News, p. 36
News
427 stories · page 36 of 48Four Joomla extensions land on the actively exploited list in four days
CISA added Balbooa Forms and iCagenda to its catalog of vulnerabilities being exploited right now. Both allow unauthenticated file upload and code execution on the server. Three days earlier, two other Joomla extensions joined the same list - with the same hole.
Read →1X showed a hand with 25 joints and claims it matches human dexterity
The new hands on the NEO robot have 25 movable joints and tendon-driven actuation with a gear ratio ten times lighter than the industry standard. The feel is what's new. That's how the hand senses how hard it's gripping. Per the company's data it handles LEGO, a screwdriver, a zipper, and pouring tea.
Read →xAI released Grok 4.5, trained together with the Cursor editor
The model was announced on July 8, publicly available from the 9th - in Grok Build, in Cursor and through the API console of xAI. The unusual part isn't another version number. The unusual part is that the model was trained together with the editor you'll use it in. In the EU - nothing yet.
Read →Meta opened its own API for its models with an upgrade to agentic Muse Spark
On July 9, Meta Superintelligence Labs announced Muse Spark 1.1 - a reasoning model for agentic tasks, available for the first time through its own public API. According to media reports, the price is about a quarter of comparable models. The third Muse in a week. Time to sort out the names.
Read →GPT-5.6 landed in Copilot, Figma Make and Framer on the same day
On 9 July GPT-5.6 showed up at once in three work environments - the coder's, the designer's, and the site builder's - in three versions: Sol, Terra, Luna. What matters is the speed of the rollout, and the choice now runs through price too.
Read →Anthropic put a former Fed chair on its oversight board and opened a public inquiry
On 9 July Anthropic made two moves in one day: Ben Bernanke joined its independent oversight body, and the company announced results from an inquiry among tens of thousands of people. One speaks to regulators. The other - to the public.
Read →Ten holes in curl: your passwords can travel to a stranger's server on a redirect
Ubuntu patched ten holes in curl at once - the tool that fetches something in every script, container and CI pipeline. The ugliest one sends saved passwords to a server that simply returned a redirect. Advisory-level note: it doesn't claim active exploitation.
Read →Ollama raised 88 million dollars to stay free and local
88 million dollars for a tool whose whole value is being free and local - Ollama raised funding and now serves 8.9 million developers. The number alone shows local AI work stopped being a niche whim a long time ago.
Read →NVIDIA produced half a million made-up financial headlines to train other models
NVIDIA showed how to manufacture financial news that never happened - to feed models where real data is expensive and locked behind licenses. The result looks like news. Behind it there isn't a single real event.
Read →