News, p. 22
News
427 stories · page 22 of 48Five holes entered the actively exploited catalogue in two days
On 17 and 18 August the US agency CISA added five vulnerabilities to its catalogue of known exploited flaws. Inside are macOS, VMware vCenter, SharePoint, a Microsoft service for encrypted connections, and Ray, which sits under part of the world's AI training.
Read →You approve a harmless command and somebody else's code runs. The hole is in the allowlist
Docker walks through a flaw in Cursor that let hidden text change environment settings without ever asking for approval. After that, an entirely ordinary command the developer approved themselves was running somebody else's code.
Read →Claude designed proteins against 15 targets and hit 14
Anthropic published results from a lab, not a simulation. External evaluators produced and tested the model's designs. The share that worked is between 22 and 35 percent, against a usual 10 to 15.
Read →Cerebras launched CS-4 and promised up to thirty times faster than GPU systems
The fourth generation of their system stands on three processors the size of a whole silicon wafer. The company claims up to 30 times faster inference. The number is theirs; there is no independent check yet.
Read →NVIDIA started locking up land, power and buildings the way it used to lock up chips
Jensen Huang announced a partnership with SB Energy for a site in Ohio that will host NVIDIA compute. The tenant is OpenAI. The company calls land, power and shell the next strategic resource.
Read →Vercel took the private keys out of your code and put them behind a service
Their new key service signs tokens from a function without the private key ever appearing in your code or your environment variables. The verifier only ever uses the public key, through the standard.
Read →Replit launched an agent that attacks your app from outside, without looking at the code
Until now their scan read the source code. The new one looks at the app the way an attacker does: through a browser, over the network, with no access to anything internal. The two find almost entirely different things.
Read →Grok Build is out of beta: an app from the chat now works on every plan, and from the phone
From 19 August building in Grok works on all plans, on the web and in the apps for iOS and Android. Until now it was an early beta for the most expensive subscription only. The interesting part is the address the finished thing comes out at.
Read →Cursor is now part of SpaceX and gets the world's largest GPU fleet
The agentic code editor said on 14 August the acquisition is complete. Cursor's line: the largest fleet of GPUs in the world, stronger models at lower cost. The price is not in their announcement.
Read →