AI Agents Automating Invoice Intake With Checks a Person Can Verify Invoice intake automation reads a supplier invoice, extracts the fields and routes each one with rules you can inspect. The design question sits in the checks between extraction and posting:
Vulnerabilities & Exploits Splunk's Patroni REST API Runs Operating-System Commands Without a Login Splunk's September/October 2026 advisory carries 17 CVEs, and the critical one sits in the Patroni REST API that runs beside a search head cluster member, where a request that reaches the in
Strategy & Market SAP Starts Its Joule Work Rollout With Its Own Numbers Attached SAP opened the customer rollout of Joule Work on 6 October 2026 with 110,000 of its own employees already working in it, and published the productivity numbers it measured internally.
LLMs & Models Microsoft-Decision-1 Scores the Choices an Agent Has to Make Microsoft put a 9-billion-parameter decision-scoring model in Foundry that returns a calibrated probability for each option in a fixed list, and priced it at $0.042 per million input tokens.
Vulnerabilities & Exploits CISA's Five Legacy Flaws Turn a Patch Order Into an Inventory Job CISA added five flaws to its Known Exploited Vulnerabilities catalog on 8 October 2026 with an 11 October deadline, and every one of them lives in self-hosted server software.
AI Agents Designing an AI Concierge That Qualifies Visitors With Facts You Publish A website concierge answers, asks and recommends from your own catalogue and rules, quotes prices instead of inventing them, and hands the conversation to a person with a summary that can be
AI Security An Unauthenticated KV Cache Server Puts Code Execution on Your Cluster Network CVE-2026-105192 lets one unauthenticated ZeroMQ message run code as the LMCache cache process, and no fixed release exists. The containment is the bind address.
Vulnerabilities & Exploits Eight Atlassian Data Center Products Share One File-Read Flaw and One Patch Clock CVE-2026-21589 reads files without a login across eight self-hosted Atlassian products, and a public proof of concept turned that read into Jira administrator access within two days.
AI Compute & Chips AMD's Trillion-Dollar Mark Rests on the CPU Inside Personal Agents AMD closed at $649.42 on 6 October 2026 and passed a trillion dollars in market value while both flagship personal agents disclose the CPU underneath them: two cores per Muse sandbox, nine p
Cryptography & Post-Quantum Cloudflare Becomes a Certificate Authority for Post-Quantum Certificates Cloudflare has applied to four browser root programs, agreed to buy a publicly trusted root from GlobalSign, and set production Merkle Tree Certificates for the first quarter of 2027. The si
Sovereignty & Compliance Europe Starts a 24-Hour Clock for Exploited Vulnerabilities Article 14 of the Cyber Resilience Act has applied since 11 September 2026: manufacturers report actively exploited vulnerabilities and severe incidents within 24 hours, then 72 hours, then
Strategy & Market Deutsche Telekom's €2.5 Billion AI Target Is a Measurement Design Deutsche Telekom says AI and automation will remove about 2.5 billion euros of indirect cost by 2030 against a 2023 baseline. The euro figure is a forecast; the unit metrics published alongs
Security Operations Google Paused the OSS Bug Bounty: Triage Is the Scarce Skill Google stopped taking product-vulnerability reports to its open-source reward programme on 1 October 2026, and the reason it gave applies to every team that receives security reports from st
AI Compute & Chips The Rack Is Now a Power Contract: Density Numbers Decide Where Compute Lands Rack density moved from about 16 kW to 27 kW in a single year, and the newest AI racks are specified up to 246 kW. That makes the electricity room, the fluid loop and the grid queue the deci
Vulnerabilities & Exploits Zammad's Two-Flaw Exploit Chain and the Two Affected-Version Lists A session-hijack flaw and a local privilege escalation in Zammad chain into root access in seconds, and the version lists published by the coordinating institute and the vendor read differen
AI Compute & Chips DGX Spark at 64GB: What $4,999 of Local Compute Buys a Small Team NVIDIA's 64GB DGX Spark configuration lands on 23 October from $4,999, runs models up to 100 billion parameters on the desk, and clusters two units into 128GB of pooled memory. The interesti
AI Security Anthropic's Open-Source Disclosure Ledger Shows Where Remediation Slows Down Anthropic's dashboard now reports 6,157 disclosed open-source vulnerabilities against 516 patches released upstream. The funnel behind those two numbers, and the pacing policy the vendor app
LLMs & Models Gemini 4 Argon Arrives as a Gated Release With Frontier Numbers Google published frontier numbers for Gemini 4 Argon and opened access to a vetted group of cyber defenders first. The benchmarks are real and self-reported, and the gate is the part that sh
AI Security Claude Mythos Found a Critical HFS Bug, and Exploitation Followed Within a Day Anthropic's vulnerability programme has disclosed 6,157 findings across 591 open-source projects. The HFS session-forgery bug shows what the programme's throughput means in practice: a publi
Vulnerabilities & Exploits GitLab's AI Gateway Sandbox Escape Ends in Command Execution on Self-Hosted Instances CVE-2026-90970 lets an authenticated user with Duo Agent Platform access escape the GitLab AI Gateway's prompt template sandbox through a crafted flow configuration, and run arbitrary comman
Vulnerabilities & Exploits The NetScaler Payloads That Create Their Own Superusers and Hide in CSS URLs LevelBlue's Threat Hunt Operations team documented what actually ran on compromised NetScaler appliances after CVE-2026-88771 and CVE-2026-88772 were exploited: a Perl script that creates a
Vulnerabilities & Exploits Disclosure Doubled and Exploitation Followed: What GTIG's AI-Era Data Actually Shows Google Threat Intelligence Group's first full dataset on vulnerabilities in the AI era reports monthly disclosures more than doubling — from 5,045 in January 2026 to 10,740 in August — while
LLMs & Models Dialect Fine-Tuning Starts With Data Curation: What NVIDIA's Nemotron Recipe Shows NVIDIA published a full recipe for adapting its Nemotron 3.5 ASR model to Saudi Arabic dialects, and the numbers are honest enough to be useful: a default UTMOS quality threshold of 3.0 woul
AI Compute & Chips Anthropic's $11.6B Akamai Commitment: The Commercial Economics of the CPU Serving Layer Akamai's $11.6 billion, seven-year commitment with Anthropic on September 24, 2026 is for CPU workloads — serving, orchestration, agents, delivery — not GPU training. The warrant ties Anthro
Vulnerabilities & Exploits Cisco SD-WAN Manager Auth Bypass: Actively Exploited, No Workaround (CVE-2026-76504) Cisco disclosed CVE-2026-76504, a CVSS 9.8 auth bypass in Catalyst SD-WAN Manager, on September 30, 2026 — and confirmed active exploitation. A URI-encoded character defeats the login rule,
