Some AI labs name their models after constellations or poets. Mistral called its new flagship "Le Chonk," and at a trillion parameters, the name fits. A Trillion Parameters You Can Download On October 29, Mistral released open weights for …

Regular expressions have been giving developers headaches for decades. GitLab has now shown that one carefully crafted regex can also give an attacker code execution on your server. One Crafted Regex, Full Server Access CISA confirmed on O…

Brotli exists to make web traffic smaller and faster, and it's very good at its job. Unfortunately, a bug in its decoder also hands attackers a way in, and CISA says they're using it. From Squeezed Bytes to Shells CISA added CVE-2026-11149…

For years, keeping your content out of AI training sets meant memorizing a different crawler name for every AI company, like a bouncer with a guest list that changed every week. On October 30, Google, Microsoft, OpenAI and Anthropic finally…

Every online store has a cash register, and most days it does exactly what it should. This week the Drupal Security Team warned that on some Drupal Commerce sites, people who were never invited have been reaching into the till, and it's hap…

In gymnastics, a perfect 10 gets you a medal. In vulnerability scoring, it gets you an urgent entry in CISA's catalog. On October 29 the agency added a CVSS 10.0 GitLab flaw to its Known Exploited Vulnerabilities list, alongside a Cisco fir…

For two years, Big Tech's pitch on AI spending has boiled down to "trust us, it'll pay off." On Thursday, Wall Street asked to see the receipts. Alphabet shares fell nearly 13%, wiping out roughly half a trillion dollars of market value in …

Most trillion-parameter models live behind an API key and a pricing page. Mistral just put one on Hugging Face. On October 29 the French AI lab released open weights for Mistral Large 4, which it has nicknamed "Le Chonk," and for once the n…

Most PHP security news is about a plugin, a theme, or some app bolted onto the language. PHP2Shell is a different animal. These bugs live in the PHP runtime itself, the layer underneath Drupal, WordPress, and a surprising number of firewall…

Every online store gets the occasional shopper who tries to leave without paying. This week Drupal confirmed that some of them showed up with an exploit. A highly critical flaw in Commerce Core is being used in live attacks, so if your stor…