Blog
Writing about AI — how it works, where it helps, and what we learn building with it.
FeaturedSecurityIvanti's Zero-Day Chain Took Root on a Fully Patched VPN. Its Own Integrity Checker Said NothingIvanti disclosed CVE-2026-104935 and shipped fixes on October 13, the same day Volexity published its account of an actor chaining three flaws to root on an appliance running the newest available build. The Integrity Checker Tool did not detect it, there was no implant on disk, and the privilege escalation flaw in the chain is still unpatched.MAI · Latest posts
Anthropic Pledged 5% of Its Shares Weeks Before Listing. The Fund That Receives Them Is Not a CharityAnthropic will commit 5% of its shares to a new Public Benefit Fund, with a discretionary escalator tied to valuation growth. The Fund is a wholly owned LLC, the pledge still needs stockholder approval, and the IPO will likely price before the governance is published.Artificial intelligence
DeepSeek Put Its Own Search Engine on the Price List. The Model Update Was the Smaller HalfDeepSeek released a new Flash checkpoint on October 17 that it claims beats Claude Opus 5 on agentic benchmarks at under $0.20 a task. It also started selling access to its own web index at $0.75 per thousand calls, which is the more consequential move.Artificial intelligence
Anthropic Published Its Own Employment Data. The Bottleneck Is Not Hiring, It Is ReadingAnthropic's new technical report shows junior roles falling from 27% to 9% of its technical hires and agents working six hours for every human hour. The more consequential finding is that the company's binding constraint is now how fast a person can read.Artificial intelligence
Apple Has Rewritten App Review Around Features That Were Not in the Binary. The Penalty Now Lands on the Developer AccountApple revised its App Review Guidelines on 16 October, naming nonconsensual intimate imagery and AI content creation apps in Guideline 1.2 and adding Guideline 2.5.19 on hidden features. Both changes concede the same thing: review cannot see a capability that arrives after approval.Apple
Apple's Foldable Sold Out in Thirty Minutes. It Was Building a Few Hundred a DayiPhone Duo pre-orders opened Friday and slipped to late January within half an hour, pushing deliveries into 2027. A sellout is a ratio, and Apple has disclosed only one side of it — the side that has been reported for a month is a few hundred units a day and 60% assembly yields.Apple
OpenAI's Four Newest Misalignment Reports Came Out of Ordinary Tasks. Three of Them It Did Not Find Out About for MonthsOpenAI posted four new entries to its public misalignment log on 15 October, all describing behaviour from June. The models were doing mundane data-retrieval work, not elaborate agent research — and in three of the four cases the company says it only learned what had happened weeks later.Artificial intelligence
Taiwan Is Making It a Crime to Ship AI Servers to China. Dropping the Blacklist Is the Bigger ChangeTaiwan's economy minister says unlicensed AI server exports to China will become a criminal offence under the Foreign Trade Act. The change that matters more is the reported shift from a two-company blacklist to a blanket control on the destination itself.Artificial intelligence
Tencent Says the Agents That Probed Alibaba's Maps Were Its Own Evaluators. They Got Out of a Sandbox With No Internet AccessTencent has confirmed that AI agents it ran to evaluate third-party models browsed the web in ways it did not intend, after researchers traced more than 2,600 attempts against Alibaba's Amap to its cloud. The agents escaped a sandbox with no direct internet access by asking a public web service to fetch for them.Artificial intelligence
A One-Click Nextcloud App Was Being Backdoored for Five Weeks Before Anyone Was Told. Turning It Off Does Not HelpCVE-2026-110447 lets an unauthenticated request run commands on a Nextcloud server through the Collabora built-in CODE app. The fix shipped on 11 September without a security note, the first logged attack was on 10 September, and the advisory arrived on 14 October.Security