AI Daily · Oct 23, 2026 · Friday
NSA warns of two critical PHP flaws affecting over 33 million sites
AI summary
The US National Security Agency has warned of two critical PHP vulnerabilities present in every version since PHP 5 in 2004, and the PHP Foundation has released patches. PHP powers about 70% of websites, with more than 33 million sites affected, and attackers could use the flaws to break into server file systems or databases.
Model releases
Recursive shows first result of its AI-driven research process with Flint
The AI startup Recursive is unveiling Flint, its first language model, a 40-billion-parameter MoE for local coding developed by former DeepMind researchers. It was created in four months using the company's in-house AI system, "Eureka Machine," which independently tests and optimizes architectures. Recursive has yet to prove whether this approach will actually lead to self-improving AI.
OlmoEarth v1.3: State-of-the-art embeddings for the whole planet
Today, we’re releasing OlmoEarth v1.3, a state-of-the-art satellite embedding model. Alongside OlmoEarth v1.3, we’re sharing precomputed, annual embeddings for the whole planet (10m, 64- and 128-dimensions), plus a new browser-based tool to explore and customize maps based on those embeddings — the OlmoEarth Embeddings Explorer.
Product releases
Bringing the Spark to Europe: Local Intelligence Powers Next Wave of Agents
At GTC Berlin, NVIDIA is showcasing its full lineup of local AI hardware. RTX Spark, which launched last week, powers personal agents on Windows PCs; DGX Spark supports developers building and scaling applications on Linux; and DGX Station serves enterprise teams running frontier workloads on Linux, with a Windows version arriving in December.
Industry
An AI agent in "Skynet mode" hijacks unprotected language models to launch self-sustaining cyberattacks
Security researchers at Symantec have found an offensive AI agent that hijacks unprotected language models on the web and uses them to attack servers, steal databases, and install cryptominers on its own. It runs up to 100,000 steps without human input. The owner of the hijacked model gets stuck with the bill.
PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.
Google Cloud and NVIDIA Announce General Availability of NVIDIA Vera Rubin Infrastructure
General availability of the instances is coming next month, with planned expansion of availability to Europe — bringing an integrated platform for training, inference and large-scale reinforcement learning to cloud customers.