Hi there!

🛡️ Security & Privacy

• Linux TCP use-after-free CVE-2026-98432 (CVSS 9.8), with a Claude-built remote root exploit, is patched upstream; Red Hat shipped fixes Nov 1, Ubuntu hadn’t. More, More
• North Korean hackers drained about $6.3B from Binance in roughly 20 minutes, reportedly via a compromised DevOps engineer’s laptop; over $3B was frozen. More
• Cursor Marketplace’s official Claude Code extension, versions 2.1.312 and 2.1.313, was backdoored with a persistent reverse-SSH implant; uninstalling alone doesn’t remove it. More
• A contractor’s personal Claude Code agent reportedly ran on a secure Pentagon network for two months, allegedly leaking credentials and a network map. More
• Bitdefender and NETGEAR’s 2026 IoT report: homes average 24 connected devices, smart TVs, plugs and NAS lead vulnerabilities, and 99.97% of flaws are known CVEs. More

🛸 Tech

• Proton is re-interviewing staff about their AI use, with continued employment reportedly at stake, per a leaked internal email. More
• Tor Browser 16.0 moves to Firefox ESR 153 with redesigned Settings, opt-in generic window titles, native Linux ARM64 builds and Material 3 for Android. More
• Apple’s Foundation Models framework now routes work across on-device models, Private Cloud Compute and third-party LLMs via one Swift API, adding image input. More
• Qwenputer compiles a deterministic RISC-V CPU into Qwen 3.5 4B’s weights, using its Gated DeltaNet layers as RAM for exact arithmetic and code execution. More
• A reverse engineer found an anti-bot fingerprinting script stuffed with bioweapon-themed strings and jailbreak prompts, apparently designed to make LLM-assisted deobfuscation refuse. More
• Andrej Karpathy had Claude Opus 5.5 build HackerTube in about two hours: a YouTube-style site of 6,454 videos recommended on Hacker News. More

🤖 AI

• GPT-6.1 Terra, OpenAI’s fast computer-use and visual-reasoning model, costs $1/$5 per million tokens (half of Sol) and is live in ChatGPT Work, Codex and the API. More
• Mistral open-weights Large 4 “Le Chonk,” a 1T-parameter multimodal model claiming top open-weight coding performance, priced at $0.70/$2.10 per million tokens. More
• Anthropic’s Claude Code v2.1.311 adds CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS, an env var that lets the agent run rm without asking approval. More
• Anthropic, Google, Microsoft and OpenAI back an IETF opt-out signal letting sites refuse AI training; Anthropic has it live, the rest follow in 2027. More
• LangChain shows how to plug TypeSafe’s Jev, a fast decision-only “System One” model that generates no text, into an agent harness. More
• Martin Fowler warns that LLM-drafted prose triggers an uncanny-valley reaction in readers and urges authors to write their own prose. More
• AlphaGo veteran Thore Graepel argues LLMs lack genuine reasoning, as chain of thought is still next-token prediction, and wants auditable epistemic-state systems. More

🛠️ Tools

• Survival LLM is a free, open-source offline AI assistant for Mac and Windows with a 1.5-million-article survival library that cites its sources. More
• astroterm renders a real-time planetarium in your terminal, showing stars, planets, constellations and moon phases for any date, time and location. More
• Herdr is a desktop app for terminals and coding agents that tracks which agents need you and keeps terminals running after the window closes. More
• Jeff fine-tunes Qwen3.5 and Gemma 4 into small open models that make one-forward-pass decisions; code is MIT, weights are Apache 2.0. More
• Google Research open-sources Harness², a framework that recursively improves an agent’s surrounding harness without retraining weights, lifting benchmark scores up to 11.5 points. More
• Alibaba open-sources Open Code Review, an AI code-review CLI combining deterministic logic with agents; it claims better precision than Claude Code at about one-ninth the tokens. More

🏛️ Misc

• Wyoming’s Carmelite monks use five-axis CNC machines to carve Gothic church stonework in days rather than months, working from 3D models. More
• Formlabs’ Form Studio 1 resin printer starts at $699, prints most parts in under two hours and accepts third-party resins; Founders Edition through Nov 30. More

📩 Please feel free to share this article with colleagues and friends who will find it valuable.

Thanks for reading!

Have a great day!
Bogdan