If you run Nextcloud with the Collabora Online Built-in CODE Server app installed, update it to version 26.4.303 or later, or remove it completely. That is the direct answer to CVE-2026-110447, a critical command injection flaw that attackers have already used to plant web shells on Nextcloud servers. Disabling the app does not fix the…
HTTP2Shell Explained: The Brotli Flaw Behind Node2Shell Now Hits Bun, Python and Envoy
Short answer: HTTP2Shell is the new, wider name for CVE-2026-111497, a flaw in Google’s Brotli compression decoder that was first widely reported as Node2Shell. It is one vulnerability, not a second bug. The reason it has a new name is that the same decoder code turns up in far more software than Node.js alone, including…
LiteLLM 1.107.0 Supply Chain Attack Explained: How a Poisoned AI Gateway Stole Credentials Without Being Imported
Short answer: If you installed, mirrored, or ran a container with LiteLLM 1.107.0 on October 21, 2026, treat the environment as exposed until you prove otherwise. The compromised release could steal developer, cloud, AI, browser, and SSH credentials simply by starting Python, even if your code never imported LiteLLM. Uninstalling LiteLLM alone is not enough,…
UK AI Biosecurity Lab Explained: £100 Million Funding, OpenAI and Anthropic Backing, and What It Will Actually Do
The short version: The UK government announced on October 24, 2026 that it is setting up the AI Biosecurity Lab, known as AIBL, backed by £100 million of government funding and up to £200 million in commitments from OpenAI and Anthropic. Described by the government as the world’s first dedicated AI biosecurity organisation, the lab…
Kimi K3.1 Pro Explained: Moonshot’s Open-Weight Model, Its Cyber Limits and the November 4 Weights Release
Direct answer: Moonshot AI introduced Kimi K3.1 Pro on October 23, 2026, as the first model in its new K3.1 series. It is a large mixture-of-experts model in the 3-trillion-parameter class, with a 1-million-token context window, available now through Kimi.ai, Kimi Work, Kimi Code and the Kimi API. Its full model weights are promised by…
Claude Duet Explained: Price, Waitlist, Features and How Anthropic’s Proactive AI Agent Works
Quick answer: what is Claude Duet? Claude Duet is Anthropic’s proactive AI agent, launched as a research preview on October 21, 2026. Instead of waiting for your questions like a regular chatbot, Duet checks your connected apps, sends you a morning briefing, keeps working on delegated tasks in the background on its own cloud computer,…
TorchNeuron Explained: How AWS Made Its AI Chips Speak PyTorch
TorchNeuron is Amazon Web Services’ new open-source software that lets code written in PyTorch run natively on AWS’ own Trainium AI chips with close to a one-line change. Announced on October 19, 2026 and opened as a public beta on October 20, TorchNeuron targets the biggest reason most AI teams still train on Nvidia hardware:…
iPhone Duo Release Date: On Sale Today — Price, Where to Buy and What to Do If Your Store Sells Out
The short version: Apple’s first foldable iPhone is officially on sale today, Friday, October 23, 2026, in more than 70 countries including the US, UK, Canada and Australia. Pre-orders opened on October 16 and shipping estimates slipped to January 2027 within about half an hour, so demand is enormous. Apple Stores have a limited supply…
Onamae Desktop Cloud Hack Explained: 26,739 Servers Affected and Why Traders Are Locked Out
Hackers broke into the infrastructure of Onamae Desktop Cloud, a Japanese VPS provider run by GMO Internet, and installed malicious programs on customer servers. The company confirmed the intrusion on October 20, 2026, said up to 26,739 servers may be affected, and shut down every Desktop Cloud plan starting at 4:00 a.m. local time on…
PHP2Shell: Millions of Exploit Attempts as Governments Take Websites Offline
The short version: Within hours of the October 21 disclosure of two critical PHP flaws known as PHP2Shell, Cloudflare recorded millions of exploitation attempts across its network, with attack volume jumping from thousands to millions in about two hours. Government agencies in the UK, Finland, and Japan took public websites and services offline as a…