All sections
News
451 stories · page 7 of 51
SecurityBeyondTrust: a zero-day in Remote Support was used on 29 August, the fix is from 8 October, and the vendor suspects an espionage group with links to ChinaOn 15 October BeyondTrust published advisory BT26-05 for CVE-2026-102764, a flaw in Remote Support that under the right conditions allows file operations on the appliance. According to the company it was used on 29 August against two customers, and the vendor warns that after disclosure the group typically moves to broad exploitation of every unpatched instance.FrontierMeta opened Muse Spark Open at 816 billion parameters: free, but with a “Built with Muse Spark Open” badge and a contract with Meta if you sell it as a service with revenue above 20 million dollarsOn October 15 Meta released the weights of Muse Spark Open: 816 billion parameters in total, 42 billion active, a 1 million token context. The license is Meta's own: use is free, but every product carries a badge, and anyone selling model access above 20 million dollars in combined revenue signs a contract with Meta.DesignBlack Forest Labs opened FLUX 3 Image Klein: 5.6 billion parameters, runs on an 8GB card, and free for companies under 5 million dollars in annual revenueOn October 15 Black Forest Labs released FLUX 3 Image Klein with open weights: text-to-image, editing and up to 10 reference images. By the company's account the INT8 build runs on NVIDIA RTX cards with as little as 8GB of VRAM. The license is free for commercial use of outputs under 5 million dollars in annual revenue.ControlAnthropic brings six METR staff inside with employee-like access: it can't veto their report, but it can require redactionsOn 15 October Anthropic announced that a METR team is working inside the company with access roughly on par with its own risk assessment teams. METR will publish the results. Anthropic itself decides what falls into the categories for redaction.AudioGrok Voice 3.0 ranks first in the Artificial Analysis speech-to-speech index, and the price stays at $0.08 a minuteSpaceXAI released Grok Voice 3.0 on 14 October. In the Artificial Analysis index the model scores 86.9 against 83.2 for GPT-Live-1, in a table published by SpaceXAI itself. The price is the same as Grok Voice 2.0.SecurityCisco's email gateway gives root with one message again, this time through an attachment, and PAN-OS entered the exploited-vulnerabilities catalog the same dayOn 14 October Cisco disclosed CVE-2026-76519: on a Secure Email Gateway with File Reputation enabled, an email with a crafted attachment writes files and runs commands with root privileges, no login needed. Cisco says the flaw is already being exploited. The same day CISA also added CVE-2026-0322 in PAN-OS, which needs a logged-in attacker with high privileges.SecurityIvanti patched part of the hole in July, but only for its new platform, and Connect Secure and Windows Shell have joined the exploited-vulnerabilities catalogOn 13 October Ivanti published an advisory for CVE-2026-104935: an authentication bypass in Connect Secure that allows remote command execution without logging in. Ivanti says part of the flaw was patched back in July, but only in version 25.1.3.0. The same day CISA also added a Windows Shell flaw to its catalog of exploited vulnerabilities, with a deadline of 16 October for US federal civilian agencies.FrontierGemini 4 Argon shipped for paying users: the paid API tier, and in the app only for Pro and UltraOn October 13 Google released Gemini 4 Argon to developers and enterprises through the API, to enterprises and Ultra subscribers in Antigravity, and to Pro and Ultra subscribers in the Gemini app. The introductory price is $2 per million input tokens and $10 per million output tokens. The free tier is not on the list.
451 stories