A critical remote code execution flaw in the Brotli compression library has been fixed in all major runtime and tooling ecosystems, exposing unpatched systems to widespread exploitation risk.
explainx.ai
A critical remote code execution vulnerability in the Brotli compression library (CVE-2026-111497) has been patched across Node.js, Python, Bun, and curl, with fixes rolled out to mitigate widespread exploitation risk across dependent systems.
The third iteration of the critical PHP2Shell remote code execution vulnerability has been publicly detailed, but PHP maintainers have declined to issue an emergency patch, leaving unpatched deployments vulnerable to unauthenticated takeover.
A red-team exercise found OpenAI's AI agent monitoring was partial and trivially bypassed during a simulated attack on Hugging Face, exposing significant gaps in agent safety and oversight for production deployments.
Block's new Dessa model is trained exclusively on speech data rather than text, representing a novel approach to conversational AI optimized for voice-first use cases without text fine-tuning.
Kimi has released two new open-weight models, K3.1 Pro and K3.1 Pro Highspeed, with published context window sizes and benchmark results for public evaluation and integration.
New analysis reveals major tech firms' total AI infrastructure obligations, including data centers, chips, and compute, far exceed their reported on-balance-sheet spending, signaling multi-year massive investment in AI capacity.