network
A modified Claude Code package, version 2.1.313, sat in Cursor's marketplace for about 11 hours and tried to plant a persistent SSH…
CVE-2026-111497, called Node2Shell, is an out-of-bounds write in Google's Brotli decoder vendored into Electron apps, .NET, DuckDB and Python packages. A Node.js upgrade alone will not close it.
LiteLLM says an unrevoked May master key gave an attacker owner-level GitHub access on October 10, later used to publish backdoored 1.107.0. Installers should rotate cloud, AI, and developer credentials.
Google tests Remy, a 24/7 Gemini agent that acts across work and life tasks. The effort responds to OpenClaw's rapid rise and positions the company against Anthropic, Meta, and Nvidia in the agent race ahead of I/O.
Google DeepMind, Microsoft and xAI have agreed to provide the U.S. government with pre-release access to frontier AI models for national security testing through CAISI. The voluntary deals, expanding on prior pacts with OpenAI and Anthropic, come amid alarms over systems like Anthropic's Mythos and as the Trump administration considers further oversight. States seek inclusion too. This framework gives officials an early technical window while…
OpenAI weighed spinning off robotics and hardware to ease IPO pressures but dropped the plan over accounting rules that would keep losses on its books. The $6.5B Jony Ive acquisition and delayed 2027 device highlight how physical AI bets complicate the path to public markets. Ambitions persist despite recent project cuts and revenue misses.
