{"version":1,"type":"story","url":"https://digestai.news/story/latent-space-reports-ai-security-breach-wave-and-dozens-of-model-relea","json":"https://digestai.news/story/latent-space-reports-ai-security-breach-wave-and-dozens-of-model-relea.json","markdown":"https://digestai.news/story/latent-space-reports-ai-security-breach-wave-and-dozens-of-model-relea.md","slug":"latent-space-reports-ai-security-breach-wave-and-dozens-of-model-relea","headline":"Latent Space reports AI security breach wave and dozens of model releases","summary":"A rapid 48‑hour wave of AI‑accelerated vulnerability disclosures overwhelmed defenders, with critical flaws reported in PHP (PHP2Shell RCE), GitLab (CVSS 10), Node.js, and NGINX. Supply‑chain incidents included a password‑stealing LiteLLM 1.107.0 release, a breach of 321,810 Zeabur accounts, and weak CA keys at eMudhra that Claude allegedly cracked. The CVE count rose from about 4 k to about 15 k since April, and a China‑aligned group used the ARTEX pentest framework against over 2,250 Microsoft 365 tenants.\n\nOpenAI and Anthropic announced large‑scale security tooling, with Anthropic’s Frontier Red Team checking 180 M lines of code across 123 libraries, generating 239 entry points and shrinking MiniMax M3.1 Flash’s checkpoint by 44.6% to 250.1 GB. New open‑weight models debuted, including MiniMax M3.1 Flash (428 B total, 1 M token context), Carbon‑X (14 B DNA‑plus‑text, Apache 2.0), OCRia‑1 (4 B VLM), Flint (40 B open model), and Canva Craft (image model). Funding news featured OpenAI’s reported near‑$30 B raise at a $1.25 T valuation led by UAE investors, Warp Sciences’ $215 M Series A, and Datadog’s $4 B offer for Upwind Security.","keyPoints":["48‑hour wave of AI‑accelerated vulnerability disclosures hit 12 subreddits, 544 tweets, with critical flaws in PHP, GitLab, Node.js, NGINX.","MiniMax M3.1 Flash (428 B total, 23 B active) offers 1 M token context, 73.7% DeepSWE score, 44.6% checkpoint shrink to 250.1 GB.","OpenAI reportedly near a $30 B raise at a $1.25 T valuation, led by UAE investors; Datadog offered ~$4 B for Upwind Security."],"whyItMatters":"The surge of AI‑driven attacks shows growing security risks as models become more capable, while rapid model releases and massive funding reshape competition and accelerate deployment across industries.","category":{"slug":"business","name":"Business & Funding","url":"https://digestai.news/category/business"},"entities":{"companies":["OpenAI","Anthropic","Microsoft","Datadog","Warp Sciences","Canva"],"models":["MiniMax M3.1 Flash","Carbon-X","OCRia-1","Flint","Canva Craft","Kimi K3.1"],"people":["Jason Clinton","Joshua Achiam","Seán Ó hÉigeartaigh","Kevin Weil","Andrew Curran"]},"firstPublishedAt":"2026-10-23T10:09:29Z","updatedAt":"2026-10-23T10:09:29Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"Latent Space","title":"[AINews] Black October","url":"https://latent.space/p/ainews-black-october","publishedAt":"2026-10-23T10:09:29Z","type":"newsletter","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":{"title":"AI Model Race Accelerates with New Releases","url":"https://digestai.news/thread/typesafe-ai-releases-jev-1-14-with-images-box-type-and-262k-token-context","storyCount":3},"cite":{"text":"Digest AI, \"Latent Space reports AI security breach wave and dozens of model releases\", 23 October 2026, https://digestai.news/story/latent-space-reports-ai-security-breach-wave-and-dozens-of-model-relea","publisher":"Digest AI","title":"Latent Space reports AI security breach wave and dozens of model releases","datePublished":"2026-10-23T10:09:29Z","url":"https://digestai.news/story/latent-space-reports-ai-security-breach-wave-and-dozens-of-model-relea"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}