All sections
News
451 stories · page 44 of 51
FrontierThinking Machines open-sourced a frontier-class modelOn 15 July the lab led by Mira Murati - OpenAI's former CTO - showed Inkling, its first public model, and released it with open weights. It's not a small demo model: a large mixture-of-experts class, multimodal, with a long context window, that anyone can download and run themselves.SecurityA critical hole in Oracle E-Business Suite joins the actively exploited listOn 15 July, CISA added a vulnerability in Oracle E-Business Suite to its KEV catalog - one that allows unauthenticated takeover of the payments module. The deadline for US federal agencies falls on 18 July. Three days. The same day, an older hole in the KNX building-automation protocol joined the list too.SecurityCISA puts four actively exploited zero-days into KEV in one dayOn 14 July CISA added four CVEs to the Known Exploited Vulnerabilities catalog - SharePoint, two bugs in SonicWall SMA1000, and AD FS. Three different surfaces. Confirmed exploitation on every one. Two of the deadlines fall on 17 July.CommerceThe ECB picked 36 payment service providers for the digital euro pilotOn 14 July the ECB announced which 36 payment service providers will join the digital euro pilot - chosen from over 50 applicants to the call from March 2026. The pilot starts in the second half of 2027 and runs for 12 months. For now it's a beta. Not legal tender.InfraCloudflare rolled out a code that shows when DNSSEC has been bypassedOn 3 July the Albanian domain .AL stopped opening for resolvers with DNSSEC checking on. The operator AKEP had changed the key. But the record in the root zone still pointed to the old one. Cloudflare's public resolver 1.1.1.1 restored access with a workaround, but for the first time marked the answer with a code that openly says: this check was skipped.BuildersVercel is retiring Node.js 20 starting 1 OctoberFrom 1 October 2026 Vercel removes Node.js 20 as an option for new deployments in Project Settings. The old stuff keeps running. Only a new build after that date needs a newer version.FrontierOpen models went from 11 to 29 percent of traffic in two monthsVercel released the numbers from its own gateway, through which tens of trillions of tokens pass. Open models now carry 29 percent of volume, up from 11 in April. Another number is quieter. The price per token stopped falling.SecurityA hole from 2008 made the list of actively exploited vulnerabilitiesCISA added a vulnerability disclosed eighteen years ago to its catalog: a CSRF in the web panel of Cisco IOS. Eighteen years later, it's an active attack. The catalog counts only witnessed attacks. The remediation deadline is July 16 - three days after the announcement.
451 stories