https://tech.levine.io/AI, security and architecture news, summarized.https://www.bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts/https://www.bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts/A newly disclosed OpenSSH flaw lets attackers log into password-disabled Alpine and other musl-based Linux accounts by submitting an oversized password.securityThu, 05 Nov 2026 00:00:00 +0000https://socket.dev/blog/github-to-block-pull-request-targethttps://socket.dev/blog/github-to-block-pull-request-targetGitHub will block pull_request_target workflows by default starting December 2 as an Actions security hardening measure.sdlcThu, 05 Nov 2026 00:00:00 +0000https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/Zyxel patched a zero-day in GS1900 switches that attackers exploited to compromise nearly 1,000 devices and steal configs and credentials.securityWed, 04 Nov 2026 00:00:00 +0000https://thehackernews.com/2026/11/xen-hypervisor-flaws-let-one-malicious.htmlhttps://thehackernews.com/2026/11/xen-hypervisor-flaws-let-one-malicious.htmlTwo Xen flaws let a malicious guest VM read and write other VMs' memory, including dom0; patches are out with no known mitigation.securityWed, 04 Nov 2026 00:00:00 +0000https://openai.com/index/a-thousand-fewer-paths-to-roothttps://openai.com/index/a-thousand-fewer-paths-to-rootOpenAI built an autonomous pipeline that found, validated and patched 948 Linux kernel local privilege-escalation vulnerabilities.securityWed, 04 Nov 2026 00:00:00 +0000https://thehackernews.com/2026/11/debian-and-ubuntu-apt-flaw-lets-mitm.htmlhttps://thehackernews.com/2026/11/debian-and-ubuntu-apt-flaw-lets-mitm.htmlA Debian and Ubuntu APT flaw lets attackers who can modify downloads swap verified packages and run code as root.securityWed, 04 Nov 2026 00:00:00 +0000https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.htmlhttps://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.htmlRed Hat released kernel fixes for a 9.8-rated remote unauthenticated use-after-free RCE in Linux IPv4 TCP (CVE-2026-98432); Ubuntu fixes remain in opt-in testing.securityTue, 03 Nov 2026 00:00:00 +0000https://openai.com/index/scaling-git-at-openaihttps://openai.com/index/scaling-git-at-openaiOpenAI built Pando, a Git-compatible backend, to handle repository scale driven by Codex-assisted development.sdlcMon, 02 Nov 2026 00:00:00 +0000https://thehackernews.com/2026/10/attackers-chain-three-ivanti-connect.htmlhttps://thehackernews.com/2026/10/attackers-chain-three-ivanti-connect.htmlCISA added two Ivanti Connect Secure flaws to its KEV catalog after attackers chained three vulnerabilities to gain unauthenticated root access.securitySat, 31 Oct 2026 00:00:00 +0000https://deepmind.google/blog/gemini-4-carbon-our-next-frontier-model/https://deepmind.google/blog/gemini-4-carbon-our-next-frontier-model/Google DeepMind announced Gemini 4 Carbon, its next frontier model.aiWed, 28 Oct 2026 00:00:00 +0000https://simonwillison.net/2026/Oct/28/github-octoverse-2026/https://simonwillison.net/2026/Oct/28/github-octoverse-2026/GitHub Octoverse 2026 reports merged pull requests tripled to 220 million monthly and commits to 7.38 billion monthly, attributed to agentic engineering.sdlcWed, 28 Oct 2026 00:00:00 +0000https://deepmind.google/blog/genie-4-a-new-generation-of-world-simulation/https://deepmind.google/blog/genie-4-a-new-generation-of-world-simulation/Google DeepMind announced Genie 4, a world model for real-time simulation.aiTue, 27 Oct 2026 00:00:00 +0000https://openai.com/index/introducing-gpt-6-1-terrahttps://openai.com/index/introducing-gpt-6-1-terraOpenAI released GPT-6.1 Terra, a model for fast computer use at scale.aiMon, 26 Oct 2026 00:00:00 +0000https://www.anthropic.com/news/s1-sechttps://www.anthropic.com/news/s1-secAnthropic filed an S-1 registration statement with the SEC for a proposed initial public offering of Class A common stock.otherMon, 26 Oct 2026 00:00:00 +0000https://simonwillison.net/2026/Oct/23/kimi-k31-pro/https://simonwillison.net/2026/Oct/23/kimi-k31-pro/Moonshot released Kimi K3.1 Pro on its API at $2/$10 per million input/output tokens, with open weights promised by November 2026.aiFri, 23 Oct 2026 00:00:00 +0000https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilitieshttps://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilitiesTwo critical PHP remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, leaked before patches were available.securityWed, 21 Oct 2026 00:00:00 +0000https://blog.cloudflare.com/typescript-rust-port/https://blog.cloudflare.com/typescript-rust-port/Cloudflare is collaborating on tsrs, a Rust port of TypeScript reported up to 8x faster with 70% less memory use.sdlcTue, 20 Oct 2026 00:00:00 +0000https://huggingface.co/blog/meta-muse-spark-openhttps://huggingface.co/blog/meta-muse-spark-openMeta released Muse Spark Open, an open-weight frontier multimodal mixture-of-experts model, on Hugging Face.aiThu, 15 Oct 2026 00:00:00 +0000https://deepmind.google/blog/introducing-gemini-4-argon/https://deepmind.google/blog/introducing-gemini-4-argon/Google DeepMind released Gemini 4 Argon, positioned for complex problem solving.aiTue, 13 Oct 2026 00:00:00 +0000https://openai.com/index/gpt-6-for-everyonehttps://openai.com/index/gpt-6-for-everyoneOpenAI is rolling out GPT-6 globally in ChatGPT with an Intelligent UI offering faster responses and interactive visual experiences.aiWed, 07 Oct 2026 00:00:00 +0000https://www.anthropic.com/claude-haiku-5-5https://www.anthropic.com/claude-haiku-5-5Anthropic released Claude Haiku 5.5, a small model aimed at high-volume summarization, subagent and browser-use workloads.aiWed, 07 Oct 2026 00:00:00 +0000