While investigating critical vulnerabilities in PHP, a problem involving Node.js and Python has now emerged. Commonly known ...

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

We have verified and summarized the AI developments for this week (10/19–10/25) using primary sources such as official ...

Forget ordinary laptop benchmarks - I tested the $4,000 Lenovo RTX Spark with real local AI coding and a brutal battery ...

CVE-2026-111497 in Google’s Brotli decoder can corrupt memory across Node.js, Bun, Python and Envoy, with code execution ...

While PHP2Shell only impacts PHP web servers, Brotli basically impacts everything, across programming languages. The first ...

Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation ...

A planted AGENTS.md file tricked OpenAI’s Codex into installing malware, exposing a risk for AI coding agents that act on ...

Security researcher Xusheng Li has reported cryptographic weaknesses in four USB protection products, demonstrating how OpenAI Codex accelerated reverse engineering and helped recover protected files ...

Nace AI’s Drex for Search reports 92.05% on BrowseComp-Plus with GPT-5, using only 12.6 search calls per question.

PHP is used by nearly 70% of websites, but the foundation that supports the development of the programming language has only ...

OpenAI 在 2025 年 5 月发布过一款云端编程智能体。 它在公司内部备受追捧，公开发布后却惨遭滑铁卢，几乎没留住什么长期用户。 令人意外的是，十三个月后，这群人宣布要重新杀回云端。 中间这段时间，Codex 换了四次形态，走过云端、命令行、编辑器插件和桌面应用，最后它把 ChatGPT 也装了进去。 每次换形态，先动的都是底层模型。模型能做到哪一步，产品就长成什么样。 这听起来像常识，真 ...