A PHP remote-code-execution zero-day located by an automated AI audit has moved from pre-patch disclosure into live exploitation, with millions of scan attempts recorded worldwide. Several large enterprises were targeted before the public advisory, and the UK government says routine scanning surfaced five hundred previously unregistered flaws.
GitLab has patched a flaw rated at the maximum CVSS severity, which allowed unauthenticated attackers to achieve remote code execution on self-hosted instances. Because the defect is present across releases spanning roughly twelve years, a large number of organisations running self-hosted deployments need to patch and verify within the same narrow window.
Two PHP remote code execution zero-days, CVE-2026-109618 and CVE-2026-109619, were reported as leaking ahead of coordinated disclosure, and the PHP security team has scheduled a critical patch for October 21. Servers running vulnerable builds without a filter chain in place are exposed before patching. Organisations running PHP in production should treat this as time-critical rather than routine maintenance.
Chip giant Nvidia has agreed to acquire the world’s largest open-source AI community Hugging Face for approximately $13 billion, marking one of the largest deals in AI history and reshaping the competitive landscape.
Core Summary Meta officially unveiled its latest artificial intelligence model on August 10, with CEO Mark Zuckerberg reaffirming the company’s steadfast commitment to open-source strategy. Against a backdrop of increasing closed-source trends in AI, Zuckerberg argued that open-weight models promote innovation more effectively than closed systems and better address competitive pressure from Chinese technology companies. Event Details According to Reuters, Meta’s newly released AI model continues the company’s open-source lineage established by the Llama series. Zuckerberg emphasized at the launch event that open-source represents not just a technical choice, but a strategic decision. ...
Bitcoin developers have disclosed that a volunteer team using AI-assisted code auditing has identified 85 critical vulnerabilities in Bitcoin Core, raising questions about open-source blockchain security.
The popular text editor Notepad++ has launched a native macOS version but original creator Don Ho has publicly disavowed the release, sparking debate in the developer community about its legitimacy.
Kimi K2.6, an open-weights model from Chinese startup Moonshot AI, won first place in an ongoing AI coding challenge, scoring 22 points ahead of GPT-5.5 and Claude.
Microsoft has open-sourced VibeVoice on GitHub, a frontier-grade voice AI model supporting high-quality text-to-speech, real-time conversation, and voice cloning.