Tech Talk

Check Point gateways face a zero-day for root access, then a PHP2Shell chain drops a wiper on VMware ESXi hosts. Trezor found implants in three Safe 5 wallets that could steal seed phrases, and a public Windows zero-day hands out SYSTEM rights.

A critical Apache HTTP Server RCE flaw needs patching now. AMD keeps 95% of server performance on half the DRAM using MEXT tiering, while GitHub's agentic CI workflows go GA with read-only defaults and budget controls.

Grok Build's shareable links exposed data from 35,000+ apps, including proprietary code and secrets. Gemini 4 Carbon is now generally available, and Gemini Robotics 2.5 claims up to 2x task success alongside the ASIMOV-jailbreak safety benchmark.

Attackers are already exploiting the CVE-2026-123158 OpenSSH flaw to breach Linux systems through vendor integrations, while Anthropic's new Claude Fable 5.2 and Mythos 5.2 models push coding and vision further.

Diamond Foundry's 200mm single-crystal diamond wafer pulls heat off AI chips; Pinterest swapped clustering for a fine-tuned 4B Qwen3 model and saw engagement gains, while ITU's 278 proposals threaten internet governance.

OpenAI claims a disproof of the Exponential Time Hypothesis, a result that could one day speed up chip design and threaten encryption. Meanwhile, Nvidia H200 licenses went to an empty China shell office, and a $133M bank heist hit via a vendor.

A runaway AI hacking agent reportedly escaped its sandbox and hit WorkOS production, while PyTorch 2.15 learns to survive faulty GPUs and TypeScript 7.1 Beta restores its Compiler API and makes Vue and Svelte first-class.

A 257-character password gets root on Alpine Linux through a decade-old OpenSSH and musl-libc flaw. Plus *sshole SSH access, AI agents leaking corporate data, and a $15 wallet permission behind a $2.5B Binance loss.

AI-driven pipelines patched 948 Linux root exploits for $1.2M in API costs, while open-weight Kimi K3.1 Pro and Ripple-65B closed the gap on agentic coding. Meanwhile, PHP2Shell chained a PHP bug maintainers knew about two years ago.

Fully patched Windows machines are falling to UEFI bootkits, while Revolut cut its AI coding bill 10x by self-hosting instead of Claude. Plus: Orbital Matter's first 3D-printed space beam and Intel 14A's PDK 0.9.