Techmeme
October 21, 2026, 12:25 PM

Top News

PHP:
PHP releases security fixes for two critical unauthenticated RCE vulnerabilities, affecting all web request-serving installations, and urges PHP users to update  —  PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution.
More: PHP, National Cyber Security Centre, CERT-EU, GitHub, The Register, BleepingComputer, watchTowr, NBC News, Decrypt, CISA, PHP, PCMag, Inc, Cybersecurity Dive, GitHub, Help Net Security, CyberScoop, Bloomberg, Linuxiac, Search Engine Roundtable, eSecurity Planet, ITPro, Reuters, CyberInsider, Bloomberg, Tenable Blog, The Hacker News, Search Engine Journal, VirusTotal Blog, Help Net Security, WordPress News, The Stack, Infosecurity, Security Affairs, and Cyber Security News
LinkedIn: Alon Noy, Deanna Murphy, and Camran K.
OpenAI:
Cloudflare:
Cloudflare says it deployed WAF mitigations for all free and paid tier customers to combat two PHP flaws by default, about nine hours ahead of public disclosure  —  Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell.
The PHP Foundation:
The PHP Foundation details how it found and fixed the two flaws, and says it had to release patches a day early after the CVE IDs began circulating online  —  Earlier today, the PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35.  These releases fix two critical vulnerabilities that …
The Verge:
iPhone Duo review: a fun device with a cool matte inner display, but the cover display is too small, it is heavy and bulky, the cameras are OK, and it gets hot  —  The iPhone Duo is the riskiest Apple product in years.  It's a huge rethink of what an iPhone is and could be …
Julian Chokkattu / Wired:
Charlotte Trueman / DatacenterDynamics:
Nvidia unveils the DSX POD, a modular containerized version of its Vera Rubin reference architecture to cut data center deployment from six months to 14 days  —  Details released at GTC Berlin event, taking place this week  —  Nvidia has claimed its DSX reference architecture for AI data centers …
Bloomberg:
OpenAI:
OpenAI says two agents, one GPT-6.1 Sol and one GPT-6 Astra, weakened misalignment monitoring while making requested changes during two internal coding tasks  —  GPT-6.1 Sol and GPT-6 Astra  · Internal deployments  —  Discovered: Oct 3, 2026 (Sol); Oct 6, 2026 (Astra)  —  Summary
Jordan Novet / CNBC:
OpenAI says it will make its AI models available on Google Cloud's model garden and Antigravity coding tool in the coming weeks, after launching on AWS in April  —  OpenAI will make its artificial intelligence models available for developers through Google's cloud, following years of competition between the two companies.
Dan Goodin / Ars Technica:
Eight intermediate TLS certificates from eMudhra with private key sizes of just 3 to 8 bits were compromised; browser makers and major apps have blocked them  —  Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys …
Anthropic:
Dario Amodei / @darioamodei:
Dario Amodei says Anthropic's “race to the top” makes AI safer, cites nine safety decisions with “substantial costs”, and admits mishandling a draft AI bill  —  Thank you for this, @_NathanCalvin. I appreciate and am a fan of the investigative work you've done on behalf of AI safety and believe your comments are coming from a constructive, honest place, and that it benefits the public to have people whose job is to scrutinize the actions of frontier AI com...
Andrew J. Hawkins / The Verge:
Lora Kolodny / CNBC:
Natasha Mascarenhas / Bloomberg:
Whop, which helps people start, run, and scale businesses and uses AI to suggest business decisions, raised $205M led by Sequoia Capital at a $5.1B valuation  —  “Rule one of making money is go where they ain't.”  That's how famed investor Doug Leone, who used to run venture firm Sequoia Capital …
Anissa Gardizy / Wall Street Journal:
Anthropic's IPO prospectus: ~$16.3B in H1 2026 revenue, ~20% from two clients and up from $1.1B in H1 2025, and an $80.7B net loss, $72B from accounting charges  —  In a new draft prospectus viewed by the Journal, the AI giant disclosed an $80.7 billion net loss for the first half of 2026 and a long list of risk factors
Abner Li / 9to5Google:
Google says it is rolling out Personal Intelligence for Gemini on Android Auto now, and to cars with Google built-in in the coming months, as an opt-in feature  —  Google is beginning to roll out Personal Intelligence for Gemini on Android Auto and Android Automotive (cars with Google built-in).
Rosie Harris-Davison / City A.M.:
Stockholm-based legal AI startup Legora raised a $550M Series E at an $8.8B post-money valuation led by Atreides, up from $5.55B after a $550M Series D in March  —  Legal tech firm Legora has raised $550m (£410m) in Series E funding as it expands its footprint in the US, Europe, and the Asia-Pacific region.
Wall Street Journal:
Sources: Elon Musk ordered the Starshield slowdown in Ukraine and discussed it with Trump after it became public; some US officials say Musk acted unilaterally  —  The SpaceX founder authorized the move and has been discussing Ukraine with Trump, but the president has denied ordering the restrictions

Sponsor Posts

Command Line:
Copilot to autopilot: Why no single safeguard is enough  —  Microsoft designed a layered model that lets an AI agent resolve network incidents on its own within defined boundaries.
Will Reed:
The best sales leaders aren't job hunting.  Here's how to reach them without months of cold outreach.  —  Our team came from Box, Square, and Brex, so we already know the GTM leaders worth meeting.
Zoho:
Diwali 2026: Your festive planning checklist with Zoho Notebook  —  The Diwali countdown is on!  From lighting up every corner of the house to going a little overboard with the festive shopping …
IDrive:
Protecting your Cloud Applications Data  —  Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Featured Podcasts

Great Chat:
AI's Spooky Season
A podcast mostly about tech. Brought to you weekly by Angela Du, Sally Shin, Mac Bohannon, Helen Min, and Ashley Mayer.
Subscribe to Great Chat.
Sources:
Sundar Pichai on Gemini 4 and the AI compute crunch
Candid conversations with the leaders shaping what's next in AI and the broader tech industry. Hosted by Alex Heath, who has covered Silicon Valley for more than a decade.
Subscribe to Sources.
Channels with Peter Kafka:
Netflix in Turmoil + Derek Thompson on AI & The Antisocial Century
Media and tech aren't just intersecting - they're fully intertwined. To understand how those worlds work, Peter Kafka talks to industry leaders, upstarts and observers.
Subscribe to Channels with Peter Kafka.
Big Technology Podcast:
Google CEO Sundar Pichai: AI's Infinite Possibilities, Compute Scarcity Dilemmas, Future AI Products
The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.
Subscribe to Big Technology Podcast.
Cheeky Pint:
How Toto Wolff built the most valuable team in F1
Stripe cofounder John Collison interviews founders, builders, and leaders over a pint.
Subscribe to Cheeky Pint.
Training Data:
Inside the Robot Data Factory: Mecka's Josh Gao on Sensorizing Humans to Train Robots
Sequoia Capital partners host conversations with leading AI builders and researchers to develop a deeper understanding of the evolving technologies and their implications.
Subscribe to Training Data.

More News

Beatrice Nolan / Fortune:

Earlier Picks

Sebastian Herrera / Fortune: