200 Ways To Make Money With AI
Turns out, AI is good for more than writing emails and generating LinkedIn posts. This guide is packed with 200+ actionable ways to build income with AI.
Inside you'll discover:
200 curated AI income ideas for beginners and pros alike
Easy-to-start opportunities you can launch this week
Real world applications for today’s top AI tools
AI powered business models built for today’s economy
Creative ways to turn trends into revenue
AI is changing how people work and how people earn, far beyond the simple “write me an email” prompt. Discover the possibilities and download the free guide to start cashing in today.
Wispr Flow turns your voice into clean, ready-to-send writing — speak naturally, it strips the filler and fixes the punctuation. I've used it daily since February 2026 to build this newsletter. Read the full review →
On Wednesday, the NSA told organizations running PHP to patch now, and if they can't, to take the system offline until it's fixed.
CISA, America's cyber defense agency, went further: if you can't patch, or you're on PHP 8.1 or older, take PHP-based systems offline.
PHP isn't some niche tool. It runs underneath roughly 7 in 10 websites with a detectable server language, including every WordPress site. If you have a website for your business, your church, your practice or your side hustle, there's a good chance it runs on PHP.
The flaw is called PHP2Shell, and an AI found it. Amazon caught someone testing it four days before the public knew it existed. The Wikimedia Foundation, which runs Wikipedia, took systems down as a precaution. Pokémon HOME, Champions and Sleep went into emergency maintenance right as the patches dropped. Overseas, entire government websites went dark.
What happened, super simplified. PHP is the engine. WordPress, WooCommerce and most small-business sites are the car bodies bolted on top. PHP2Shell is a defect in the engine. Updating WordPress repaints the car, and the engine stays broken.
The two flaws (CVE-2026-109618 and CVE-2026-109619) let an attacker run their own code on a web server with no login. That can mean stolen customer data, planted malware, or a hijacked site that attacks your visitors. Both are rated 9.2 out of 10. PHP fixed them on October 21 in versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
The AI twist. According to the Wall Street Journal, a researcher at the security firm Calif found the flaws in August with help from OpenAI's GPT-5.6 Sol, during an audit OpenAI funded. The weak spot had been flagged decades ago and written off as too hard to exploit. The AI found a way in. The fix touched close to 200 files and more than 10,000 lines of code.
The flip side: the same AI that finds a flaw can read a patch and write an attack. Cloudflare's CEO says attempts jumped to tens of thousands in the 45 minutes after the announcement.
22 ChatGPT Agents Built for Every Marketing Job
Most marketers use ChatGPT to do general research and then call it an AI strategy. The ones outperforming them are deploying specialized agents built for specific jobs.
We put together 22 plug-and-play ChatGPT marketing agents that handle the work eating your week, each with built-in instructions and structured outputs ready to go in under 5 minutes.
Subscribe to Marketing Against the Grain and get all 22 free.
Inside you'll find:
Competitive intelligence agent that visits competitor websites and builds detailed comparison matrices automatically
Customer feedback analyzer that ranks improvement opportunities by business impact
Social listening specialist that monitors brand mentions and flags reputation risks before they escalate
Campaign optimization agents that handle attribution analysis and surface what is actually driving results
Your competitors are already running agents like these.
Get 22 ChatGPT Marketing Agents free when you subscribe to Marketing Against the Grain today.
By the numbers.
69.3% of websites with a known server language run PHP
39.6% of all websites run WordPress
35.8% of WordPress sites run PHP 8.1 or older, which has no official patched release
About 758,000 servers advertise unsupported PHP, versus 272,000 on supported versions
Of the affected sites one monitoring service tracks, more than half were still unpatched the morning after the fix
Who fixes yours?
GoDaddy, Bluehost, Hostinger and other shared hosts: your host patches PHP, and you verify. As of early Thursday, GoDaddy said Managed WordPress and Windows Hosting were patched and Web Hosting patches were rolling out.
WordPress.com, VIP, Pressable and Tumblr: already protected, says Automattic.
A VPS, your own server, or one your web person manages: it's on you, or on them.
Windows servers running IIS: swap in the new PHP build, then restart IIS. Old workers keep running the vulnerable code until you do.
Office firewalls: Palo Alto says every version of its PAN-OS firewall software is affected, with no fix yet. Ask your IT provider today.
The 5-minute check.
In WordPress, go to Tools → Site Health → Info → Server. Write down the full PHP version number.
You need 8.5.12, 8.4.27, 8.3.36, 8.2.35 or newer. On 8.1 or below? You need an upgrade, not a patch.
Email your host or web person: "What exact PHP version is my site on, and when was the October 21 PHP2Shell fix installed?" Get it in writing. (Some hosts patched without changing the version number, so their answer matters.)
What patched looks like. I checked my own site this morning: PHP 8.3.36, the fixed release for the 8.3 branch.
Can't patch today? Put Cloudflare in front of your site. It says customers on its free or paid firewall are protected by default, but even Cloudflare calls that a stopgap. If you take the site down, return a 503 error, as Google advises, so you keep your search rankings.
How worried should you be? Experts disagree. Sansec says mass attacks are less likely than first feared because they need specific server conditions. Calif and Amazon say the threat is real and spreading. You don't need to settle it. You need one email to your host before lunch.
On the site: a who-patches-what table, step-by-step fixes for Linux and Windows, a copy-paste email for your host, warning signs that someone already got in, and a prompt that walks you through your own site.
How was today's edition?
— Jerry
AI Super Simplified