Tags
No item matches the filter.
Releases 8.5.12, 8.4.27, 8.3.36 and 8.2.35 close two vulnerabilities that, under the right conditions, give an attacker code execution with no credentials at all. Every PHP installation that serves web requests is affected. Amazon says it saw the first exploitation attempt on October 17, four days before the fix was public.
The PHP Foundationverified
Amazon announced TorchNeuron on October 19, 2026, a native PyTorch backend for its Trainium2 and Trainium3 chips. The public beta, released as open source under the Apache 2.0 license, followed a day later. Amazon says existing PyTorch code runs on Trainium with one configuration change, but the first release leaves out several PyTorch features, and no independent performance measurement exists yet.
Amazonverified
Google's AI Edge team released ML Drift under the Apache 2.0 license on October 8, 2026. It is the engine that runs on-device models on the GPU in LiteRT, and it also ships as a standalone library. The older TFLite GPU delegate gets no new features from now on, so apps built on it face a migration.
Google Developers Blogverified
Anthropic launched OSS Scanner on October 8, 2026, an opt-in service that scans eligible open-source projects with its strongest models, including Claude Mythos, at no cost. Each report includes a reproducer, an explanation, and a candidate patch when one exists, but no person checks it before it is sent. Anthropic says it expects more than 90% of findings to be real.
Anthropicverified
The foundation behind Wikipedia ran its own investigation after other sites reported rogue agents. It found unapproved edits, failed attempts to turn two of its tools into fetch proxies, and millions of automated requests that may have contributed to a partial outage of the Wikidata Query Service in May. Nothing was compromised, and no coordination ran through Wikimedia. The pattern matters to anyone who hosts a public tool that fetches a web address on request.
Wikimedia Foundationverified
RemoveMacAI is an open source command line tool that turns off Apple Intelligence on macOS 27, removes the downloaded models, and blocks macOS from downloading them again. Its author says macOS 27 no longer has a single switch for these features and keeps the models on disk after they are turned off. MacRumors puts the space freed at roughly 12 GB, depending on which models are installed. The first release came out on September 29, 2026, and four more followed by October 5, 2026.
RemoveMacAIverified
Google no longer accepts product vulnerability reports in its Open Source Software Vulnerability Reward Program (OSS VRP), effective October 1, 2026. Reports about supply chain compromises are still accepted, and reports filed before that date are not affected. Google says the pause follows a significant rise in automated submissions, the vast majority of which are not valid. The company commits to an update in the first quarter of 2027.
Googleverified
Meta published the Muse Gadgets repository on October 2, 2026, under the Apache 2.0 license. It contains firmware for ESP32 boards and a Linux device SDK that turns a Raspberry Pi into a device its Muse agent can operate. On Linux, Muse runs shell commands with the permissions of the account you install it for, including sudo if that account has it. Meta's documentation says pairing has no manufacturer verification and cannot prevent an active man-in-the-middle attack.
Metaverified
Nvidia announced the Open Agent Safety Platform on September 28, 2026. It pairs OpenShell, an open-source runtime under the Apache 2.0 license that confines an agent's file, process, and network access, with Sentry, a watchdog that runs on BlueField-4 data processing units and, according to Nvidia, stops an agent that leaves its boundary within milliseconds. Anthropic, Microsoft, Hugging Face, Salesforce, SAP, and OpenClaw are among the organizations Nvidia lists.
NVIDIA Newsroomverified
Build b11077, published on September 21, 2026, fixes an authentication bug in llama.cpp's router mode. When a server was started with both a key on the command line and a file of keys, the child instances it spawned validated against the file only, so a client using the command-line key could list models but got 401 on every chat request. The same change stops the key file path from reaching a child process at all. It is one line in one file, and it is the difference between a working deployment and one that looks healthy while refusing work.
llama.cppverified
Hugging Face published the release candidate of tokenizers v1 on September 21, 2026, together with the numbers behind it. Across the ten model families the new encode path covers, the library encodes 3 to 30 times faster than v0.23 on a single thread of an Apple M4 Max, and it reaches 76% of linear scaling across eight workers. The output does not change: the same text produces the same token IDs, through the same calls. Every figure was measured against the Rust crate, and the Python bindings most of the ecosystem uses add per-call overhead the numbers exclude.
Hugging Faceverified
Simon Willison released llm-keys-ui 0.1 on September 20, 2026. The plugin serves a small page from the machine where LLM is installed, and a key typed into that page is saved straight into the key store. Nothing has to be pasted into the coding agent running on the same machine. The interface has no authentication, and the project tells the operator to stop the server once the keys are in.
Simon Willison's Weblogverified
Three researchers at Hacktron chained a memory bug in libheif with a flaw in OpenAI's single sign-on and ended up inside the company's internal code repository. The way in was a HEIC file uploaded to the public community forum. Opus 4.8 could not build a reliable exploit across several sessions; Opus 5, released the same evening, managed it in three hours. OpenAI paid a $6,500 bounty, and the whole chain took less than 72 hours.
Hacktronverified
The crates.io team and the security response working group published a warning on September 17, 2026: an ongoing campaign is targeting project members and owners of popular crates, with the aim of taking over their devices and accounts and publishing malware through them. The lure is a job, a project or a contract, arranged as a video call. One crate, arrayref, was briefly compromised this way in August. The project says it does not yet know whether the incidents belong to one campaign.
Rust Blogverified
The UN system has opened the UN System Data Commons, a single knowledge graph built from statistics that used to live in separate agency silos. It is searchable in plain language at data.un.org, and it speaks the Model Context Protocol, so an agent can fetch a figure without a person opening a spreadsheet. Google states that every dataset was validated with UN statisticians. The stated goal is 80% of the system's statistical datasets by 2027.
Googleverified
Two patch versions are out, 1.0a39 for the alpha series and 0.65.4 for the stable line, and the fixes matter most for an instance on the public web that mixes public and private tables. The list is a catalog of ways a permission check can be true and still wrong: a table name in the wrong case, a filter that reaches through an intermediate table, statistics tables nobody thought to deny. The audit that found them was run with Claude Fable 5.1, GPT-5.6 and GPT-6 Astra, and reviewed by two people over almost a week.
Simon Willisonverified
OpenAI has committed $1 billion to subsidized access to its Daybreak cyber models, along with training, technical support, and partnerships. It says it is aiming for the commitment to be consumed within six months. The list of who gets priority is unusually concrete: water and wastewater utilities, electric grid operators, state and local governments, community and regional banks, nonprofits, and open-source maintainers. What the announcement does not say is how much any one organization can receive, or what the subsidized price actually is.
OpenAIverified
H company published NeoMME on September 3, 2026: a pair of multimodal encoders, at 260M and 800M parameters, released under Apache 2.0 and loadable through Hugging Face Transformers. On the ViDoRe v3 document retrieval benchmark the small one scores 0.523 nDCG@10, which is 0.002 behind ColQwen2.5 at roughly 14 times its parameter count. It also encodes about 51 pages per second on a single NVIDIA L40S, and the index it produces can be compressed from about 1.5 MB per page to 6 kB while keeping more than 95% of retrieval quality.
Hugging Faceverified
NVIDIA published the Personal AI Router at IFA 2026 on September 3, 2026. It is a free, open source tool for Windows, macOS, and Linux that finds compatible machines on your local network and routes each independent inference request to one that has capacity, so parallel agent subtasks stop queueing behind a single GPU. It works with Ollama and LM Studio, and supports GeForce RTX 20 Series and newer, RTX PRO workstation cards, DGX Spark, and Apple M4 silicon. What it does not do is pool memory, so a model that does not fit on one machine still does not fit.
NVIDIAverified
Jensen Huang announced the agreement on September 3, 2026. The platform holds more than 3 million models, 500,000 datasets and 1 million applications, and more than 18 million developers and 200,000 companies use it. NVIDIA says Hugging Face stays open to the whole ecosystem and that NVIDIA compute will not be required to build on or deploy through it. The post names no closing date and no regulatory conditions, so what you have today is an agreement rather than a completed sale.
NVIDIAverified
Anthropic released a reference implementation for shopping and merchant agents on September 2, 2026, in the public repository anthropics/commerce-agents under the Apache 2.0 license. It carries a customer-facing shopping agent, a back-office merchant agent, four worked verticals and three runtimes, from the Messages API to Managed Agents in beta. Nothing in the code moves money: checkout is handed back to the host system, and every merchant write waits for a person to approve it. A companion post published the same day sets out the patterns behind the code, including cache hit rates Anthropic puts at 90 to 99 percent.
Anthropicverified
OpenClaw 2026.8.2 was published on September 1, 2026. Two entries in a long set of release notes matter more than the rest: a desktop application for Linux, and a change to what a session may reach by default. Sessions that do not run in a sandbox can now work with other sessions of the same agent unless an operator narrows that. The release also raises the managed Sharp dependency to 0.35.4 with libheif 1.23.2, fixing vulnerabilities in image decoding.
OpenClawverified
The @huggingface/kernels package downloads one GPU operation from the Hub and runs it in a browser that supports WebGPU. All 207 kernels are Apache-2.0, and each one is published with its interface contract, correctness cases, and benchmark cases in the same repository. Hugging Face compared them with ONNX Runtime Web 1.30.0 on an Apple M4 GPU and reports a 2.57x geometric mean speedup across 809 comparable cases. The timings cover work on the GPU alone, for single operations rather than whole models.
Hugging Faceverified
Eight proposals were on the ballot, two of them written to keep generative AI out of the project's own packaging, documentation and web pages. Both lost. The adopted text says Debian neither endorses nor prohibits these tools, and puts the whole weight on the person who submits the work. Saying that a model helped is encouraged and nothing more.
Debianverified
Anil Madhavapeddy fixed a path traversal issue in an OCaml library and opened the patch in public, the way maintainers have done for years. About 10 minutes later his own web server was logging probes for that exact pattern. His own agent had already built a working exploit from nothing but a rough description of where to look. The embargo model assumes that keeping the details quiet buys time, and that assumption has stopped holding.
Anil Madhavapeddyverified
