Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation.
CONTINUOUS TECHNICAL RADAR // 30+ SOURCES
Technology, AI & Systems Radar
Curated technical intelligence indexing frontier AI models, global software architecture, silicon innovations, Linux kernel, and critical security vulnerabilities.
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls.
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation.
Ghostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files.
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities.
ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution
A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses risks by allowing unauthorized access to mailbox data and credentials.
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.
Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19.
How Third Moment Research runs 10,000 agents for 36+ hours
With GPT-6 Astra and GPT-6.1 Sol, Codex, and Daybreak for cybersecurity, this AI lab builds agents that focus for days and improve with use.
open-telemetry/opentelemetry-ebpf-instrumentation: Zero-code OpenTelemetry instrumentation powered by eBPF
[C ★593] Zero-code OpenTelemetry instrumentation powered by eBPF
cilium/cilium: eBPF-based Networking, Security, and Observability
[Go ★25661] eBPF-based Networking, Security, and Observability
projectcalico/calico: Cloud native networking and network security
[Go ★7393] Cloud native networking and network security
coroot/coroot: Coroot is an open-source observability and APM tool with AI-powered Root Cause...
[Go ★7973] Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.
Friends don’t let friends feed their data to AI agents
There's a growing trend in the consumer tech world: gadgets designed to spy on everything and everyone around you, regardless of whether or not anyone else actually consented to it.
Claude Code / AI Shows Potential For Reverse-Engineering Hardware For Linux Support
AI/LLMs like Claude Code are beginning to prove capable of helping to reverse engineer hardware for Linux support, especially when it comes to the tedious reverse engineering tasks...
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005.
Huawei Proposes Enabling CPU Boost By Default For ACPI CPPC Linux Driver
For those using the generic ACPI Collaborative Processor Performance Control (CPPC) CPUFreq driver such as on a number of ARM64 Linux server platforms, if the CPUs support a "boost" mode it's disabled by default.
Apple Contributes SSAF Driver To LLVM Clang For Source Code Transformations
Apple compiler engineers have contributed to upstream LLVM/Clang today a Scalable Static Analysis Framework (SSAF) driver for whole-program based analysis and source-to-source code transformations...
FootprintAI/Containarium: Open-source agent runtime — SSH-native isolation, eBPF egress policy,...
[Go ★305] Open-source agent runtime — SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI
cilium/tetragon: eBPF-based Security Observability and Runtime Enforcement
[C ★5073] eBPF-based Security Observability and Runtime Enforcement
Amp puts AI agents to work beyond code with OpenAI models
See how Amp pushes the frontier of what agents can do with GPT-6 Astra, Ultrafast, GPT-Live-1, and Sign in with ChatGPT.
Cloud Hypervisor 54 Released With Live Migration Improvements
Cloud Hypervisor, the Rust-based Virtual Machine Monitor that began as an Intel open-source project and evolved into a multi-vendor Linux Foundation project, is out today with a sizable feature update...
Rustls 0.23.46 Released With Four Security Fixes
Rustls as the modern TLS library written in the Rust programming language with an emphasis on memory safety is out today with its v0.23.46 release in order to ship four new security fixes...
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions.
Mesa Expands NPU Capabilities With Support For YOLOX With PyTorch
While Mesa is predominantly used for GPU drivers, open-source developer Tomeu Vizoso continues advancing the capabilities of NPUs within the Mesa driver stack...
Run fast, private agents on-device with LFM2.5-24B-A2B
Run fast, private agents on-device with LFM2.5-24B-A2B
Intel’s Crescent Island AI Server GPU Gets a Name and Specs: Meet the Intel GPU D-Series
Intel today has unveiled its official performance specifications and branding for its upcoming "Crescent Island" data center AI inference cards.
SPECviewperf 15.0.1 Linux Edition Released: Linux’s Key Graphics Benchmark Adds Arm Support
SPEC has released version 15.0.1 of SPECviewperf Linux Edition, bringing a slew of upgrades and official Arm support to Linux's key workstation graphics benchmark suite. We are taking a look at those changes, and what performance is like on some modern systems
Asana cuts model costs 76x in browser tests with GPT-6.1 Sol
Using GPT-6 Astra in Codex, Asana made its browser agent 76x cheaper and 5x faster in tests to offer customers more capable models.
Turn one giant AI-generated pull request to a reviewable stack
Instead of one huge, un-reviewable pull request, teach coding agents to decompose work into a clean, ordered stack with GitHub stacked pull requests.
The best reason to care about Nvidia’s RTX Spark: ‘everything’ will run on Arm
Fourteen years ago this month, Microsoft released an Nvidia-powered Windows PC that would become one of the greatest tech flops in modern history.
Instagram Modernized Its UI with an AI-Native Architecture, Cutting Token Costs by 33%
Instagram Direct migrated its Android UI from the legacy Android View system to Jetpack Compose, creating an AI-native UI codebase that is easier for AI coding agents to understand, modify, and maintain.
Nvidia, Apple, Google, Microsoft, Amazon, and Meta gave Trump a combined $92 million for his ballroom
We knew that a number of big tech firms were helping to fund the construction of Trump's ballroom, but we didn't know just how much they were giving to the cause.
AI agents are coming to Rivian’s cars
We'll likely learn more about how this will work at the company's upcoming "AI & Autonomy Day" event in December.
3mdeb Releases Updated Dasharo/Coreboot Firmware For ASRock Rack SPC741D8-2L2T
3mdeb firmware engineers have been quite busy this year working on porting Coreboot and openSIL to an AMD Ryzen AM5 MSI motherboard and similarly getting openSIL and Coreboot up and running on a Gigabyte server motherboard for AMD EPYC 9005 CPUs.
How Windows is being optimized for Nvidia’s RTX Spark laptops
Microsoft and Nvidia held a launch party for the first wave of RTX Spark laptops last week in San Francisco, where a new wave of AI PCs took center stage amid a packed crowd and a lively hands-on area.
Police arrests 95 suspects in international CSAM crackdown action
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups.
Ubuntu 26.10 Released With Linux 7.3 + GNOME 51, Rust Coreutils Migration Complete
Ubuntu 26.10 "Stonking Stingray" is now officially available as the newest six-month non-LTS update to Ubuntu Linux...
Presentation: What 25 Trillion Tokens Reveal About How Developers Actually Adopt AI Agents
Brendan O'Leary discusses how real-world AI adoption depends on building trust rather than chasing model benchmarks.
GNOME Mutter Improves Damage Tracking For Secondary GPU Copy Buffers
As an early improvement to Mutter to look forward to with GNOME 52 (Update: It will first appear in GNOME 51.2), the compositor is now tracking damage for secondary GPU copy buffers.
Microsoft Releases Microsoft Defender For The Linux Desktop
Microsoft's newest software release for Linux is... Microsoft Defender for the Linux desktop.
Figma announces new features to define how agents work on its platform
Figma is also releasing its code layers feature in open beta.
LFM2.5-24B-A2B: Built for fast on-device agents
Article URL: https://www.liquid.ai/blog/lfm2-5-24b-a2b Comments URL: https://news.ycombinator.com/item?id=50097369 Points: 268 # Comments: 71
Framework Computers Triples Their Financial Support To CachyOS
In addition to providing Framework systems to the CachyOS Linux distribution for optimizing the support, Framework Computers has also been providing monthly donations to the project.
Meta Extends Confidential Computing to AI Glasses with Private Processing
Meta has extended Private Processing to AI glasses, using confidential VMs, trusted execution environments, remote attestation, anonymous credentials, OHTTP routing, and TEE-based storage to process AI workloads and persistent user context in the cloud.
Linux Finally Making It Easier To Answer The Question: "Is This RISC-V System RVA23?"
The RISC-V RVA23 profile is a big deal for reducing fragmentation in the RISC-V ecosystem and standardizing more of the ISA to make it easier to distribute modern RISC-V binaries and the like.
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said.
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new...
How Block is building AI-powered security with OpenAI technology
Block is building AI-powered security with OpenAI. Its security team investigates threats faster and proposes patches in minutes.
The EU’s next chapter in AI is agentic
New analysis shows how agentic AI adoption is growing across EU enterprises and small businesses—and where deeper use could unlock more value.
llm-gemini 0.35
Release: llm-gemini 0.35 I added support to llm-gemini for the new Gemini 4 Argon model, made available today via the Gemini API and for customers of their $100/month subscription plan. Here are the low, medium and high pelicans .
Quoting Geoffrey Huntley
If the agent isn't using my diagnostics library, I could introspect and update AGENTS.md, but there's still a delta, and it'll drift.
New USFP Pluggable Optics Form Factor for Higher Speeds from Cisco and NVIDIA
Cisco and NVIDIA team up announcing a new USFP form factor for 400G SerDes lanes. Cisco also has a few new Silicon One offerings
Higgsfield takes AI video from 1 minute to over 10
Higgsfield brings creators longer videos with GPT-6 Astra, precise visuals with GPT-Image-2.5, and a path to voice filmmaking with GPT-Live.
web-edit 0.1a1
Release: web-edit 0.1a1 Includes performance optimizations written by Claude Opus 5.5 after I fed it this Python 3.15 profiling report generated by GPT-6 Astra. Tags: profiling , projects
llm-meta-ai 0.2
Release: llm-meta-ai 0.2 Meta AI release Muse Wonder (and Muse Wonder Full), their new "most capable models". These look like they may be Meta's first Fable class models - Artificial Analysis scores Muse Wonder (Max) as equivalent to GPT-6.1 Sol.
AMD EPYC 8005 SKU List and Value Analysis: Mainstream Sorano’s Big Stride
Following the recent launch of AMD's EPYC 8005 Sorano server CPUs, we are taking a look at the various SKU options among chips, and what configurations offer the best value for different needs
Building Git infrastructure for agent-scale development
We're rebuilding GitHub's Git infrastructure while GitHub keeps running, creating a foundation for agent-scale software development.
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming third-party sites keep coming.
The Agent Said It Was Done. The Database Disagreed.
The Agent Said It Was Done. The Database Disagreed.
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).
E Ink upgraded the screen found in most color e-readers
E Ink announced the next generation of its Kaleido color e-paper screen technology today, delivering several welcome improvements.
nvidia/NVIDIA-Nemotron-3.5-Bolt-74B-A9B-24GB · Hugging Face
https://huggingface.co/nvidia/NVIDIA-Nemotron-3.5-Bolt-74B-A9B-24GB-GGUF https://huggingface.co/nvidia/NVIDIA-Nemotron-3.5-Bolt-74B-A9B-24GB-LiLiCorr-GGUF NVIDIA Nemotron 3.5 Bolt 74B-A9B 24GB is a vision-language model (VLM) designed to run everyday agentic...
Shelly’s new presence sensor simultaneously detects up to 10 people without a camera
Following the launch of its $50 subscription-free security camera last month, Shelly announced another new accessory for smart home automation today that can keep track of multiple people as they move through rooms or large spaces without recording them.
Microsoft’s new Photos app combines your PC, OneDrive, and iCloud galleries
Microsoft has redesigned its Photos app for Windows 11, overhauling the editor and image viewer, and combining photos and videos from your PC, OneDrive, and iCloud into a single space.
Trump calls off livestream of execution
The execution of Fort Hood shooter Nidal Hasan will not be livestreamed as Secretary of Defense Pete Hegseth had previously announced.
Google’s Universal Cart shopping tool launches in the US
The new shopping tool is available in the U.S. across Google Search and the Gemini app.
Is AI pentesting as good as a human pentester?
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context.
Microsoft: Windows Server 2022 reached end of mainstream support
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031.
Teaching students to think and learn through questions
Celebrate Teachers’ Day with AI for Educators in Brazilian Portuguese and see how Study Mode can help teachers support active, step-by-step learning.
Microsoft fixes bug causing Windows black screens, Explorer crashes
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August.
Apertus 1.5 Release Notes
Apertus 1.5 Release Notes
Rogue AI agents sit for their first interview
PLUS: Build a live sales dashboard in Claude
UK Legal Aid Agency: Hackers stole records dating back to 1978
The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978.
Welcome FLUX.3 Image Klein in Diffusers
Welcome FLUX.3 Image Klein in Diffusers
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
Tree Appreciator
Tool: Tree Appreciator Another game experiment with Claude.
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes.
From 2,500 requests to 24: Rebuilding star history without the stargazers
Our new repo star history API now provides trends without returning individual identities or requiring unbounded database work. These are the engineering tradeoffs we made.
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering.
Inside the Secretive AWS Networking Lab
We tour a secretive AWS networking lab to see innovation from management switches up to 102.4T switches, encryption, timing, optics, and more
HiRO-ACEv2: Simulating extreme weather at 3 km resolution for a fraction of the cost
HiRO-ACEv2: Simulating extreme weather at 3 km resolution for a fraction of the cost
SentinelOne cuts malware analysis from weeks to hours
With OpenAI Daybreak, SentinelOne cuts weeks of malware analysis to hours, creating capacity to investigate more threats.
Hirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks.
BeOS-Inspired Haiku Landed More Hardware Improvements & Other Changes In September
Released at the end of August was Haiku R1 Beta 6 and over the course of September, further improvements continued to land for this BeOS-inspired project now in its 25th year of development...
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part.
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled.
KDE Plasma 6.8 Released, Marks 30 Years Of The KDE Project
The feature-packed and polished Plasma 6.8 KDE desktop is now available. Making this release all the more special is that it coincides with the 30th anniversary of the KDE project...
Article: Composable Commerce: Inside Shipt’s Kit Platform
Shipt launched its Kits feature, enabling quick assembly of themed grocery bundles for events. The platform architecture lets merchandisers easily create store-aware kits, streamlining previously labor-intensive workflows.
AOSP Source Releases Are So Late Developers Disassemble Libraries to Report Bugs
Article URL: https://github.com/android/ndk/issues/2260 Comments URL: https://news.ycombinator.com/item?id=50083130 Points: 302 # Comments: 142
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.
Redesigning source control at Anthropic
Redesigning source control at Anthropic Interesting piece from Anthropic describing why and how they built their own custom alternative to Git, based on the dramatic increase in rate of changes to their code after the past six months.
OpenAI engineer arrested for allegedly planting spy device in office
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record sensitive conversations.
Anthropic warns self-replicating AI could spread to your smart devices
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers.
Redesigning source control at Anthropic
Redesigning source control at Anthropic
Marvell Structera X 3406 and 3506 CXL 3.2 Memory Expanders
The new Structera X 3406 and Structera X 3506 offer six channels and up to 18 DIMMs per controller for CXL 3.2 memory expansion
Filter, reshape, and redact logs before export with Transformers
Logpush now supports Transformers, allowing teams to filter, redact, and reshape log streams using SQL before export. Powered by Apache DataFusion and Apache Arrow, Transformers apply those changes directly to log data before it reaches the destination.
FBI Arrests Executive at Ransomware Negotiation Firm
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of...
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
"The current decline may be just the beginning of a new downward cycle."
The model that didn't exist, so you made it yourself
The model that didn't exist, so you made it yourself
Introducing Falcon ASR
Introducing Falcon ASR
One Model Family, Two Gold-Level Results: Fine-Tuning Nemotron for IOI and IMO
One Model Family, Two Gold-Level Results: Fine-Tuning Nemotron for IOI and IMO
Licensing costs driving 90 percent of VMware users to explore options: Survey
Users want to "reduce risk and avoid unnecessary disruption" while making changes.
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Trust gaps in the new protocol spread malicious prompts from one agent to another.
Improving site performance by shipping more CSS
How we fully migrated github.com away from CSS-in-JS.
Rendering huge pull requests in the GitHub Copilot app
How we rebuilt the diff surface in the GitHub Copilot app to open a million-line pull request with hundreds of inline review comments.
How we make AI coding more cost efficient without sacrificing task quality
Why shorter outputs can cost more, and how GitHub Copilot reduces wasted work across the complete coding task.
Your alt text passes automated checks. That doesn’t mean it’s any good.
We built a plugin for the GitHub Accessibility Scanner to make sure your alt text is actually accessible. Here's how it works.
Using the GitHub Copilot SDK for Java
Enterprise Java developers have a new superpower—drive GitHub Copilot from idiomatic Java code with annotations, virtual threads, and more.
SK Hynix bargains for chip equipment exports to its China facility in return for building a factory in US
SK Hynix’s Solidigm is reportedly seeking US approval to send more chipmaking equipment to China as it weighs building a new NAND chip factory in America.
Duplicate Chat Events After Reconnect — Diagnosing Replay Collisions in Commerce
A reconnect is a data reconciliation operation, not a transport event.
DuckLess: serverless DuckDB on Google Cloud, in your own project
This article was originally published on Medium . I like DuckDB a lot. On a laptop it chews through gigabytes of Parquet faster than most of the platforms I use at work, and it asks for nothing: no cluster, no warehouse, no service to keep alive.
PaperTrail: Your Private Financial Co-Pilot Powered by Open-Weight AI 💸
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle ## What I Built PaperTrail — Your Private Financial Co-Pilot 💸 PaperTrail is a privacy-first financial document manager designed for freelancers, solopreneurs, and...
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday.
My C23 Conventions
My C23 Conventions
Ramp reaches $60B valuation as it pushes deeper into AI
The funding comes as Ramp's annualized revenue crosses $2B, and its customer count reaches 85,000.
nvidia/NVIDIA-Nemotron-3.5-Super-VL-120B-A12B model family released (base, NVFP4, BF16, and LiLiCorr speculative decoding)
submitted by /u/jinnyjuice [link] [comments]
JPEG XL vs AVIF for web use-cases
JPEG XL vs AVIF for web use-cases
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed ROI777.
TechCrunch Disrupt 2026: Last day
Last day to be part of TechCrunch Disrupt 2026. Join 10,000+ tech leaders for a day of connections and insights. Save 75% on your pass now.
Deploy with Void
Introducing Void: an open-source SDK, CLI, and self-hosted platform for building full-stack Vite apps and deploying them to Cloudflare.
Sunsetting decomp.dev
Sunsetting decomp.dev
Anthropic tells investors quarterly revenue up nearly 50% to $16.8bn ahead of IPO
Anthropic tells investors quarterly revenue up nearly 50% to $16.8bn ahead of IPO The phrase "told investors" appears four times in this FT article, which reports on Anthropic's day of hosting investors on Wednesday.
Israeli firm's digital ads enabling installation of 'zero-click' spyware
Article URL: https://www.theguardian.com/technology/2026/oct/15/israeli-firm-digital-ads-enabling-installation-of-zero-click-spyware-researchers-say Comments URL: https://news.ycombinator.com/item?id=50103000 Points: 368 # Comments: 193
Intel Optimizes IPv6 Networking Into Nothingness, Say Users
"Arthur T Knackerbracket" writes: https://www.theregister.com/networks/2026/10/13/intel-optimizes-ipv6-networking-into-nothingness-say-users/5302622 If you're encountering some odd IPv6 networking issues, the culprit might be the Intel Connectivity...
The Costa GUI
The Costa GUI
Amazon’s Bee launches two new personal AI devices, starting at $75
Amazon-owned Bee has launched its first new AI devices since its acquisition, including an updated wearable and a credit-card-sized recorder that attaches to smartphones.
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026.
Optimizing Software Workflow: Exploring Fundamental Impacts in Technology
Software only has value when shipped; faster release cadence matters. Development, deployment, and operations require different thinking, metrics, and investments.
Bank of America Hired 1,000 Contractors to Patch Software Flaws Exposed By Anthropic's Mythos
Bank of America hired 1,000 outside contractors to help patch software vulnerabilities exposed by advanced AI models, including Anthropic's Mythos. The effort added hundreds of millions of dollars in third-quarter expenses.
NVIDIA AI: So many models launching this week! And we have one of our own coming...
From NVIDIA AI on 𝕏: https://x.com/NVIDIAAI/status/2110468004609950057 submitted by /u/Nunki08 [link] [comments]
Citizen Lab says governments are abusing online ads to hack people with ‘zero-click’ spyware
The digital rights unit found evidence that dozens of devices at media organization Al Jazeera were hacked after being shown malicious online ads.
Grafana Tempo 3.1 Adds Query-Based Trace Redaction and Sampling-Aware TraceQL Metrics
Grafana Labs has released Tempo 3.1, the first minor update to the 3.0 architecture.
Article: Server-Side DPoP and Token Exchange in Spring Security 7
Spring Authorization Server now lives inside Spring Security 7 under the same Maven coordinates, so the upgrade is a version bump.
Will there be a black-friday this year? NVIDIA RTX 5060 Ti 16 GB Surges Up To 144% In Japan, Hitting $1,292 As RTX 5080 Climbs Past $2,400
Will there be a black-friday this year? submitted by /u/chemist_slime [link] [comments]
Haxy on Haxy
Haxy on Haxy
Haxy.net is live! — HAXY (git forge) devlog
Haxy.net is live! — HAXY (git forge) devlog
Stepfun Step-5-Preview released! (600B/27B-1M Context)
Step 5 Preview is StepFun's flagship model for agentic work. It delivers frontier-level performance across software engineering and professional knowledge work, with particular strength in finance. submitted by /u/ResearchCrafty1804 [link] [comments]
Tiny Little Office
Article URL: https://tinylittleoffice.com/ Comments URL: https://news.ycombinator.com/item?id=50096142 Points: 597 # Comments: 150
Microsoft Defender Now Supports Linux Desktops
"Starting today, Linux desktops are now officially supported by Microsoft Defender," reports Neowin.
Argonne Scientists Create Chatty X-Ray Microscope That Zooms in Where You Tell It to
"Arthur T Knackerbracket" writes: https://www.theregister.com/science/2026/10/07/argonne-scientists-create-chatty-x-ray-microscope-that-zooms-in-where-you-tell-it-to/5301737 Researchers at Argonne National Laboratory have plugged an agentic AI platform into...
We’re releasing Jev 1.14.0 along with experimental features for dreamers
Article URL: https://typesafe.ai/blog/jev-1-14 Comments URL: https://news.ycombinator.com/item?id=50095353 Points: 324 # Comments: 115
Anthropic's Scion is heavily inspired by Mononoke
Anthropic's Scion is heavily inspired by Mononoke
OpenCode 2.0
Article URL: https://anoma.ly/notes/opencode-2-0/ Comments URL: https://news.ycombinator.com/item?id=50094994 Points: 785 # Comments: 337
Yandex outage: data shows that instead of going dark, malicious bots moved
Article URL: https://blog.cloudflare.com/yandex-outage/ Comments URL: https://news.ycombinator.com/item?id=50094673 Points: 275 # Comments: 107
Things to know when you get cancer
Article URL: https://jjmaxwell4.com/writing/things-to-know-when-you-get-cancer/ Comments URL: https://news.ycombinator.com/item?id=50093568 Points: 1769 # Comments: 421
AI is mass decompiling games. That's both awesome and scary.
AI is mass decompiling games. That's both awesome and scary.
Anthropic warns small AI models could self-replicate through IoT devices
"Small weight-based replicators" could usher in a new generation of computer worms.
US law enforcement and intel agency docs: since 2021, the FBI, DHS, and NYPD have viewed AI as both a facilitator of violent extremism and a target for attacks (The Guardian)
The Guardian : US law enforcement and intel agency docs: since 2021, the FBI, DHS, and NYPD have viewed AI as both a facilitator of violent extremism and a target for attacks — From the FBI to local police departments, US authorities are increasingly warning...
The AI race: China's open-weight models trail US closed models by just 7 months
Source: whatmodel.sh , an open source AI leaderboard I built (and launched here yesterday). Every point comes from published benchmark results: 22,113 of them across 987 benchmarks, from 1,011 sources, each one linked to where it was published.
Introducing Firefox Enterprise
Introducing Firefox Enterprise
Analysis: AI safety groups and individual donors have spent $48M in the midterm election cycle across bipartisan races to back candidates favoring AI regulation (Maria Curi/Axios)
Maria Curi / Axios : Analysis: AI safety groups and individual donors have spent $48M in the midterm election cycle across bipartisan races to back candidates favoring AI regulation — Advocates for AI safety and regulation are emerging as a force in U.S.
Anthropic Reinvents Source Control As Claude Floods the World With Code
Anthropic says Claude-generated code has scaled so quickly that its existing Git-based infrastructure could not keep up. In response, the company built a custom centralized source-control system called Scion, along with AI-assisted review and search tools.
Presentation: How to Find Resilience Bugs in Systems that Don't Exist
Hillel Wayne discusses how formal methods principles - such as property strength, state-space verification, and environment assumptions - help software engineers uncover critical architectural bugs early.
Anthropic Executive Says Open-Source AI Models Are Higher Risk
https://www.bloomberg.com/news/articles/2026-10-14/anthropic-executive-says-open-source-ai-models-are-higher-risk...
Jensen Huang says Nvidia is pledging $250M in accelerated computing resources over five years to fund UK AI security and agentic safety research (Reuters)
Reuters : Jensen Huang says Nvidia is pledging $250M in accelerated computing resources over five years to fund UK AI security and agentic safety research — US chipmaker Nvidia (NVDA.O) has pledged $250 million worth of computing resources to Britain over...
Microsoft Patches More Than 1,400 Security Flaws
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software.
Topgolf saved over $11.3 million after leaving VMware
Topgolf and VMware "ran deep" before the migration.
Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash
We are expanding the Clef decision model family with Clef-omni, natively processing audio, video, images, and text in a single pipeline. We’ve also lowered Clef-flash pricing and boosted Clef inference speeds by up to 2.0x.
Fired OpenAI safety researchers hit back
PLUS: Clean up a messy Excel report with Claude
AI's next frontier is the human cell
PLUS: Give Claude’s routine work to Haiku 5.5
OpenAI's math avalanche continues
PLUS: Let OpenAI’s GPT-6 Astra compare websites for you
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever.
mistralai/Timestral
https://preview.redd.it/zyoo32u7hnvh1.png?width=1400&format=png&auto=webp&s=f0dc824a831d10abc6b824afabb98c64e7fa9d40 from Mistral: Timestral is a family of time series foundation models for zero-shot forecasting, available in 5M , 28M , 123M , and 209M...
Cloudflare and OpenAI: making AI discovery better for everyone
How Cloudflare and OpenAI are working together to help AI find useful content, keep up with changes, and make fewer wasted requests — making the experience better for users and website owners alike.
137B A6.8B model from Microsoft?
this is actually interesting: https://commandline.microsoft.com/local-models-sandboxed-tools-github-windows/ Microsoft AI developed a local version of MAI Code 1.1 Flash, a coding-optimized mixture-of-experts model with 137 billion total and 6.8 billion...
New TTS king in town: Fish's Drama 3 35B3A!
Yesterday Fish released this incredible text-to-speech model, so naturally I spent the rest of the day building a great demo for them :D The model is a chunky MoE (35B3A), but it runs well on a DGX Spark. The 4bit quants get very close to the original.
Statisticians Build Better Way to Make Sense of Competing Sports Rankings
hubie writes: New Bayesian model can combine conflicting rankings, measure uncertainty and reveal what drives them : Who, really, is the best player in baseball? Ask five sports media outlets and you may get five different answers.
Japan Declares Cyber ‘Emergency’ After Millions Affected In Hacks
"Arthur T Knackerbracket" writes: https://www.siliconrepublic.com/enterprise/japan-cybersecurity-cybersecurity-ai-millions-emergency Government sites across Europe have also been affected in attempted data breaches in recent months.
Yandex outage: Data shows that instead of going dark, malicious bots went on the move
When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks.
The Eruption That Destroyed Pompeii is Helping Scientists Date Earth's History
hubie writes: Historical accounts of the eruption nearly 2,000 years ago provide a precise timeline that allowed recalibration of one of the most versatile dating methods : When Pliny the Younger recorded his first-hand experience of the explosion of Mt.
U.K. Sanctions Cryptomus for RU Money Laundering
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping...
Inside Hyperdrive: How we solved a rare Hyperdrive MySQL caching bug
While adding MySQL support to Hyperdrive, we found a subtle protocol bug when caching query results. Here is how we tracked down a 0.001% rate error and made Hyperdrive MySQL generally available.
Chinese Cars in Norway Stored Military Exercise Footage and Access Codes
AnonTechie writes: Norwegian military personnel discovered that rented Chinese-made cars automatically recorded and stored video footage during military exercises. The Norwegian newspaper DN reported the incident.
OpenAI finds a bug in its boardroom
PLUS: How to give Grok Bot its own email inbox
Your CPU still has an 8086 mode
Snotnose writes: As someone who spent 3-4 years writing 8086 assembly code I'm getting a kick out of this.
Hundreds Of French Supermarkets Hacked In 'Unprecedented' Cyberattack
Major French Supermarket Chains Hit by Cyber "Ingar" writes: Major French Supermarket Chains Hit by Cyber : Several chains of supermarkets in France have reportedly been hit by a cyber-attack targeting the refrigeration facilities of several stores across the...
Under the hood, off the hot path: How D1 scales to millions of databases
A deep dive into how D1 architected its control plane to scale and manage millions of databases, while keeping data plane query operations at the edge. We share guiding principles on how to build on the Developer Platform effectively.
Rewinding the exponential: How we keep hardware usage down
Our strategies to optimize our data pipeline throughput without compromising data quality.