTubers, all backed by extensive data.
Takeaways
- Meta's stock fell nearly 8% despite strong earnings after the company expanded AI capex to roughly ¥21 trillion and the CFO cast doubt on near-term returns, pushing default-risk indicators to record highs.
- PHP's decade-old vulnerability caused worldwide service outages because exploit code leaked before the patch spread, highlighting that practical AI-era cyberdefense requires assigning humans and AI to distinct roles—such as detection and analysis—rather than relying on AI alone.
- Netflix's market cap nearly halved in a year and the company laid off 6% of its staff, with a structural loss of viewers to YouTube on TV screens and short-form video on mobile cited as the root cause of its slowdown.
This article is edited from a machine transcript of the first 30 minutes of the episode. It is not an official summary — please listen to the episode itself.