AI
Nvidia's board opens a probe after reports China targeted Jensen Huang
Huang told staff he was unfaithful to his wife, as House Republicans seek a closed-door briefing a day after Nvidia's Nov. 17 earnings.
Nina Park
Nina writes about AI, developer tools and the software shaping how engineers work. She cuts through the hype to what actually ships.
AI
OpenAI launches GPT-6 Cyber, a Critical-rated security model
The Daybreak Red model hits 48.5% on ExploitGym and stays in scope 99.93% of the time, OpenAI says — but access stays gated.
AI
Andrej Karpathy had Claude build HackerTube, a YouTube without clickbait thumbnails
The AI-built site turns 20 years of Hacker News recommendations into 6,454 videos, and shows each one with a real frame instead of its thumbnail.
AI
Linux TCP flaw CVE-2026-98432 gets a root exploit as Ubuntu, RHEL fixes lag
Anthropic says Claude built a no-login root exploit for the kernel bug. Debian and Amazon Linux have fixes; Ubuntu and Red Hat don't yet.
AI
Mistral Large 4 goes open weight with 1 trillion parameters
Anyone can now download and self-host Le Chonk, but companies selling it as a hosted service need a separate license from Mistral.
AI
Google's Gemini 4 Carbon edges Opus 5.5, but cyber defenders get it first
Google says Carbon leads three security benchmarks. Developers will pay $2 per million input tokens when it opens up, but there's no date.
AI
Google DeepMind's Genie 4 world model adds sound and live steering
Scenes now hold together for about two minutes, but only trusted testers can use it. Google AI Ultra subscribers are next.
AI
OpenAI says its AI disproved the Exponential Time Hypothesis for 3-SAT
The proof and Lean code are public. ETH's own co-creators will vet the claim and say their involvement isn't an endorsement.
AI
Anthropic says Claude pulled Georgia vote counts without paying the fee
Georgia says the AI never reached its voter registration system; Claude used a visitor token from a public dashboard.
Security
HTTP2Shell Brotli bug reaches Node.js, Python clients, Bun and Envoy
Fixes for CVE-2026-111497 are out; code execution has been shown in a lab on one Node.js build, and no attacks in the wild have been reported.
AI
Moonshot's Kimi K3.1 Pro undercuts K3 by a third, weights due by Nov. 4
It costs $2/$10 per million tokens and ranks fourth on Artificial Analysis' index, but the promised open weights and their license aren't out yet.
AI
PHP patches critical PHP2Shell flaws that were targeted before disclosure
Upgrade to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35; the AI-found bugs are in PHP itself, so WordPress or Drupal updates won't fix them.