my guy probably farmed 200k worth of zero days
❗️ A developer hid a Bitcoin key on a PHP server left unpatched against PHP2Shell, the critical flaws fixed on Oct 21, and dared anyone to steal it.
17 hours on, the wallet holds ~$2,000 and nobody has taken it.
The developer says someone is crashing PHP but "still no RCE yet".
Readers added context they thought people might want to know
The GitHub repository cited as the source explicitly acknowledges in its README that the supposed exploit is fabricated: “And of course it’s fake. Duh. Note: No harm intended, purely for fun.”
github.com/0x1c1101/CVE-2…
Some security companies probably drafted their "finding" of a k8s zero-day generic enough to post on Monday and claim research
state of cyber security companies in 2026 💩
Good morning
045fa83b7c7a42dba1acb2c19794c1bf1091c448eb9c483503e8f8e110fcec42
github.com/kubernetes/kubern…
how is it that the security companies are consistently the biggest liability
with the pace of vulnerabilities and issues getting uncovered by AI, and will certainly get exploited using AI, one of these major events (maybe this PHP one is the one) will lead to some AI restriction or ban.
Watch someone advocate for that if the cyber event is big enough
intermediary certificates were issued with single-byte P-384 private keys.
Meaning anyone can issue certs with these for any website.
eMudhra CAs Were Revoked for Compromise, and Nobody Has Said Why
Over one weekend, eMudhra revoked eight of its own issuing CAs with reason code cACompromise, Sectigo pulled its cross-signs, Mozilla pushed a block, and Go shipped an emergency release.
fenko.nz/blog/emudhra-ca-com…
Ali Mosajjal retweeted
🚀 DeepSeek-V4.1-Flash-1017 is here!
Stronger benchmark performance, faster task completion, and shorter outputs than the previous version—a Pareto improvement in performance and cost. Now live on our website, app, and API.
🛠️ Optimized for @DeepSeekHarness, Tencent CodeBuddy, WorkBuddy, and more. Upgrade to DeepSeek Harness v0.2.1-rc.1 or later for the best experience with the new model.
1/4
They finally removed Bing Rewards from the start menu :)))
A faster, more responsive Windows experience is here. See what's new and what's coming next: msft.it/6018atTYi
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
Introducing Microsoft-Decision-1, our new model for fast decision-making.
It delivers top performance on structured decision tasks, outperforming both LLMs and other decision models in latency and quality.
We’re already testing it across Microsoft for everything from incident response and quality control to scientific discovery.
huggingface.co/cribl-ai/crib…
oh now Cribl too have copy/pasted Qwen3.5-4B to pretend they do Jev 🤣
Microsoft naming their intelligence wing MAI is a bit unfortunate.
Now that it's apparently a crime to call it AI and not SI, MAI can't move to the new name w/o fighting some branding battles :))
Can someone recreate Teams as a native app from scratch?
Surely with Astra shouldn't be that hard
You know I appreciate @Microsoft. But it baffles me that all this talk about the Agentic Era still hasn’t fixed @MicrosoftTeams. Even starting from scratch would be better. People just want @SlackHQ, not whatever this is.
Openclaw was touted by Jensen as the iPhone of the AI era by the way.
most NFT-coded bullshit I've seen
This rush to market to put out a Jev-killer model only proves decision models have a bright future ahead of them.
Jev is still the system to beat and if Google and OpenAI are putting some weight (lol) behind it it'll be good to see competition in this space
I benchmarked "Jev-killer" OpenAI Decisions API against Jev for HiringCafe.com, serving 2.5 million users. The task is to predict how relevant a user query/resume is to a job description, on a scale of 1-10. OpenAI is 2x more expensive and 5-10% worse. 🧵
AWS also came up with a Jev alternative
strandsagents.com/blog/intro…
