SECURITY ADVISORY
21 Oct 2026 Security advisory: Critical remote code execution vulnerabilities, update now https://www.php.net/archive/2026.php#2026-10-21-5
Gemini Notebook Can Turn Books Into an AI Tutor. Here’s How I’d Use It
Most Books Get Read Once and Forgotten. A Chapter-by-Chapter Routine Could Change That. Almost everyone owns books they meant to learn from properly. Read once, a few highlights, a vague memory of a good idea. A few months later, most of it is gone, and the book goes back on the shelf with the others. […]
Why Google’s New Harness² Open Source Release Changes How I Think About AI Agents
Moving past the endless retraining by fixing the operating system around our AI agents -> this is what google is trying to do.
5 things to know about how companies can create value from AI
As AI tools become more widely available, competitive advantage will depend on the trust, data, expertise, operating capabilities, and work redesign companies build around them.
AI and jobs: 4 takeaways from Google’s chief economist
Google’s Fabien Curto Millet examined how AI is reshaping job roles, workflows, and employee training in an address at the MIT Stone Center on Inequality and Shaping the Future of Work.
Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
A flaw in Broadcom’s Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working against home gateways supplied by three Belgian internet providers, in one case reading the Wi-Fi password off the device
OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode’s optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key to call the provider so team members can use the models without
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below – ConnectWise Cloud Backup – 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise
This Hidden Device Could Free Up Gigawatts of Grid Power
This article was originally published by Canary Media.America’s energy supply crunch is driving a surge of federal and private investment in new electricity generation — from polluting gas turbines to cleaner developments like solar farms and geothermal plants. But gigawatts of power are already available for the taking across the U.S. economy in the form of wasted energy from an unexpected…
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a user named “malfexteste8.” It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of