AI-found PHP flaws, AI-run hacking campaigns and unvetted bank agents make October 2026 the "Black October" of cybersecurity