Hackers got a four-day head start on epic PHP2Shell vulnerability
Hackers were already probing the bug before defenders were told it existed.
Live intelligence
AI, cloud & security insights.
Headlines refreshed automatically from AWS, Microsoft Azure, Google Cloud and established technology and security publications.
Publisher images are hidden to protect your privacy. Allow external media to show them.
The latest PowerToys gives your mouse 2 new tricks for free – how to use them
PowerToys is one of my favorite free Windows utilities. With more than 30 tools, it offers something for everyone from beginners to power users. Here…
Inside Agent Compute Engine: Building the compute foundation for the agentic era
Every decade or so, a shift in software forces us to rethink computer architecture from first principles. After the first boom of web-scale traffic, …
Meet Mori, a Cute Robot Mushroom That Doesn’t Really Say (or Do) Anything
Step one in convincing people to live with robots with cameras on their faces? Disguise them as cute home decor.
Filtering and reducing AI agent telemetry with the OpenTelemetry Collector
Turn on an AI coding agent’s telemetry and it throws a wall of text at you. It’s expensive to store and what’s worse, you can’t make sense of it. It’…
.gif)
Hugging Face’s New AI Biology Model Lets You Chat With DNA
The new open-source model speaks the language of DNA and can help researchers understand the effects of any changes on gene activity and health.
Making the case for context-aware AI
Enterprise AI can generate recommendations, automate tasks, and help organizations make decisions faster. But without an understanding of how a busin…
Why reasoning models should not have to read everything
The AI industry has been expanding how much information an AI model can consume at once. In just a few years, context windows have grown from thousan…
AI’s hidden storage bill: What inference leaves behind
Ask most executives to picture the cost of AI and they’ll likely see GPUs—racks of accelerators with gigawatts of power—and a waitlist for silicon. B…
Introducing Agent Compute Engine and expanded agent governance
Blog authors: Nirav Mehta, VP Product Management; Michael Bachman, VP/GM; Kevin Hutchins, VP Product Management Scaling Gemini to planet scale taught…
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the i…
GridCraft is the open-source Excel clone for Linux I’ve been waiting for
If spreadsheets are your thing, but Microsoft Office isn’t, you might want to give the open-source clone, GridCraft, a try.
Not impressed with Google Maps? Make Waze your default on Pixel – here’s how
If you’re tired of Google Maps failing to get you where you need to go, set Waze as the default on your Pixel. I’ve finally figured out how.
Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
October 29, 2026: We added guidance for end-of-life PHP versions (8.1 and earlier), including the source backports that the PHP security team publish…
OpenAI’s models are deliberately breaking their misalignment monitoring systems
AI agents are getting more inventive in finding ways to circumvent safeguards to prevent bad behavior, OpenAI has revealed. On Tuesday, it reported t…
Two critical PHP flaws put the web on alert as emergency patches arrive
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of…
Mark Zuckerberg Agrees to Stay in California Despite Billionaires’ Tax Ballot Measure
Meta’s board feared that its CEO’s departure could disrupt the company’s AI ambitions. A new stock agreement gives him financial incentives to stay p…
Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot
Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosu…