
PHP2Shell: AI-Found PHP RCE Flaws and How to Patch
PHP2Shell (CVE-2026-109618, CVE-2026-109619) allows unauthenticated RCE and is now exploited. Who found it with AI, which versions fix it, what to do now.

PHP2Shell (CVE-2026-109618, CVE-2026-109619) allows unauthenticated RCE and is now exploited. Who found it with AI, which versions fix it, what to do now.

LiteLLM 1.107.0 on PyPI and Docker shipped a credential stealer on October 21, 2026. What it stole, how to check your systems and which secrets to rotate.

Mistral Voxtral 3 adds speech-to-text, TTS and a voice agent API from $0.0035 a minute. See each model, prices against rivals, benchmarks and how to try it.

DeepSeek open-sourced DeepInfer, the engine behind its API. What it includes, what it leaves out, the hardware it needs (SM100, Ascend 950) and how to try it.

MiniMax M3.1 Flash is a 428B MoE agent model at $0.15/M input tokens. See the specs, benchmarks, cost per task and how it compares with DeepSeek and Haiku.

China's draft export controls cover AI model weights, agents, chip design and 10,000-card clusters. What is banned, what is restricted, and why APIs are exempt.

Anthropic is moving 5% of its shares into a Public Benefit Fund that can grow with its valuation. How the LLC works, what it may fund, and how it compares.

DeepSeek V4.1-Flash-1017 is an MIT-licensed update with big agentic coding gains. See the benchmarks, API prices, Search API and how the 1M-context MoE works.

Gemini 4 Argon leads 13 of 19 rows in Google's benchmark table but trails on Terminal-bench. Third-party scores, the thinking-mode caveat, pricing and access.

Meta released Muse Spark Open, an 816B open-weight MoE model with a 1M-token context. Specs, benchmarks, license terms and how it runs on two Mac Studios.