Inside · A2Simon Willison's Battle Drones is an RTS that syncs multiplayer over sound Inside · A3AI-written prose hides the author and blurs the claims, an essay argues
Today’s forecastPatch storms across the PHP belt, a cold front from the certificate stores, and agents queueing at Walmart's front door while Amazon bolts the back.

The Daily Archit

“All the tech that’s fit to print”Late City Edition
Vol. I · No. 5 Wednesday, October 21, 2026 Price: one HTTP request
The Newsstand · all editions
Image via Wiz
PHP2SHELL

Machine-found PHP flaws open nearly every PHP server to unauthenticated takeover

Wiz calls the bugs among the worst in software history, and new releases for every supported branch shipped on Wednesday.

By the Daily Archit news desk Wiz

Wiz Research has disclosed four memory-safety bugs in PHP's core engine, grouped as CVE-2026-109618 and -109619, that allow unauthenticated remote code execution on almost every PHP release back to 5.4. Application code needn't be vulnerable.

Wiz found them with its Atlas agent plus Gemini and GPT models. Upgrade to 8.5.12 or the matching branch today.

Full story at Wiz →
Image via TechCrunch
AGENTIC COMMERCE

Walmart opens an MCP gateway for shopping agents as Amazon shuts them out

Walmart's Agent Gateway lets approved agents search inventory and buy for customers over MCP without seeing their personal data. Agent Profiles, due next month, give each agent its own account with spending limits or per-purchase approval. Agents that exceed a shopper's intent will be blocked. Amazon, meanwhile, is turning agents away.

TechCrunch
Image via Node.js
NODE.JS

Node.js patches a Brotli heap overflow and three ways to fool TLS hostname checks

Node 26.12.1, 24.22.1 and 22.23.4 fix four high-severity bugs: an out-of-bounds write in the Brotli decoder (CVE-2026-111497), NUL-byte truncation in dns.resolve, and IP spellings with fullwidth digits or leading zeros that defeat checkServerIdentity. The releases also drop the compromised eMudhra intermediates. Upgrade any service that decompresses untrusted input.

Node.js
Image via TechCrunch
BIG TECH

Meta plans a non-voting share class to pay for its AI build-out

Meta will issue non-voting stock as a dividend to existing shareholders. It can then use the shares to raise capital, pay staff and fund acquisitions without diluting Zuckerberg's control. Third-quarter revenue rose 26% to $64B, but costs rose 68%. Ten million people set up Muse agents in about six weeks.

TechCrunch

From the Newsstand see every edition →

The Daily Archit No. 9 · Sunday, October 25, 2026 OPEN-WEIGHT MODELS Moonshot's Kimi K3.1 Pro pulls an open-weight model to within a point of the frontier OpenAI takes frontier model training off the live internetAnthropic hands Agent Skills to the Linux Foundation's Agentic AI FoundationBrotli decoder bug grows from Node2Shell into HTTP2Shell, reaching Python, Bun, Envoy and curl The Daily Archit No. 8 · Saturday, October 24, 2026 LANGUAGES C++26 fails its ISO ballot, leaving a finished standard in limbo Mozilla pulls trust from an eMudhra root as the CA blames social media for missed deadlinesSam Altman says defenders can no longer patch their way out of AI-found bugsAsked to pick midterm candidates, Grok goes Republican and GPT goes Democrat The Daily Archit No. 7 · Friday, October 23, 2026 AI & MEDICINE Microsoft's diagnostic agent beats generalist doctors in a peer-reviewed Science study Go hard-codes distrust of a set of compromised intermediate certificatesCanada's lawful-access bill would let a minister order backdoors into messaging servicesGermany's AfD confirms a 281 GB leak of internal email after its host was hacked The Daily Archit No. 6 · Thursday, October 22, 2026 SUPPLY CHAIN Poisoned LiteLLM release on PyPI stole the keys to the AI stack Railway tells every user to rotate secrets after an attacker reached stored environment variablesAnthropic and Theorem prove 239 fuzz targets crash-free, down to the compiled binaryeMudhra quits the global TLS certificate business after its CA keys proved trivially weak