PHP Has Fallen: PHP Foundation discloses PHP2Shell, two critical flaws hidden for over a decade that let attackers hijack unpatched servers behind up to 70% of websites - TNW | Data-security

Security firm Calif found the bugs with OpenAI's GPT-5.6 Sol, and Google's Wiz independently confirmed them using Gemini 4 Argon - TechCrunch

Finnish, French and Dutch government sites go offline as NSA and CERT-EU urge unpatched servers to disconnect - Reuters

OpenAI says the PHP flaw were found using GPT-5.6 Sol and it expects “similar findings to increase sharply”. - OpenAI

The reduction in time-to-exploit seems to be making AI a net benefit to the bad actors, despite also helping defenders.

everybody will be either doing AI and organizing work by agents or running security to make sure they don’t go feral…possibly mostly the latter.

AI-powered hacking surge hits over 100 companies as time-to-exploit falls from weeks to hours, and experts warn more flaws are coming - The Atlantic

Criminal hackers trick Claude and DeepSeek by posing as authorized security testers, breaching 15 Argentine healthcare groups, CrowdStrike finds - WIRED

Off the rails: Railway, a significant cloud execution platform, got hit with a serious breach - Railway Blog

Supply chain gang: Poisoned PyPI release of AI gateway LiteLLM 1.107.0 installs a backdoor and credential stealer that grabs SSH keys, cloud secrets and LLM API keys - SafeDep - Real-time Open Source Software Supply Chain Security

Duet or Die: Anthropic launches Claude Duet, an always-on proactive work agent that sends morning briefings, monitors connected apps and runs tasks on a cloud virtual machine - Claude

Duet plugs into more than 6,000 connectors, including QuickBooks, Gusto and Docusign, and can make purchases through Stripe Link or Shop Pay - VentureBeat

Anthropic platform engineering lead Katelyn Lesse says Claude writes all of her roughly 200-person team's code - Business Insider

How an Anthropic engineer uses Claude Docs - YouTube

Meta's Muse AI agent tops 10 million US downloads in 40 days, nearly triple ChatGPT's 3.7 million over the same span - Business Insider

Meta plans to spend at least $135 billion this year, mostly on AI, as third-quarter free cash flow comes in at negative $2.12 billion - Gizmodo

Meta will issue nonvoting shares in January, effectively a two-for-one split, to fund AI without diluting Zuckerberg's voting control - The Wall Street Journal

Zuckerberg says compute-hungry Muse is unprofitable for now but efficiency gains starting next year should make it highly profitable - Business Insider

DeepSeek raises $15 billion, nearly double its initial target, with CATL and Tencent leading as it eyes a Shanghai IPO early next year - The Wall Street Journal

Huawei or the highway: DeepSeek ports key AI software to Huawei's Ascend chips and is expected to run mainly on Huawei hardware by 2027 or 2028 - SemiAnalysis

Tesla's third-quarter profit falls 43% to $787 million on AI and Optimus costs, while capital spending of $4.73 billion comes in below estimates - Bloomberg

The Muskening: SpaceX and Tesla boards form committees to study a merger after SpaceX's $14.58 billion Q3 revenue beat - Decrypt

SpaceX shares jump 7% as Musk targets up to 3 gigawatts of compute by year-end and 10 more gigawatts in 2027 - CNBC

Tera-fabulous: Musk says ASML and other suppliers are rushing tools to Terafab, the Tesla-SpaceX chip fab targeting volume production in late 2028 - Tom's Hardware

Optimus Prime time: Tesla begins producing Optimus humanoid robots at Fremont, replacing Model S and X lines with one meant to build a million robots yearly - Business Insider

Tesla's unsupervised FSD for private cars arrives around Q2 2027 with V15, but only within existing Robotaxi geofences, says VP Ashok Elluswamy - Business Insider

SpaceX offers staff a 20% pay premium to help expand its Colossus data centers in Memphis - Business Insider

War and pieces of drones: When Musk/Trump cut Starshield, Ukrainian drones fell from the skies. - The New York Times

Sounds like Trump and Musk agreed to do it as part of the Trump’s courting of Putin, Trump got political pushback and blamed Musk. Doesn’t sound like something Musk would just do. If so, the nation-state is dead and everyone has to kowtow to Big Tech.

China rethinking exporting open weights, considers keeping best models in China - The New York Times

US and China build rival "AI empires" on chips, energy and capital; funding the race may matter more than reaching AGI first - Foreign Affairs

Compute contango: Silicon Data and CME Group plan futures tied to GPU rental and AI token prices, letting firms hedge or bet on compute costs - The Wall Street Journal

need physical settlement. there is open compute but need a vast data center complex with the standard capacity that gets traded. and the market is already in a corner lol.

Labor pains: Citing Stanford economist Chad Jones, an argument that AI could push capital's share of income toward 100% fuels calls for pro-labor tax and antitrust reforms - City AM

Economists study past labor disruptions, from the Industrial Revolution to the Great Depression, for lessons on preparing workers for AI - The New York Times

Eric Schmidt says CEO AI agents could make "a couple of thousand" roles unnecessary at a 10,000-employee company - Business Insider

Qualcomm plans global performance-based layoffs as falling handset revenue drives a pivot to AI data center chips - Tom's Hardware

Barclays to cut 5,000 jobs, about 5% of staff, citing AI productivity gains as part of £1.1bn 2027 savings plan - the Guardian

Google CEO Sundar Pichai says AI agents summarize his company's daily activity and track compute use, but humans still allocate compute - Business Insider

Of Mice and Models: Thousands of OpenAI GPT-Rosalind agents analyze a whole-brain mouse gene-editing atlas in 32 minutes, a months-long human job, surfacing new neurodegeneration leads - OpenAI

Protein shake: Westlake researchers' 16-billion-parameter Pinal model designs functional proteins from natural-language descriptions, validated on four experimental tasks - Nature

Hugging Face releases Carbon-X, an open-source 14B-parameter model trained on 300B tokens that answers natural-language questions about DNA sequences locally - WIRED

Recursive releases Flint, a free 40-billion-parameter laptop coding model largely built by its AI research system, the Eureka Machine - WIRED

Begun, the clone wars have: AI agents at a 50-person company built Folio, an open-source Git-based Confluence replacement, in 47 days with 101,000 lines of TypeScript - Hacker Noon

Developers used AI to build free near-identical clones of Microsoft Office and Adobe Creative; a lawyer says copyright claims will be hard to prove - ABC Australia

Users vibe code Goodreads clients and Photoshop copycats with AI; private copies are hard to stop, but public releases will likely draw lawsuits - New Scientist

IBM CEO Arvind Krishna says open-weight models run on-premises now deliver about 90% of frontier performance at 10% of the price - theregister

Physician use of medical AI tool OpenEvidence grows from 3 million to 18 million monthly consultations, yet 88% of hospital AI pilots never reach production - Fast Company

Romain Gavras’s “Storm” was the kind of music video AI couldn’t fake. Then came an editing tool seemingly custom-made to replicate it into infinity. - Vulture

New York Times editors on how they report on AI, why they rarely debunk individual viral AI fakes, instead covering their creators, beneficiaries and harms - The New York Times

Enter the droid: Unitree Introduces H2-X Kung Fu Legend Guardian🤖 - X (formerly Twitter)

Follow the latest AI headlines via druce.ai on Bluesky