πŸ” Search
Sign in to post
Canadian publisher BorΓ©al ends relationship with novelist ThΓ©lyson OrΓ©lien over alleged use of AIhttps://www.theguardian.com/culture/2026/oct/22/canadian-publisher-boreal-ends-relationship-author-thelyson-orelien-over-ai

Author withdrawn from France’s Prix Goncourt last month has repeatedly denied using artificial intelligence to write novel The publisher of top-selling Haitian Canadian writer ThΓ©lyson OrΓ©lien, who was removed from France’s most prestigious literary prize list last month, has confirmed the author used artificial intelligence to help write his novel C’était Γ§a ou mourir (It Was Either That or Die). OrΓ©lien has denied allegations that he used AI on his breakthrough novel and, last week, Canadian publisher Les Γ‰ditions du BorΓ©al said it was standing by the 38-year-old writer. Contin…

β†—
Potential third critical PHP CVEhttps://elk.zone/m.webtoo.ls/@elise@katze.sh/117479383721672027

Article URL: https://elk.zone/m.webtoo.ls/@elise@katze.sh/117479383721672027 Comments URL: https://news.ycombinator.com/item?id=50185814 Points: 13 # Comments: 2

β†—
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releaseshttps://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html

GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for administrators who patched nine days earlier: the October 12 update covered only versions 19.2 and later, and the new fixed versions sit one patch above it, so an

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoorhttps://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the

OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing Sohttps://thehackernews.com/2026/10/openais-gpt-6-agent-removed-safety.html

OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks. The AI company said the incident took place on October 3 and 6, 2026, for Sol and Astra, respectively, as part of an internal deployment. "A GPT-6.1 Sol agent repairing an

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emergehttps://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects a server. The flaws, together called PHP2Shell, sit in the PHP runtime, not in any application, so a site is exposed even when its own

Signal bug could let someone keep listening after you hang uphttps://www.malwarebytes.com/blog/bugs/2026/10/signal-bug-could-let-someone-keep-listening-after-you-hang-up

A flaw in Signal’s calling library could let another participant keep hearing you after you hang up. Update your app to get the latest fixes.

β†—
Google may add your number to all your accounts: How to stop ithttps://www.malwarebytes.com/blog/mobile/2026/10/google-may-add-your-number-to-all-your-accounts-how-to-stop-it

Android users report that Google automatically added their phone number to accounts they wanted to keep separate. Here’s how to check yours.

β†—

0trust.social media

Loading your media...

Pick a GIF β€” Giphy

Loading GIFs...