Continuing · Security · High impact
Claude Code is leaking sensitive information on public GitHub instances thanks to a partial oversight in the way its settings files are handled. That's the finding of AI security researchers at Apiiro, who discovered thousands of secrets , including database passwords, API…
Ars Technica · Kyle Orland · · 4 sources · 💬 375
Security · High impact
Last month, Microsoft disclosed a vulnerability in Microsoft Paint, but messaging regarding a patch was unclear.
Dark Reading · Alexander Culafi · · 3 sources · 💬 57
Release
Anthropic is announcing two new models today: Claude Fable 5.2 and Claude Mythos 5.2, which it says are designed to take on "daunting" technical challenges. The company claims the new models show improvements in coding, reasoning, and vision, and can generate outputs faster than…
The Verge · Jay Peters · · 13 sources
Release
Meta on Monday debuted Muse Ember , a smaller, more efficient multimodal member of its Muse model family. The company is clearly taking a similar approach to the other frontier labs, with a family of models that cover everything from focused, high-volume tasks (think OpenAI’s…
The New Stack · Frederic Lardinois · · 6 sources
Continuing · Security · High impact
The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit. The post Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH appeared first on SecurityWeek .
SecurityWeek · Ionut Arghire · · 35 sources
Security · High impact
The hackers who stole $6.3 billion from Binance Holdings Ltd. in crypto’s biggest ever heist have turned to one of the sector’s most gimmicky assets to launder a slice of the proceeds: memecoins.
Bloomberg Technology · Emily Nicolle · · 4 sources
Release
Alphabet Inc.’s Google is rolling out a broader array of artificial intelligence chips, aiming to capitalize on its rapid ascent as a challenger to Nvidia Corp. in a market worth hundreds of billions of dollars.
Bloomberg Technology · Dina Bass · · 4 sources
Meta is globally expanding the age estimation technology it uses to find teenagers on Instagram who haven't correctly disclosed their age. The rollout will automatically place "millions more teens on Instagram into Teen Account protections," according to Meta's announcement…
The Verge · Jess Weatherbed · · 4 sources
Listen · new today
I was in college when Napster hit, and the RIAA instantly became the big villain because it was suing kids for downloading music. That was when I decided to go be a copyright lawyer, which set the rest of my career in motion — and Mitch Glazier was in the background as a young lawyer at the RIAA, on the other side of those cases. So part of me was very deeply, very genuinely surprised to discover just how much fun I had talking to Mitch, who's now on the same side as musicians and audiences in the fight against AI. Read the full interview transcript on The Verge. Links: Major labels propose rules to keep AI slop off charts | The Verge Suno snatched songs from YouTube, Genius, and Deezer | Th
Security · High impact
Socket’s Threat Research Team analyzed the November 9, 2026 compromise of Ethersphere’s release pipeline, in which a threat actor used the project’s own GitHub automation to publish a malicious @ethersphere/bee-js 13.3.0 to npm and a trojanized Swarm Desktop 0.56.2 release on…
Socket Blog · Socket Research Team · · 4 sources
Security · High impact
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that Qubole's platform uses to reach those…
The Hacker News · · 3 sources
Continuing · Security · High impact
U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim to cause service disruptions, fire hazards, and loss of inventory. "The actors may exploit vulnerabilities or weaknesses…
The Hacker News · · 14 sources
Who wants a hand-designed and creatively curated monorail anyway. | Image: Disney / Adobe The Walt Disney Company has teamed up with Adobe to develop proprietary "artist-led" generative AI models to support Disney's production pipeline. The multiyear partnership was announced…
The Verge · Jess Weatherbed · · 3 sources
After publishing a support article in early September outlining usage limits for some Apple Intelligence features, the company has updated Logic Pro with an option to "Buy More Usage" for a one-time purchase price of $49.99, as spotted by 9to5Mac . It has a built-in AI assistant…
The Verge · Andrew Liszewski · · 2 sources
Release
Simulation, which has long been the proving ground for robots learning to walk, roll and hop, is now helping researchers teach robots tasks that require a finer touch: aligning gears, connecting cables and assembling small components. The shift from locomotion to manipulation is…
NVIDIA Blog · Sasa Docca · · 2 sources
Listen · new today
🎧 Latent Space
· 164 min
Our first deep dive with an AI data company. In roughly a year, Handshake built an AI training business doing nearly 1 billion in gross annualized revenue. What are frontier labs buying? Garrett Lord joins us with the people building reinforcement lea...
Release
Google’s eighth-generation TPU announcement on Monday included more than new chips, introducing TPU Sync , an open-source system designed to speed up AI inference by tackling a problem that worsens as context windows grow: moving data between different types of memory. The…
The New Stack · Amanda Caswell · · 2 sources
Release
Two of the biggest players in the AI coding space are betting that developers want to talk to their agents while they work, with both announcing a two-way voice feature that lets users ask questions and give follow-up instructions without returning to the keyboard. On Friday…
Release
Google has released Gemini 4 Argon framing it as a general-purpose physical-reasoning model for robot control, Real2Sim scene construction, multimodal labeling of robot video, and iterative policy improvement, rather than as a single end-effector policy. By Daniel Dominguez
Listen · new today
This is a guest conversation episode of Ship It Weekly , separate from the weekly news recaps. In this Ship It Conversations episode, I talk with Ryan Packer about why a CTO is writing code again, what happens to CI/CD when every engineer runs a fleet of agents, and who trains junior engineers when AI can fix the bugs. Ryan is the CTO at BambooHR and a former VP of Engineering at Adobe. He's watched engineering organizations change from Omniture to Adobe to BambooHR, and he says he's spent more time coding this year than in the rest of his career combined. We start with why. Ryan will never write production code for his team again, but he wants to use the same tools and learn the same techni
Introducing ClickHouse Observability: fully managed observability with the speed and scale of ClickHouse. Just send telemetry; we'll handle the rest. Plus, build the observability experience you've always wanted with a simple prompt in Observability Apps.
Release
One open source entry point for all AI usage in your company. See every model call, who made it and what it cost, natively traced in Langfuse.
ClickHouse Managed Postgres, our NVMe-backed Postgres service natively connected to ClickHouse, is generally available, and we're acquiring Xata to add instant branching, cloning and scale-to-zero for developers and AI agents.
Security · High impact
cdn.jsdelivr.net/npm/axios@1 Put that in a script tag and the @1 means "whatever the newest 1.x is right now". For about three hours on 31 March, the newest 1.x was 1.14.1, the version an attacker published from the lead maintainer's npm account. jsDelivr's public stats count…
Release
If you loop over fullStream from streamText and switch on part.type with an assertNever fallback, bumping ai from 7.0.162 to anything from 7.0.163 up will break your type check. Nothing is wrong at runtime. The union just got two new members in a patch release. I hit this on…
Release
Intro With all the noise about yet another shiny AI model, most of us completely missed a much bigger and more impactful announcement. Summer 2026 delighted us with Microsoft rolling out the TypeScript 7.0 RC. TypeScript, which was previously written in TypeScript itself, has…
Listen · new today
Wes, Scott, and CJ are back with two weeks of news: Reddit is forcing everyone to log in, r/opensource bans anything AI, and CSS-Tricks is independent again. Plus Anomaly's Hex dictation app, Mitchell Hashimoto's Rex terminal, TanStack Redact, Cloudflare's TypeScript port to Rust, Vercel's Agent Desktop, the new touchscreen MacBook Pros, a flood of CVEs, and a certificate authority whose private key was the number 4. Show Notes 00:00 Welcome to Syntax! 01:11 Anomaly’s Hex Dictation App 05:00 The Battle to Own Your Computer 07:45 Raycast’s iOS Keyboard 10:11 The New AI Design Meta 11:05 Rex: A Next Gen Terminal 17:37 Rex Remote Hosts and Scripting 22:55 Reddit Is Closing Its Doors 28:46 Bots
Sourcegraph Cody reaches end of life on January 31, 2027. Here is why, what Sourcegraph is building next for developers and coding agents, and how Cody customers can plan their transition.