Inside · A21Password lets agents log in for you without ever seeing the password
Inside · A3Blacksmith becomes a unicorn as AI-written code strains CI
Inside · A4China-aligned hackers turned a ConnectWise breach into access at thousands of firms
Version 1.107.0 shipped a credential stealer and an hourly backdoor through the project's own release pipeline.
For about two hours on October 21, LiteLLM 1.107.0 on PyPI and its Docker images carried code that harvested SSH keys, cloud and CI secrets, and LLM provider keys from every Python process.
The upstream source was clean. Anyone who installed it should treat the host as compromised and rotate everything.
Working with Theorem, Anthropic had Claude turn OSS-Fuzz harnesses into Rocq proofs about RISC-V binaries across 123 libraries: about 180 million lines in total. Along the way it found hundreds of bugs, some beyond a fuzzer's reach. Formal verification at this scale no longer looks like a research stunt.
Anthropic
Days after researchers showed eight eMudhra intermediates used private keys as small as single-digit numbers, its board withdrew from public TLS. The company says the business made up about 1% of revenue. Revocation services will run until every issued certificate expires.
eMudhra
Duet sends a morning briefing, drafts next steps, and handles multi-step jobs such as scheduling or building dashboards. It asks for sign-off before sensitive steps like sending messages or payments. It is a waitlisted research preview for US Pro and Max subscribers on iOS, Android and the web.
TechCrunch
OPEN-WEIGHT MODELS
Moonshot's Kimi K3.1 Pro pulls an open-weight model to within a point of the frontier
OpenAI takes frontier model training off the live internetAnthropic hands Agent Skills to the Linux Foundation's Agentic AI FoundationBrotli decoder bug grows from Node2Shell into HTTP2Shell, reaching Python, Bun, Envoy and curl
The Daily Archit
No. 8 · Saturday, October 24, 2026
LANGUAGES
C++26 fails its ISO ballot, leaving a finished standard in limbo
Mozilla pulls trust from an eMudhra root as the CA blames social media for missed deadlinesSam Altman says defenders can no longer patch their way out of AI-found bugsAsked to pick midterm candidates, Grok goes Republican and GPT goes Democrat
The Daily Archit
No. 7 · Friday, October 23, 2026
AI & MEDICINE
Microsoft's diagnostic agent beats generalist doctors in a peer-reviewed Science study
Go hard-codes distrust of a set of compromised intermediate certificatesCanada's lawful-access bill would let a minister order backdoors into messaging servicesGermany's AfD confirms a 281 GB leak of internal email after its host was hacked
The Daily Archit
No. 5 · Wednesday, October 21, 2026
PHP2SHELL
Machine-found PHP flaws open nearly every PHP server to unauthenticated takeover
OpenAI's Patch the Planet effort turns agent-found bugs into a coordinated industry fixWalmart opens an MCP gateway for shopping agents as Amazon shuts them outNode.js patches a Brotli heap overflow and three ways to fool TLS hostname checks