Clauday.

LiteLLM published a critical advisory on Tuesday, GHSA-w4c7-34wj-hqm8, rated CVSS 10.0. In the project's words, an unauthenticated request to any LLM route on a proxy running with …

Cloudflare published a postmortem on Monday night about Workers AI serving GLM-5.3: for about two weeks, some responses contained data from other users' requests. 155 responses wer…

Thomas Dohmke, who used to run GitHub, launched the Git forge from Entire on Monday, and it is built on the assumption that most pushes will come from agents. It has three pieces.…

Two security stories landed on S-1 day, and they point at the same control. The first is from The Washington Post. Cathedral, a security startup valued at $1.4 billion, ran AI age…

Wiz Research published its write-up of Gheist on Sunday, a campaign it has tracked since September 15 that abuses compromised GitHub tokens at scale. Wiz counts "more than 13,500 p…

On Friday OpenAI explained why its frontier training now runs with no internet access, and how it pointed agent red teams at its own containment. A few hours later it added a footn…

Yesterday's memory papers said plain retrieval beats fancy memory and that deleting a record doesn't really delete it. Four more from the same batch go after a quieter failure: mem…

Chroma, the open-source vector database a lot of agent prototypes started on, announced on October 23 that it has signed a definitive agreement to join Replit. Terms were not discl…

Daytona raised a $60M Series B at a $1 billion valuation, led by FirstMark Growth, bringing total funding to $91M. The angel list reads like a who's who of companies that now run a…

LiteLLM published the attack chain behind the compromised v1.107.0 release on October 23, and the root cause is the most on-thesis security story of the month. It was not a clever …