2026-10-23

AIHOT 日报 · 2026-10-23 — AI 挖出潜伏十几年的 PHP 底层漏洞，PHP2Shell 事件全景复盘

作者复盘 PHP2Shell 事件：两个 CVSS 满分定为 9.2 分的 PHP 远程代码执行漏洞（CVE-2026-109618 和 CVE-2026-109619）在补丁发布前泄露，攻击演示视频外流，多国政府网站预防性下线，OpenAI 认领漏洞由 GPT-5.6 Sol 辅助发现。 产品发布/更新 OpenAI 正式发布 Decisions API，面向低延迟低成本小决策 Claude 网页、桌面和移动端将默认启用 auto mode Replit 发布 Monitoring Agent，为应用提供可自动修复并部署的值班智能体 行业动态 AI 挖出潜伏十几年的 PHP 底层漏洞，PHP2Shell 事件全景复盘 Bloomberg 报道 DeepSeek 新一轮融资约 150 亿美元 WSJ：马斯克希望以 AI 为核心推动 SpaceX 与 Tesla 合并 Anthropic 将 Agent Skills 开放标准捐赠给 Linux Foundation 旗下 Agentic AI Foundation Anthropic 股权表内幕：风投迟到多年，如今无人持股超 2% Wiz 披露 ARTEX 智能体被 Storm-0940 用于攻击 IT 和软件厂商 论文研究 Microsoft AI 发布 SDBench 基准与 MAI-DxO 诊断系统，登 Science METR 与 Redwood Research 红队测试 OpenAI 内部智能体监控系统，发现多个漏洞 Anthropic 用 Claude 对 123 个开源库完成汇编级形式化安全证明 via AIHOT · https://aihot.news/daily/2026-10-23

Quoting Armin Ronacher

As fun as AI is, we built so much bad software over the last 30 years, and now the universe is punishing us for our sins. — Armin Ronacher Tags: security , generative-ai , armin-ronacher , ai , ai-security-research , llms

Why AI Compute Comes in Rectangles — Erik Bernhardsson, Modal CEO

Elastic GPUs, sandbox growth, and the economics of the agent cloud

You are the Team — Anekha Sokhal, Moshi

How Moshi turns market data into actionable insights, and why AI tools have to fit the trader’s workflow.

DE STAAT - FREEDOM (Official Music Video)

DE STAAT - FREEDOM (Official Music Video) OK well this is a first for me... at 00:44 in this new music video by Dutch alternative rock band De Staat : The visual effects are credited to Matties Grooten of Fake it or Leave it . Via flir on Hacker News Tags: music , ai , generative-ai , pelican-riding-a-bicycle

Donating Agent Skills to the Agentic AI Foundation

The making of Claude Code

Project Deal: our Claude-run marketplace experiment

The first AI-planned drive on Mars

Preparing for the 2026 US midterms

Anthropic opens Singapore office and signs MOU with the Government of Singapore

Left alone with nothing to do, AI agents started playing

MIT researchers marooned 13 AIs on a virtual island, and they responded by inventing games, mourning a lost ring and, eventually, getting better at their jobs.

Rivian buys world model startup to accelerate self-driving ambitions

Third Dimension's technology uses AI to match the physical world, which when combined with Rivian's reams of data could turn into a valuable simulator.

Meta’s AI could still scrape news sites, legal experts say

Meta has tweaked its business terms to remove language suggesting that it could freely train its AI models on news sites, like The Verge - but legal experts say these changes aren't enough to address their concerns. "This does nothing to restrict the 'associated with your products or services' [language] that would let Meta scrape […]

Palmer Luckey Made a Genetically Modified Military Dog Startup

Warhound came out of stealth on Wednesday with $200 million in funding and a mission to create “elite working dogs” equipped with "advanced body armor."

Canva’s first AI image model plans designs before generating them

Canva is diving even deeper into AI with the launch of an image generation model that competes directly with those from OpenAI, Microsoft, and Google. The model, called Canva Craft, uses a two-stage architecture that allows it to plan a design before generating an image, allowing for "greater precision, consistency and control," according to an […]

1Password launches a way for AI agents to log in on your behalf without seeing your password

The new feature allows agents to log into a customer's personal accounts while still protecting the private credentials that secure those accounts.

Canva releases its first image generation model

Canva is making its new image model available to all users, promising better, more customizable performance at lower costs.

OpenAI makes its Jev competitor widely available as decision model competition heats up

OpenAI is launching its decision model to the world. Can it compete with the original Jev?

Former OpenAI science lead launches Warp Science to automate wet labs with robots

Wearing cameras and sensor gloves, the startup’s human chemists will train robots to perform various lab tasks.

Save $150 on the Apple Mac Mini M4, but There’s a Catch

Apple’s Mac Mini M4 is one of the best mini computers you can buy, and it’s $150 off. While it’s a good deal on a new, older-generation model, it’s more expensive than it was at launch.

8 Things to Know About the iPhone Duo

Did you manage to score Apple’s first folding phone on launch day? Are you still mulling it over? Here are a few things to keep in mind.

The Social Society Helping Women Join the AI Boom

WIRED spoke with the founders of the Aged Intelligence Society, a fast-growing events startup that brings women together to “solve midlife problems using frontier tools.”

Hugging Face’s New AI Biology Model Lets You Chat With DNA

The new open-source model speaks the language of DNA and can help researchers understand the effects of any changes on gene activity and health.

Why Engineers Should Brave Capitol Hill

When San Antonio–based software engineer Nikhil Jathar first went to Washington, D.C., to advocate for federal support for technology education and research funding, he was in awe of the opportunity. It was spring of 2025, not long after Jathar settled in the United States from India, when he got an invitation to join the annual Congressional Visits Day organized by IEEE-USA . “My first reaction was, ‘Wow, I get to visit Congress,’ ” says Jathar, CTO of AvanSaber , a business software company he cofounded in 2014. At the time, he did not have a specific lobbying position on behalf of the company. But he was intrigued by the invitation—which goes out to all U.S. IEEE members—and as he read more about congressional visits, his motivation deepened. He realized: “I need to try this. I want to

Best Dyson Week Deals (2026): Dyson V15 Detect, Dyson Airwrap

Dyson’s sale event is happening now, and you can save up to $300 on vacuums, hair tools, and more.

Southeast Asia’s Haze Lands on Malaysia’s Already Flat Tourism Year

Death Toll From Europe’s Extreme Summer Heat Estimated At More Than 50,000

Accor Builds Caution Into Outlook Over France Unrest and Middle East

Thailand's Andaman coast

Japan's kitchens, temples and hot springs

Iceland's south coast by car

East Africa in 24 days, Kilimanjaro to Zanzibar

Bali, temples to turquoise

Iceland under the aurora

泰国考虑收税，越南试行免签：谁更需要游客？ 两国打起不同的算盘 2 天前 评论

Nigeria and Kenya Ebola patients may have crossed paths at Uganda airport, officials say

Officials say they both travelled through Entebbe International Airport on 3 October.

Race to update services' computer systems after cyber-security flaw found

Websites were taken offline after the developers of programming language PHP said "critical vulnerabilities" had been discovered.

Ukraine hit by strikes after Russia agrees to new peace talks

The three waves of Russian missiles were launched at hours after Russia said it was "ready in principle" to resume peace talks with the US and Ukraine.

Ukraine says Starlink still restricted after Trump says limits lifted

Ukraine relies on Starlink for a range of military uses - its owner Elon Musk has repeatedly denied restricting access.

Hundreds of flights cancelled as Typhoon Champi shuts Taiwan

One person has died after being swept away by waves in Taiwan's Liuqiu island, authorities say.

Hospitals deliberately targeted by Sudan's RSF fighters, BBC finds

The UN human rights chief Volker Türk says the multiple attacks may amount to war crimes.

Anna Moneymaker/Getty Images

Mahmoud Illean/AP

European, Middle East ministers in Istanbul for talks over Hormuz, security

Ultra-Orthodox conscription debate ignites Israel’s election battleground

US tech stocks tumble as investors fret over AI spending

Venezuelans demand elections in first national protest in nearly two years

Israel preparing full lockdown of occupied West Bank after Hebron gunfight

Grenade exercise sparked deadly fire at Canada military base, army says

Washington Post journalist says attack by Israeli West Bank settlers has only ‘strengthened’ her resolve

Design as a unifying language: Arsh Raziuddin on how her World Cup identity united NYC

Designer, illustrator and creative director Arsh Raziuddin gives the New York Nicer Tuesday’s crowd an look behind the curtain of her career to date, demonstrating how her background in editorial and book cover design shaped her approach to image making and how all her work – particularly her identity for Mamdani’s NYC World Cup campaign – has been about using the power of design to build community and common ground.

Bhutan: the last place

What happened when people in Bhutan, the last country on Earth without television, were allowed to watch it in 1999? - by Aeon Video Watch on Aeon