Inside · A2Block's Dessa is a full-duplex voice model trained on nothing but human speech
Inside · A3Daytona raises $60M at a $1B valuation to give every agent its own computer
Inside · A41,377 Indian government domains still serve revoked eMudhra certificates
The 1M-token model scores 65.7% on Terminal-Bench 4.0, costs $2/$10 per million tokens, and Moonshot says the full weights ship by November 4.
Moonshot AI has released Kimi K3.1 Pro, the first model in its K3.1 series, along with a faster K3.1 Pro Highspeed variant that it says runs two to three times quicker. The company calls it its most capable 3T-class model.
The Agent Skills spec, its name, the GitHub org and agentskills.io are moving to the AAIF, which already hosts MCP. The spec will be maintained by individual engineers from Anthropic, Google, OpenAI and other companies, with versioned releases, a formal proposal process and security guidance for skill authors on the roadmap.
Anthropic
CVE-2026-111497 (CVSS 9.2) is an out-of-bounds write in Brotli 1.0.3 through 1.2.0. A crafted compressed stream can corrupt memory on either side of an HTTP connection. Python apps are exposed even if they never import Brotli, because requests and httpx load it automatically when it is installed, and audit tools may not flag it yet.
Aikido Security
Two unauthenticated RCE bugs in PHP (CVE-2026-109618 and CVE-2026-109619) were first found in 2024 and judged unexploitable until Calif built a working exploit. The PHP Foundation shipped fixes on October 21. Amazon says it saw exploitation about a week earlier, and Palo Alto Networks and Trail of Bits have since reported confirmed compromises.
TechCrunch
LANGUAGES
C++26 fails its ISO ballot, leaving a finished standard in limbo
Mozilla pulls trust from an eMudhra root as the CA blames social media for missed deadlinesSam Altman says defenders can no longer patch their way out of AI-found bugsAsked to pick midterm candidates, Grok goes Republican and GPT goes Democrat
The Daily Archit
No. 2 · Friday, October 23, 2026
AI & MEDICINE
Microsoft's diagnostic agent beats generalist doctors in a peer-reviewed Science study
Go hard-codes distrust of a set of compromised intermediate certificatesCanada's lawful-access bill would let a minister order backdoors into messaging servicesGermany's AfD confirms a 281 GB leak of internal email after its host was hacked
The Daily Archit
No. 1 · Thursday, October 22, 2026
SUPPLY CHAIN
Poisoned LiteLLM release on PyPI stole the keys to the AI stack
Railway tells every user to rotate secrets after an attacker reached stored environment variablesAnthropic and Theorem prove 239 fuzz targets crash-free, down to the compiled binaryeMudhra quits the global TLS certificate business after its CA keys proved trivially weak