Latent Space reports AI security breach wave and dozens of model releases
A rapid 48‑hour wave of AI‑accelerated vulnerability disclosures overwhelmed defenders, with critical flaws reported in PHP (PHP2Shell RCE), GitLab (CVSS 10), Node.js, and NGINX. Supply‑chain incidents included a password‑stealing LiteLLM 1.107.0 release, a breach of 321,810 Zeabur accounts, and weak CA keys at eMudhra that Claude allegedly cracked. The CVE count rose from about 4 k to about 15…
Key points
- 48‑hour wave of AI‑accelerated vulnerability disclosures hit 12 subreddits, 544 tweets, with critical flaws in PHP, GitLab, Node.js, NGINX.
- MiniMax M3.1 Flash (428 B total, 23 B active) offers 1 M token context, 73.7% DeepSWE score, 44.6% checkpoint shrink to 250.1 GB.
- OpenAI reportedly near a $30 B raise at a $1.25 T valuation, led by UAE investors; Datadog offered ~$4 B for Upwind Security.
OpenAI and Anthropic announced large‑scale security tooling, with Anthropic’s Frontier Red Team checking 180 M lines of code across 123 libraries, generating 239 entry points and shrinking MiniMax M3.1 Flash’s checkpoint by 44.6% to 250.1 GB. New open‑weight models debuted, including MiniMax M3.1 Flash (428 B total, 1 M token context), Carbon‑X (14 B DNA‑plus‑text, Apache 2.0), OCRia‑1 (4 B VLM), Flint (40 B open model), and Canva Craft (image model). Funding news featured OpenAI’s reported near‑$30 B raise at a $1.25 T valuation led by UAE investors, Warp Sciences’ $215 M Series A, and Datadog’s $4 B offer for Upwind Security.
Model pages: Carbon-X → · Flint → · Canva Craft →
The story so far
3 episodes →- Latent Space reports AI security breach wave and dozens of model releasesthis story
[AINews] Black October
Latent Space · 23 October 2026
Loading the full article…
This text was published by Latent Space and written by swyx .ai. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Business & Funding
All →- Anthropic and Hg agree to launch AI consultancy for European businesses by 2026 · 3 src
- Anthropic may file for IPO in November as OpenAI delays to 2027 · 5 src
- OpenAI nears $30B funding round at $1.25T valuation led by UAE investors and Coatue · 8 src
- Meta reports Q3 revenue of $64.6 billion, up 26% year over year, with AI spending rising · 12 src
- Nvidia invests in Kazakh AI video startup Higgsfield, valuation hits $5.4 billion · 1 src
Comments
via GitHub Discussions