AI Compute & Chips DGX Spark at 64GB: What $4,999 of Local Compute Buys a Small Team NVIDIA's 64GB DGX Spark configuration lands on 23 October from $4,999, runs models up to 100 billion parameters on the desk, and clusters two units into 128GB of pooled memory. The interesti
AI Security Anthropic's Open-Source Disclosure Ledger Shows Where Remediation Slows Down Anthropic's dashboard now reports 6,157 disclosed open-source vulnerabilities against 516 patches released upstream. The funnel behind those two numbers, and the pacing policy the vendor app
LLMs & Models Gemini 4 Argon Arrives as a Gated Release With Frontier Numbers Google published frontier numbers for Gemini 4 Argon and opened access to a vetted group of cyber defenders first. The benchmarks are real and self-reported, and the gate is the part that sh
AI Security Claude Mythos Found a Critical HFS Bug, and Exploitation Followed Within a Day Anthropic's vulnerability programme has disclosed 6,157 findings across 591 open-source projects. The HFS session-forgery bug shows what the programme's throughput means in practice: a publi
Vulnerabilities & Exploits GitLab's AI Gateway Sandbox Escape Ends in Command Execution on Self-Hosted Instances CVE-2026-90970 lets an authenticated user with Duo Agent Platform access escape the GitLab AI Gateway's prompt template sandbox through a crafted flow configuration, and run arbitrary comman
AI Agents How a Private RAG Assistant Answers From Your Own Documents A private RAG assistant has three separate jobs: retrieve the right passage, attach the passage to the claim, and refuse when retrieval comes back empty. The refusal is an engineering output
AI Agents What an AI Agent Harness Contains, and Why the Model Layer Stays Swappable An agent harness is the loop around the model: context, tool calls, session state and permissions. The model inside it is the part that changes on somebody else's calendar, so the harness is
Vulnerabilities & Exploits The NetScaler Payloads That Create Their Own Superusers and Hide in CSS URLs LevelBlue's Threat Hunt Operations team documented what actually ran on compromised NetScaler appliances after CVE-2026-88771 and CVE-2026-88772 were exploited: a Perl script that creates a
Vulnerabilities & Exploits Disclosure Doubled and Exploitation Followed: What GTIG's AI-Era Data Actually Shows Google Threat Intelligence Group's first full dataset on vulnerabilities in the AI era reports monthly disclosures more than doubling — from 5,045 in January 2026 to 10,740 in August — while
LLMs & Models Dialect Fine-Tuning Starts With Data Curation: What NVIDIA's Nemotron Recipe Shows NVIDIA published a full recipe for adapting its Nemotron 3.5 ASR model to Saudi Arabic dialects, and the numbers are honest enough to be useful: a default UTMOS quality threshold of 3.0 woul
AI Compute & Chips Anthropic's $11.6B Akamai Commitment: The Commercial Economics of the CPU Serving Layer Akamai's $11.6 billion, seven-year commitment with Anthropic on September 24, 2026 is for CPU workloads — serving, orchestration, agents, delivery — not GPU training. The warrant ties Anthro
Vulnerabilities & Exploits Cisco SD-WAN Manager Auth Bypass: Actively Exploited, No Workaround (CVE-2026-76504) Cisco disclosed CVE-2026-76504, a CVSS 9.8 auth bypass in Catalyst SD-WAN Manager, on September 30, 2026 — and confirmed active exploitation. A URI-encoded character defeats the login rule,
Vulnerabilities & Exploits The Zimbra Bug That Turned a Monitoring Add-on into a Command Line Microsoft published a September 30, 2026 deep-dive on CVE-2026-73570 — an unauthenticated command injection in Zimbra's optional SNMP notification path — with exploitation observed between t
AI Security Stolen AI API Keys Are Now the Attack Currency Anthropic's September 2026 threat report documents a criminal AI supply chain built on stolen API keys and session tokens. One hacktivist campaign ran for a month entirely on stolen keys; th
AI Security Perplexity Red-Teamed Its Agent Sandbox: The VM Held, the Network Didn't Perplexity's Secure Intelligence Institute published a red-team report on its own SPACE sandbox: zero VM-to-host escapes in 108 runs, but four models bypassed the network egress policy, and
Vulnerabilities & Exploits The Controller That Runs Your AI Data Center Had Hard-Coded Credentials NVIDIA's September 22 bulletin disclosed a CVSS 9.8 hard-coded-credential flaw in NICo, the Kubernetes-based controller that provisions bare-metal AI infrastructure. The tool that manages ev
Kubernetes & Containers Google Routes Inference on KV-Cache Pressure: The Multi-Cluster GKE Gateway, Measured "Google benchmarked the multi-cluster GKE Inference Gateway at 17,000 nodes: near-linear throughput, under 1% routing overhead, spillover driven by KV-cache pressure instead of round-robin l
Linux & Open Source AlmaLinux Hands the Certification Test Kit to Its Users — and Publishes the Results AlmaLinux's software certification puts the test kit in users' hands and the results in a public catalogue. Netics examines what the shift means for trusting Linux compatibility claims.
AI Agents DeepSeek Just Published the Blueprint for Training Agents at Scale DeepSeek's DSec report shows what agent training actually needs from infrastructure: an elastic sandbox factory with tiered isolation, on-demand image delivery, and RL co-design.
Vulnerabilities & Exploits A Public Exploit Escapes Ubuntu Containers Before the Patch Ships DepthFirst published a working container-escape exploit for CVE-2026-80521, an AF_UNIX use-after-free, while Ubuntu still lists the fix as work in progress. MicroVMs are the only real mitiga
LLMs & Models The Browser Becomes an AI Distribution Point: What Mozilla and Mistral Actually Changed Mistral Small 4 is now inside Firefox Smart Window, with France first for official French-language support. The real story is distribution — and whether user choice survives the integration.
Security Operations ISOC Is Microsoft's Answer to Agent-Speed Attacks. The Loop Still Needs Human Judgment Microsoft merges SIEM and threat protection into one integrated SOC loop. Storm-3168 shows why the convergence is necessary — and why least privilege inside the loop decides if it works.
AI Agents n8n Agents Change the Automation Contract: From Steps to Goals n8n Agents shift the automation contract from laying out steps to describing an outcome. The session log becomes the audit trail; one turn becomes the budget.
Databases Valkey 9.1 Turns the Redis Licensing Shock Into a Real Upgrade Path Memorystore for Valkey 9.1 went GA on September 25 with up to 3x QPS at microsecond latency. The upgrade path runs through the 2024 Redis license shock.
Vulnerabilities & Exploits Oracle PeopleSoft Exploitation: How One Encoded Character Bypassed a WAF Rule A URL-encoded P let UNC6240 evade literal-path WAF rules at Oracle PeopleSoft. Netics examines the patch-first response to renewed CVE-2026-35273 exploitation.
