Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability…
Python Workers allow developers to run Python web frameworks and AI orchestration libraries natively in the Cloudflare Workers runtime. You can seamlessly integrate with Cloudflare's ecosystem including D1, R2, and Workers AI without writing any JavaScript glue code.
The world’s tallest tropical trees have no trouble pumping water to their topmost branches, new research reveals. Conventional scientific theory suggests that as trees grow, it becomes harder to transport water from roots to leaves
A vulnerability in the Snowflake Cortex Code CLI allowed malware to be installed and executed via indirect prompt injection, bypassing human-in-the-loop command approval and escaping the sandbox.
A note from a developer who keeps watching good design die in boardrooms.
Claude Tag is a new way for teams to work with Claude.
It is with deep regret that we are announcing the cancellation of this year’s Grace Hopper Celebration in Anaheim, CA.
We found evidence on urlquery that AI agents were active earlier than previously reported and attempted hacks against public data providers.
Exploring alternatives to the archived_at column pattern: triggers, application events, and WAL-based change data capture.
Serving frontier models like Kimi and GLM means fighting for GPU memory. Here's how we quantize KV caches, compress model weights, and add integrity checks to serve them faster, cheaper, and safely.
Patch the Planet connects security researchers, maintainers, and incident responders to help address critical vulnerabilities across open source.
DAYJOB: Tax evaluates AI agents across 50 realistic tax environments, testing their ability to navigate messy records, exercise professional judgment, and deliver reliable tax work.
New research on how we've reduced agentic misalignment
WhatsApp has adopted and rolled out a new layer of security for users – built with Rust – as part of its effort to harden defenses against malware threats. WhatsApp’s experience creating and distri…
Kaspersky expert has discovered new Android malware designed to serve ads and build a proxy botnet. It's delivered through legitimate software for DoFun head units.
It came after ud0 and ud1.
After 15 years at Google, the creator of JJ joins ERSC as Chief Technology Officer.
OpenClaw became the fastest-growing repo in GitHub history almost overnight. The PR data offers a preview of what the future of open source contribution may look like.
Why do our grids show a brief spike in electricity demand every minute? A team led by Dirk Witthaut from Forschungszentrum Jülich has now demonstrated that this is due to regular power checks carried out by large-scale battery storage systems. These findings could help to make our electricity supply more robust, as…
OpenAI will acquire Pierre Computer Company, expanding Codex’s tools for building, understanding, and reviewing code.
Development Update, August 2026
Vulnerabilities in IBMs Bob AI allow attackers to trigger the download and execution of malware via indirect prompt injection if users select auto-approve for even one known trusted command.
Microsoft Copilot Cowork is vulnerable to file exfiltration attacks via indirect prompt injection as a result of insecure automatic action approvals for sending Emails and Teams messages.
The US Supreme Court decided that the US Federal Trade Commission (“FTC”) may not be independent anymore – with major implications for EU-US Data Transfers.
Meta filed for a patent that includes a "memory recall" system that appears to detect people via facial recognition and record them automatically, and show you a highlights real later.
The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their most valuable assets.
