Tim

Ah yup. That was indeed me. No mallace intended. I've been running some agents to do signups + agentic testing on similar platforms. Just halted the harness I was designing around this as it was definitely going off the rails and reaching too far

INTEL: Crypto hack tracker Chainalysis reportedly hacked, exposing customer names and emails

Breaking: the FAA has shut down airspace over the Department of Energy’s Savannah River Site, with a notice calling it a “US Government Nuclear Incident.”

Apple unveils MacBook Pro with PROLED XDR Display and Touch for the first time on Mac.

New GitHub infrastructure should be able to handle 24 hours of the busiest git repo traffic in 1 minute

I got tired of all the spam calls I was getting so I had @bot find my number listed on sites and file the removals. I made it a free skill so you can do the same. x.ai/bot/fUj6TYhiW_cjtzWvbsF… @SpaceXSI @elonmusk

We used to talk about a "pit of success". Humans would be dragged towards writing the right code by well-designed API's, a good test suite, sensible lint rules. You couldn't make the pit too steep, otherwise the humans would get annoyed. There was a social contract. Feels like what we need now is a black hole of success. An inescapable event horizon agents cannot cross. Agents don't feel annoyed, so you can crank up the pressure to infinity. There is no social contract to break. In other words, increase the forces on agents to the maximum. Make great code inevitable.

🚨 Google patches 52 Chrome security flaws, including 4 CRITICAL bugs. But here's the bigger story: → Claude AI discovered dozens of Chrome vulnerabilities. → Built a working, multi-stage exploit chain. → Escaped Chrome's browser sandbox to execute code. Details: chromereleases.googleblog.co…

Code-execution flaw in UEFI firmware threatens most servers on planet Earth arstechnica.com/security/202…

‼️ UPDATE - Tailscale confirms the Tailworm SSH flaws are real. Its new investigation page says most of what it found is privilege escalation and calls the issues “serious.” Fix targeted within 24 hours — no CVE or patched version out yet. Mitigate now: → Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart → Tighten SSH access rules to the users/devices that need them Read: thehackernews.com/2026/10/un…

‼️Microsoft Authenticator Flaw Lets Malicious Android Apps Steal Account Tokens With Zero Permissions Details: cybersecuritynews.com/micros… Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing malicious apps with no declared permissions to steal work account access tokens due to improper authentication in its broker component. Microsoft classified the flaw as a local elevation-of-privilege vulnerability. The issue affected Android devices with Microsoft Authenticator installed and a signed-in work account. #cybersecuritynews

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…

Announcing three major scientific discoveries, one each in mathematics (harmonic analysis), computer science (complexity theory), and physics (quantum field theory). AI starting to help us improve our understanding of the universe! openai.com/index/building-sc…

We're investigating a potential issue for Microsoft Teams, affecting some users in the United States. For more information, see TM1526111 in the Microsoft 365 admin center.

‼️ In a real-world attack, a malicious file in a dev's Downloads folder tried to trick an AI coding agent into installing malware. In controlled tests, Codex ran the malware in over 90% of attempts. All it took was a planted AGENTS.md file. Read: thehackernews.com/2026/10/ma…

🚀Excited to announce Nanbeige4.3-33B! To push the performance ceiling of small agents, our strategy in Nanbeige4.3 starts with building a powerful teacher first. Nanbeige4.3-33B delivers SOTA agentic performance among open models at ~30B parameters: * Strong results on agentic coding and cowork benchmarks. * When integrated into mainstream agent harnesses, it tackles real-world tasks with cost-efficient inference. * It will serve as a teacher for upcoming smaller Nanbeige models, starting with Nanbeige4.3-3B. huggingface.co/Nanbeige/Nanb… huggingface.co/Nanbeige/Nanb… #LLM #Agent

🚨 850+ compromised GitHub accounts. 13,500+ malicious branches. Researchers uncovered 'Gheist,' an ongoing campaign using stolen tokens to plant GitHub Actions workflows that dump private repo secrets into logs. Attackers download the logs, then delete the runs. Details: thehackernews.com/2026/10/gh…