People say hosting a foreign open-weight model on sovereign compute is safe. This is an example it's not. Sovereign compute controls where a model runs, not what it does.

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…

While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected. Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions. Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent. But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models? We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem. Read the full report: cohere.com/blog/concerning-b…

The Agent SDK is now available. Define agents as code, with prompts in Markdown and tools in TypeScript. Deploy them on our hosted infrastructure, or run them on your own. Built-in evals let you measure every change and make your agents better over time.

‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers Details: cybersecuritynews.com/tailsc… A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups. They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks. The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine. #cybersecuritynews

Clients that aren't technical DO NOT want to vibe code their own solutions. They cannot have their businesses rely on something they don't understand. Clients DO NOT want to work with developers who cannot instill trust that the solutions they deliver are solid (a guarantee). 1.5 yr ago I created a proposal for the client to create a Flight Cost Estimate tool. $14.000, and I would have completed it within a week or less. Few days ago they decided they want to build it. I honestly told them I can't charge them $14K anymore, and I doubt it will take more than a few days. I started an agent on it last night, and it's done, tested, deployed on staging this morning. It even tested multiple API providers on real use cases, and came up with a detailed analysis. One shot. Near zero of my time and I'll charge it $4K instead of $14K. Here's how you should think about pricing your services. The client now pays for: - Access to me and my software factory, as a monthly retainer. - My stamp of approval on the software they get from me, which gives them peace of mind. I can spend very little time creating a solution that's super solid, production ready. But that comes from 25 years of software experience, 3 years of building at the frontier of AI, and creating AI Agents that guarantee quality of delivery. Clients get much more done for much less. That opens a LOT more possibilities for them. They couldn't justify a Flight Cost Estimate tool at $14K, but they can at $4K. There's at least 10 more tools like that, which will have significant impact on their business that make sense. That all works if you're a freelancer or a solopreneur. If you're an agency, you have a HUGE problem, which is a topic for another post.

Almost every company we talk to is worried about security right now. AI has taken the gap between finding a vulnerability and someone using it from weeks down to minutes, leaving teams scrambling to keep up. That’s why we built AWS Continuum, now generally available. It works autonomously with guardrails you set to discover vulnerabilities, confirm which ones are genuinely exploitable, prioritize what matters most, and build the patches to close them. Teams spend their energy on real risk instead of chasing noise. Customers like IBM, Robinhood, Capital One, Infor, and Luminate have been running it in preview and see a meaningful difference in their security efforts. Continuum gives security teams what they need to keep up with the risks of today, and get ahead of them. Should be a huge help. aws.amazon.com/blogs/aws/aws…

🚨 Critical Okta Access Gateway flaw allows administrators to execute system commands; CVE-2026-115547 The vulnerability affects the Okta Access Gateway Admin Console and carries a CVSS score of 9.1. ⠀ An authenticated administrator can submit specially formatted configuration values to execute commands within the context of the OAG service account. Key details: • Network exploitable • Low attack complexity • Administrative access required • No user interaction required • Affects OAG versions before 2026.10.2 ⠀ Okta has resolved the vulnerability in Access Gateway 2026.10.2. Administrators should manually upgrade affected appliances. Source: trust.okta.com/security-advi…

BBC: Hablaremos con nuestro experto en seguridad de BBC respecto a la vulnerabilidad de PHP. El experto en seguridad: No sabía que PHP existía hasta ayer en la mañana.