Hi there!

🛡️ Security & Privacy

• PHP critical RCE fix: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical unauthenticated RCE bugs (CVSS 9.2); update immediately, as no mitigation is complete. More · More
• eMudhra CA compromise: Eight eMudhra intermediate CA keys were badly generated and are recoverable; browsers blocked them, but Electron apps, curl and bundled CA stores need patches. More
• GitHub package firewall: GitHub’s npm package firewall hits public preview for Enterprise Cloud, gating agent and CI installs with cooldowns, advisory checks and attestation-downgrade detection. More
• iPhone hack demos: Calif claims to have hacked the iPhone, demoing a Signal one-click attack and iMessage targets at Hexacon Paris; details to be released later. More
• Browser fingerprinting: Browser fingerprinting is replacing cookies: hardware and software signals identify you across sessions; only Brave, Tor and Mullvad offer strong engine-level defences. More
• Passkeys opinion: One essay argues passkeys’ remote attestation could let sites block custom or non-approved software, urging TOTP or hardware security keys instead. More
• WhatsApp hidden AI prompts: WhatsApp help pages hid AI instructions steering its chatbot away from recommending regulators or citing GDPR; WhatsApp blamed a bug and removed them. More

🤖 AI

• Kimi K3.1 Pro: Kimi K3.1 Pro scores 55 on Artificial Analysis at $2/$10 per 1M tokens, slow and verbose; Kimi Code adds a 2–3× faster Highspeed variant. More · More
• Google Agent Compute Engine: Google Cloud announces Agent Compute Engine, hardware-isolated microVM sandboxes for agents, plus broader agent governance and open-source Agent Substrate on GKE. More
• NVIDIA OpenShell: NVIDIA’s OpenShell Reference Architecture, now available, combines Vera Rubin, Vera CPUs and BlueField-4 Sentry to contain, monitor and enforce policy on enterprise AI agents. More
• Mistral Voxtral 3: Mistral’s Voxtral 3 brings 50+ language transcription, expressive TTS and a real-time voice agent SDK, with EU-hosted API or self-deployment. More
• Terence Tao on Math 2.0: Terence Tao argues AI is creating mathematical “proof abundance” and urges a Math 2.0 prioritising human understanding over mere problem-solving. More

🛠️ Tools

• DeepInfer: DeepSeek open-sources DeepInfer, the Apache-2.0 inference framework powering its services; offline inference for V4.1-Flash on NVIDIA SM100 GPUs and Huawei Ascend 950 NPUs. More
• OpenAI CLI: OpenAI’s official open-source CLI calls the API from your terminal or scripts: generate images, upload files, run batches and export JSON for pipelines. More
• Local Wikipedia: Local Wikipedia shows only geocoded Wikipedia articles within roughly a half-hour walk of your chosen town, landmark or postcode. More

📩 Please feel free to share this article with colleagues and friends who will find it valuable.

Thanks for reading!

Have a great day!
Bogdan