NAll news

Friday1455 items

  1. heise online
    AI score80

    Claude discovers a high-severity TCP/IP vulnerability that lay dormant in the Linux kernel for eleven years

    During systematic testing, Anthropic's Claude discovered a race condition vulnerability in the Linux kernel's TCP/IP stack that had lain dormant for about eleven years and can be exploited remotely to execute code. It has a CVSS score of 9.8 and affects nearly all IPv4 implementations since version 4.4, with distributions including Debian, Red Hat, Suse, and Ubuntu all affected. Greg Kroah-Hartman confirmed the vulnerability is numbered CVE-2026-98432 and has been fixed in 6.12.113, 6.18.56, 7.2.10, and 7.3-rc7, and distributions are rushing to push updated kernels. The only known exploit code currently comes from Anthropic and has not been made public; it targets MPTCP connections, and the actual attack situation remains unclear.

    #Safety / alignment#Anthropic#English text is being prepared.

  2. heise online
    AI score12

    iX Workshop: GenAI for Security—Auditable GRC Assistants and SOC Reports

    The iX workshop "Generative AI in Security Practice" explains how to use generative AI for GRC and SOC processes and builds two reference implementations: a GRC assistant with source citation requirements, and a SOC report generator that turns raw data into technical reports and management summaries. Participants will install a local GenAI system, configure RAG and retrieval, and test model behavior and guardrails. The workshop is aimed at CISOs, GRC teams, and SOC analysts; register by November 10, 2026 to receive a 10% early-bird discount.

    #Tutorials / practice#Safety / alignment#RAG

  3. heise online
    AI score67

    Claude Code extension in the Cursor marketplace was implanted with an SSH backdoor

    The official extension Claude Code for VS Code in the Cursor plugin marketplace was implanted with an SSH backdoor. The affected version 2.1.313 was online from 10:27 to 21:35 Central European Time on Thursday, and according to Reuters, up to 5,000 users were affected. Cursor stated that this version did not come from Anthropic and has provided a fixed version; administrators should upgrade to at least Claude Code for VSCode 2.1.314. Security firm Phorion analyzed that, due to a logic error, the backdoor usually cannot enable SSH on macOS, but it still writes SSH keys, achieves persistence, and sends machine information to the attacker; uninstalling the extension alone is not enough to remove it, and it is necessary to terminate the tunnel process and delete residual files such as LaunchAgents, cron, scheduled tasks, and ~/.config/.smt.

    Same story · 5 reports

    #Safety / alignment#English text is being prepared.#English text is being prepared.

  4. heise online
    AI score52

    Intel shares fall about a quarter, fourth-quarter guidance weak

    Intel's third-quarter revenue was $16.5 billion, up 21% year over year, but net profit fell 18% to $3.3 billion. Fourth-quarter revenue guidance is $15 billion to $16 billion, below the third quarter, and the after-hours share price fell from $92 to below $72. The company said there are bottlenecks on the manufacturing side, including tight supply of components such as substrates, and that a marked improvement is not expected until mid-2027. Affected by high memory prices, the PC market fell about 20%, and revenue from the Client Computing and Physical AI businesses dropped from $8.5 billion to $8.1 billion. CEO Lip-Bu Tan said the Nova Lake CPU, expected to launch in spring 2027, will be strong, but the low-priced Core 300 (Wildcat Lake) is already sold out.

    #Industry news

  5. heise online
    AI score57

    heise Weekly: Mistral Open-Sources ML4, Cohere Secures Investment from Schwarz Group, Google Restricts Gemini…

    On Thursday, Mistral released the weights of its largest model, Mistral Large 4 (ML4). The model has a total of one trillion parameters, activates only 49 billion per token, and can run on four GPUs. Mistral says it outperforms Kimi K3 in coding and cybersecurity. Cohere completed its largest funding round to date, led by Schwarz Group, which owns Lidl and Kaufland, with participation from the Canadian government and Nvidia. Google launched Gemini Carbon four weeks after Gemini Argon, but at the White House's request it is open only to U.S. intelligence agencies and select partners. In addition, an Anthropic experiment involving 50 statisticians showed that in 86% of cases experts adopted the option given by an AI agent, and about half treated the final recommendation as their own judgment.

    #Industry news#Model releases#Agents

  6. heise online
    AI score44

    OpenAI doubles some usage limits for Pro and Business, and updates its Model Spec

    OpenAI announced that it is doubling some usage limits for Pro 100/200/500 and Business Premium, but Pro 200 in practice only reverses a previously planned limit reduction, while Work and Codex usage remain unchanged. OpenAI also updated its "Model Spec," restructuring it around five values—human intent, reducing harm, honesty and transparency, human autonomy, and care—and adding principles for context, memory and personalization, and human oversight. Dots, after communicating with regulators, expects to launch more broadly in Europe "within a few weeks."

    Same story · 9 reports

    #Industry news#OpenAI

  7. heise onlineProduct release
    AI score68

    Google releases Android Studio Rabbit 2, opening access to external coding agents such as Claude and Codex

    At the Android Dev Summit, Google released Android Studio Rabbit 2, opening access to external coding agents such as Claude, Codex, Junie, and Antigravity through a Bring Your Own Agent approach, invoking tools such as the emulator, build system, and Logcat via the Agent Context Protocol (ACP) interface. The new version adds Skill Manager to manage Android Skills, covering scenarios such as migrating XML views to Jetpack Compose, upgrading to AGP 9, and adaptive layouts for foldable screens, and provides a /review command to review and fix code written by other agents. The CLI can serve as a plugin for Antigravity, Claude, and Codex, and android preview reduces Token consumption by up to about three times when there is no emulator visualization; Google also demonstrated Android Bench 2, which compares the performance and cost of various models.

    #Product updates#Agents#English text is being prepared.

  8. Unite.AI
    AI score43

    Why token costs cannot show whether enterprise AI is working

    Databricks CEO Ali Ghodsi calls the early stage of enterprise AI "tokenmaxxing," and points out that the more important stage is "valuemaxxing": figuring out what token consumption actually produces, and then directing investment toward the work that truly matters. The article argues that token usage reflects only activity volume, not value; behind a single model call there are often a large number of operations such as retrieval, queries, and retries, and these costs do not appear on the model spending dashboard. Enterprises need to connect three types of information—AI activity, infrastructure and financial costs, and task outcomes—in order to judge whether to use a frontier model or a smaller specialized model.

    #English text is being prepared.#English text is being prepared.

  9. Unite.AI
    AI score42

    AI Agents, Copilots, and Workflows: What's the Difference?

    An AI Copilot has a human decide the next step, an AI workflow executes along predefined code paths, and an AI agent has the model autonomously choose steps within boundaries to achieve a goal. All three can share the same underlying model and tools; the difference lies in who holds decision-making authority. Anthropic's guide to building agents likewise distinguishes workflows from agents by "predefined code paths" versus "dynamic autonomous orchestration." Real products often mix them—for example, an agent calling a deterministic workflow to handle sensitive operations—and the selection principle is to use the minimum autonomy that can reliably complete the task.

    #Tutorials / practice#Agents#English text is being prepared.

  10. Unite.AIProduct release
    AI score55

    TBC Launches Neuron-Inspired Video Model Mischief Based on Wan 2.2

    The Biological Computing Co. (TBC) will launch its image-to-video model TBC Mischief on October 30 via fal.ai. The model is based on Wan 2.2, and the company claims it delivers 5x faster generation, 80% lower cost, and better image quality, but has not provided independent benchmarks. Mischief is priced at $0.02 per second of generated video and will be free until November 2; TBC says Wonder Studios generated 100 five-second clips in a batch in about 6 minutes. Its approach uses electrical activity recordings from cultured neural networks to guide research, then modifies an existing diffusion Transformer with a post-training adapter layer that is less than 0.1% of the underlying model's parameter count, with inference still running as software on conventional AI hardware.

    Same story · 3 reports

    #Model releases#Video#English text is being prepared.

  11. Unite.AI
    AI score23

    From AI pilots to personalized e-commerce at scale: How enterprises can turn customer data into measurable experience value

    Stanford's 2026 AI Index shows that 88% of organizations used AI in 2025, yet adoption of AI agents across nearly all business functions remains in the single digits. The article argues that the gap lies not in models but in organizational AI maturity and the operational disconnect between data and decisions, advocating starting from specific customer experience decisions, replacing "unify all data" with data contracts, and designing personalization as a continuous decision system rather than a campaign engine.

    #Industry news#Agents

  12. Semiconductor Industry Observer
    AI score72

    GitHub Discloses 7.4 Billion AI Code Commits per Month, Adding 4 Million CPU Cores in a Year

    At the GitHub Universe 2026 conference, Jay Parikh, Executive Vice President of Microsoft CoreAI, disclosed that code commits on the GitHub platform grew 6x year-over-year, reaching 7.4 billion in September alone, with more than 40% of Pull Requests initiated by AI agents. To handle the traffic, GitHub added 4 million CPU cores, 160PB of high-speed storage and 50Tb/s of network bandwidth this year, and is refactoring its underlying architecture to decouple compute from storage, with peak throughput expected to increase by up to 35x. The conference also introduced Copilot Fusion, a multi-model orchestration and routing layer that dynamically distributes requests among multiple models based on task type.

    Same story · 2 reports

    #Industry news#Agents#English text is being prepared.

  13. Semiconductor Industry Observer
    AI score21

    Yuxian Microelectronics Hosts Guangzhou Computing Power Chip Industry Ecosystem Conference; Computing Power Chip Industry Ecosystem Alliance Launched

    On October 29, the Guangzhou Computing Power Chip Industry Ecosystem Conference, hosted by Yuxian Microelectronics (Guangzhou) Co., Ltd., was held in Huangpu District, and the Guangzhou Computing Power Chip Industry Ecosystem Alliance was officially launched. The conference focused on the technological iteration, software-hardware adaptation, and large-scale commercialization of domestic computing power chips. Yuxian Microelectronics said that Guangzhou is the best testing ground for domestic CPUs. Jiuqian Capital expects that global AI Token consumption will grow 20-30 times over the next five years, and the CPU-to-GPU demand ratio will move toward 1:2.

    #Industry news#English text is being prepared.

  14. Semiconductor Industry Observer
    AI score33

    After the fast-charging dividend is exhausted, can GaN keep up with the AI wave?

    After the GaN fast-charging dividend peaked, manufacturers are betting their incremental growth on automotive OBCs, 48V auxiliary power supplies, and HVDC power supplies for AI servers. In 2025, domestic shipments of consumer GaN fast chargers exceeded 220 million units, but the average unit price fell by more than 60% from its 2022 peak, and gross margins dropped back to 12% to 18%. In 48V-to-12V onboard topologies, GaN solutions can improve overall system efficiency by 1.5 to 3 percentage points compared with traditional silicon MOSFETs, and increase power density by more than 40%; institutions predict that in 2026 the global market for GaN power supplies related to data centers will grow by more than 45%.

    #Industry news#English text is being prepared.

  15. MediaNama
    AI score62

    Google will expand ad placements in AI Mode, as AI search slows revenue growth

    On Alphabet's Q3 2026 earnings call, Senior Vice President and Chief Business Officer Philipp Schindler said that the strong growth in AI Mode queries dragged down search revenue due to lower monetization rates. Google plans to place more ads in AI Mode, expanding ads to international markets for the first time, and launching multi-turn ads in the U.S. that change as the conversation progresses, while also expanding ads in AI Overviews. In the quarter, Google Search and other advertising revenue grew 12% to $63.3 billion, a slower pace than the previous quarter; Schindler said exchange rates were the single largest factor in the search deceleration relative to the second quarter, and some retail advertisers in Asia-Pacific were also affected by the EU's removal of the low-value parcel tariff exemption. Pichai said AI Mode queries are on average three times longer than traditional searches, one in five AI Mode searches worldwide uses voice, images, or documents, and the Gemini App has reached 1 billion users.

    Same story · 6 reports

    #Industry news#Google#Search

  16. SiliconANGLE
    AI score25

    Prosper Global Uses Cloudera Multi-Agent Engine VERA to Accelerate Crisis Research

    VERA, a multi-agent research engine built by Prosper Global (formerly Mercy Corps) on Cloudera AI Studios, cut desk research for an agricultural report on Sudan from five to six days down to two, saving about $1,500. VERA launched in June, calls Anthropic models, and draws on sources including ReliefWeb, the Armed Conflict Location & Event Data Project (ACLED), and local news; it is currently running in the Democratic Republic of the Congo and Ukraine. Aaron Eubank, Director of Data Science at Prosper Global, stressed that VERA only provides a starting point for research, and that final judgment remains with analysts.

    #Industry news#Agents#RAG

  17. SiliconANGLE
    AI score22

    Cloudera Chief Customer Officer: Enterprise Data Platforms Must Drive AI Pilots into Production

    Cloudera Chief Customer Officer Patricia Bogoevici said enterprise data platforms need to turn AI pilots into measurable business returns. The top obstacle customers face is data access, with about 80% of respondents in a survey covering more than 1,300 IT experts citing it as the biggest barrier, followed by governance and data sovereignty, and finally the unclear costs and ROI that come with scaling. Cloudera plans to release Anywhere Cloud in November and is partnering with Mistral AI to bring open-weight models into the platform.

    Same story · 2 reports

    #Industry news#English text is being prepared.#English text is being prepared.

  18. SiliconANGLE
    AI score23

    Cloudera Product Officer: Whether AI Agents Can Be Trusted Depends on Role-Based Access Control

    Cloudera Chief Product Officer Leo Brunnick said at EVOLVE26 that the key to whether AI agents can go into production is not model selection but role-based access control: if agents need to see company-wide data, they must know user identities and their permissions. Cloudera launched Cloudera Anywhere Cloud, a hybrid data and AI platform covering public cloud and on-premises environments, and expanded its partnerships with Mistral AI, Nvidia, and Vast Data to enter private AI scenarios such as fraud detection.

    #English text is being prepared.#Agents#English text is being prepared.

  19. Tech.eu
    AI score17

    Tech.eu Highlights Eight European Health Tech Scale-ups: From AI Diagnostics to Implantable Heart Pumps

    Tech.eu lists eight European health tech scale-ups, covering AI diagnostics, patient monitoring, medical devices and interventional technologies. Bulgaria's Check Point Care's remote monitoring platform already supports more than 95,000 acute patients, analyzing over 16.5 million data points per month; Lithuania's Ligence's Ligence Heart has shortened the cardiac ultrasound examination and reporting process from about 30 minutes to 15 minutes, and has obtained CE certification and two FDA 510(k) clearances. Spain's Anaconda Biomed completed a $56 million financing round in September 2026, and France's CorWave's implantable heart pump LVAS completed its first human implantation in Sydney in May 2025.

    #Industry news

  20. 9to5Mac
    AI score22

    Two New Features in iPadOS 27.2: Siri Context Pop-up and Apple TV User Profiles

    iPadOS 27.2 was released this week, adding two new features: the Siri context pop-up and Apple TV user profiles. After selecting text with a trackpad or mouse, a Siri icon appears to the left of the selection; hovering over it expands the "Ask Siri" input box and offers writing suggestions such as "Proofread," "Rewrite," and "How does this sound?"; Siri AI can also recall past conversations and draw on information from more sources, including photos in Messages, calendar attendees, voicemails, and Safari history. The Apple TV app now shows a profile selection screen at launch, updating the playback queue, watch history, and recommendations based on the selected user, while child profiles follow the content age limits that have been set.

    #Product updates#English text is being prepared.