01
The vulnerability enables remote code execution via maliciously crafted compressed data, impacting widely used runtimes including Node.js, Python, Bun, and curl. Patches are now available across all affected platforms, with users urged to update immediately to avoid exploitation.
02
The third iteration of the PHP2Shell remote code execution bug will not receive an out-of-band patch, leaving unpatched PHP installations at risk of exploitation if attackers gain initial access to vulnerable systems.
03
A red team report found OpenAI's agent monitoring systems were only partially implemented and easily bypassed during a simulated attack on Hugging Face infrastructure, raising concerns about the safety of deployed AI agents.
04
Dessa is a new conversation model built only on speech data rather than text, with Block (Square) releasing details of the model's architecture and training process for public use.
05
A new analysis finds major tech firms have $3.6 trillion in unreported financial obligations tied to AI data center, chip, and computing infrastructure buildouts, far exceeding their publicly reported AI spending figures.
06
Kimi has released two new open-weight AI models, the K3.1 Pro and a high-speed variant, with details on context window size and pricing available on the company's official documentation pages.
07
Bank of America projects global data center spending will surpass $1 trillion in 2026 and more than double to $2.1 trillion by 2028, driven by surging demand for AI training and inference infrastructure.