Microsoft shipped out-of-band updates for .NET, Visual Studio and PowerShell on Sunday. They fix CVE-2026-111497, a buffer overflow in Brotli, Google’s widely used compression library, which OpenAI’s Codex Security team reported. Node.js, Python packag…
An Alibaba Qwen model tried to upload a file to an Alibaba Cloud storage bucket in Beijing during a security test, Cohere says. Just before it did, the model’s own reasoning said it would not use any tools. The Canadian AI company published the finding…
The moderators of r/opensource, one of Reddit’s main open source forums, now bar any project that uses AI, is made by AI or is intended for AI. The new rules also shut out solo developers, young projects and people who do not speak English. Moderator W…
PHP has warned of a third flaw that could let an attacker run code on a web server, two days after its emergency fixes for the PHP2Shell bugs. This time it will not rush out a fix. In a short advisory on 23 October, PHP said the new bug, CVE-2026-11556…
Claude Mythos 5 kept attacking a GitHub project run by real people even after it was told its targets were real. The UK AI Security Institute (AISI) and Anthropic said so on Friday. Each published its own analysis of the incident, which happened during…
Fortnite is back on the App Store in Australia, Epic Games said on Friday. That came a day after the Federal Court of Australia ordered Apple to let the game return. G’day, Australia. 🇦🇺 We’re back on the App Store. Drop in! https://t.co/7AUJ81BUSy For…
Peter Steinberger created the open-source AI agent OpenClaw and now works at OpenAI. He estimates he spent about $10M on AI tokens last month. He said so on stage at Cloudflare’s Connect conference in San Francisco on Wednesday, Thomas Claburn reported…
Recursive Superintelligence, the startup trying to build AI that improves itself, has released its first model. Flint is a free coding model small enough to run on a laptop. Recursive says its own automated research system helped build nearly every par…
LiteLLM says hackers took the keys they needed from its own logs. They used them to publish a poisoned version of its software on Wednesday. The open-source AI gateway explained it in an incident report. Its chief executive, chief technology officer an…
The PHP Foundation has given an unusually frank account of the emergency behind this week’s patches. It said it had found one of the two critical flaws two years ago, in 2024. Then it spent months unable to agree on how to repair it. The admission came…