
Esri ArcGIS: The Critical Vulnerability Wave Hitting the World's Maps
Six critical ArcGIS CVEs in a year — SQLi, auth bypass, SSRF. Attackers tied to a Chinese APT held one deployment for a year.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…

Six critical ArcGIS CVEs in a year — SQLi, auth bypass, SSRF. Attackers tied to a Chinese APT held one deployment for a year.

JFrog patches a CVSS 9.8 auth bypass letting attackers mint admin tokens. Exploited ~4 days after disclosure — here's what happened and the fix.

OpenAI's Astra reportedly uses recurrent depth, an opaque reasoning technique — and safety researchers fear scaling it could end model monitoring.

From a $300M Series A to a $3.2B valuation in five months — AfterQuery is YC's fastest unicorn ever. Expert-reasoning data is the bet.

Claude Fable 5.1 doubles down on long agentic work — 52.6% on Terminal-Bench-Science — and cache reads drop 75%. Mythos 5.1: same model, looser guardrails.

Malaysia spent two years building AI infrastructure on foreign silicon. Now sovereignty is no longer academic — it is a procurement decision with a deadline.

Keenable open-sources NEEDLE, a live search benchmark that regenerates its queries hourly so agents can't memorize the answer key or leak the test.

Steam recovers hacked accounts with honest proof of purchase — receipts, CD keys, payment history. PlayStation, Xbox and Epic make it a fight.

VideoLAN's VLC has passed 7 billion downloads across all platforms, 18 months after crossing 6 billion. Here's why an offline, free player still wins.

Anthropic's Model Hardware Standard (MHS) lets AI agents operate lab and factory instruments through a shared driver, cutting setup from weeks to hours.

Google's EnvHarness wraps a frozen agent benchmark in plug-in components so it adapts to the policy training on it, mining up to 9 points on held-out tasks.

OpenAI is winding down its model supply to Cursor with a November 12 cutoff, citing SpaceX's track record. Here's what developers should do about it.