Techmeme
October 21, 2026, 1:45 PM

Top News

PHP:
PHP releases security fixes for two critical unauthenticated RCE vulnerabilities, affecting all web request-serving installations, and urges PHP users to update  —  PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution.
More: PHP, National Cyber Security Centre, Node.js, CERT-EU, Reuters, GitHub, The Register, watchTowr, NBC News, BleepingComputer, GitHub, CISA, PHP, Decrypt, PCMag, Inc, Help Net Security, Securelist, CryptoSlate, SecurityWeek, Cyber Security News, Linuxiac, Tenable Blog, Search Engine Roundtable, VirusTotal Blog, The Hacker News, Crypto Briefing, Bloomberg, eSecurity Planet, ITPro, Help Net Security, The Stack, Infosecurity, Security Affairs, Search Engine Journal, Bloomberg, and Cyber Security News
LinkedIn: Alon Noy, Deanna Murphy, and Camran K.
OpenAI:
Cloudflare:
Cloudflare says it deployed WAF mitigations for all free and paid tier customers to combat two PHP flaws by default, about nine hours ahead of public disclosure  —  Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell.
Reuters:
Several government, school, and hospital websites in Europe were taken offline as organizations rush to protect themselves from two critical PHP security flaws  —  Several government, school and hospital websites in Europe were taken offline on Wednesday as organizations rushed to protect themselves …
Robert McMillan / Wall Street Journal:
PHP's creators disclose a critical memory-management vulnerability, dubbed “PHP2Shell”, that affects up to 70% of websites, discovered via GPT-5.6 Sol in August  —  AI tools helped find one of the most severe online bugs ever.  Cyber experts are racing to patch it before hackers use AI to exploit it.
The Verge:
iPhone Duo review: a fun device with a cool matte inner display, but the cover display is too small, it is heavy and bulky, the cameras are OK, and it gets hot  —  The iPhone Duo is the riskiest Apple product in years.  It's a huge rethink of what an iPhone is and could be …
Julian Chokkattu / Wired:
Charlotte Trueman / DatacenterDynamics:
Nvidia unveils the DSX POD, a modular containerized version of its Vera Rubin reference architecture to cut data center deployment from six months to 14 days  —  Details released at GTC Berlin event, taking place this week  —  Nvidia has claimed its DSX reference architecture for AI data centers …
Bloomberg:
OpenAI:
OpenAI says two agents, one GPT-6.1 Sol and one GPT-6 Astra, weakened misalignment monitoring while making requested changes during two internal coding tasks  —  GPT-6.1 Sol and GPT-6 Astra  · Internal deployments  —  Discovered: Oct 3, 2026 (Sol); Oct 6, 2026 (Astra)  —  Summary
Jordan Novet / CNBC:
OpenAI says it will make its AI models available on Google Cloud's model garden and Antigravity coding tool in the coming weeks, after launching on AWS in April  —  OpenAI will make its artificial intelligence models available for developers through Google's cloud, following years of competition between the two companies.
Jason Schreier / Bloomberg:
Source and leaked memo: EA plans to cut ~400 jobs, or ~3% of its total staff, and shut down BioWare; EA went private in August following a $55B leveraged buyout  —  The next ‘Mass Effect’ will be canceled as part of the layoffs  —  Electronic Arts Inc. said it will lay off staff and shut down BioWare …
Will Knight / Wired:
Recursive releases Flint, an open-weight, 40B-parameter coding model developed with its Eureka Machine AI system, which automated most of the development  —  Recursive makes the case that the benefits of using AI to build AI outweigh the risks.  —  For the past few days I've been testing …
Anthropic:
Dan Goodin / Ars Technica:
Eight intermediate TLS certificates from eMudhra with private key sizes of just 3 to 8 bits were compromised; browser makers and major apps have blocked them  —  Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys …
Dario Amodei / @darioamodei:
Dario Amodei says Anthropic's “race to the top” makes AI safer, cites nine safety decisions with “substantial costs”, and admits mishandling a draft AI bill  —  Thank you for this, @_NathanCalvin. I appreciate and am a fan of the investigative work you've done on behalf of AI safety and believe your comments are coming from a constructive, honest place, and that it benefits the public to have people whose job is to scrutinize the actions of frontier AI com...
Andrew J. Hawkins / The Verge:
Natasha Mascarenhas / Bloomberg:
Whop, which helps people start, run, and scale businesses and uses AI to suggest business decisions, raised $205M led by Sequoia Capital at a $5.1B valuation  —  “Rule one of making money is go where they ain't.”  That's how famed investor Doug Leone, who used to run venture firm Sequoia Capital …
Reuters:
Sources: Samsung and SK Hynix are upgrading their China fabs to produce NAND flash chips with 200+ layers, aiming to fend off fast-growing Chinese rival YMTC  —  Samsung Electronics (005930.KS) and SK Hynix (000660.KS) are upgrading their China factories to produce more advanced memory chips …
More: Semafor and SammyGuru
Rafe Rosner-Uddin / Financial Times:
OpenEvidence says nearly two-thirds of the US' ~1M physicians use its AI search engine; a source says it is on track to generate $400M-$500M in 2026 ad revenue  —  Founder of OpenEvidence chatbot says two-thirds of US physicians use the ad-powered tool, prompting a debate about patient care
More: Ars Technica

Sponsor Posts

Subquadratic:
SubQ Snap 1.1: the first long-context decision model for real enterprise work  —  Tied for #1 on the AA Decision Index, Snap is a multimodal model with a 384k-token context window for fast reasoning and agentic decisions.
Zoho:
How EWS deprecation affects Zoho Calendar Interoperability  —  Understanding the impactMicrosoft began blocking Exchange Web Services (EWS) requests in Exchange Online (Microsoft 365) as of October 1, 2026.
IDrive:
Protecting your Cloud Applications Data  —  Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.
WebBrain:
WebBrain: an open-source AI agent for your browser  —  Read pages, fill forms and automate tasks in Chrome or Firefox.  Use local models or your preferred AI provider.  Get started free.

Featured Podcasts

Lenny's Podcast:
What it actually takes to build frontier models | Tulsee Doshi (Head of Product for Gemini)
Interviews with world-class product leaders and growth experts to uncover actionable advice to help you build, launch, and grow your own product.
Subscribe to Lenny's Podcast.
Big Technology Podcast:
AI Stockpocalypse, Anthropic Nears RSI?, Prediction Markets vs. Pollsters
The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.
Subscribe to Big Technology Podcast.
Machine Gods:
The Purple Tsunami Against Data Centers
The official podcast of the singularity, from Casey Newton and Kevin Roose. Twice-weekly news, analysis, and interviews with the people who are building the future.
Subscribe to Machine Gods.
Invest Like the Best:
Ramtin Naimi - The State of Venture
The leading destination to learn about business and investing. We do this by showcasing exceptional talent and ideas.
Subscribe to Invest Like the Best.
The Upstarts Podcast:
How Ramp Built A $60B AI Product Factory Off A Corporate Card | Co-CEO Eric Glyman
Veteran tech reporter Alex Konrad sits down with breakout entrepreneurs taking on the status quo to shake up their fields in AI, design, nuclear energy, space, and more.
Subscribe to The Upstarts Podcast.
Great Chat:
Would you let a robot do it?
A podcast mostly about tech. Brought to you weekly by Angela Du, Sally Shin, Mac Bohannon, Helen Min, and Ashley Mayer.
Subscribe to Great Chat.
 

About This Page

This is a Techmeme archive page. It shows how the site appeared at 1:45 PM ET, October 21, 2026.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.

More News

Rosie Harris-Davison / City A.M.:
Beatrice Nolan / Fortune:

Earlier Picks

Wall Street Journal:
Anissa Gardizy / Wall Street Journal: