Legora is building the agentic operating system for legal work
See how Legora uses OpenAI models, ChatGPT, and Codex to accelerate legal workflows, expand contract analysis, and free lawyers to focus on higher-value work.
openai.com
$ webdevs --week 2026-44
Week 44,2026_
26 Oct – 1 Nov 2026. 58 links on AI, security, web development, and design so far.
$ cat notes/2026-44.md
Notes on week 44
Two "2Shell" bugs made this a patch-everything week. PHP2Shell, a pair of critical remote code execution flaws in PHP (CVE-2026-109618 and CVE-2026-109619), was disclosed on 21 October, and by 26 October it was being exploited in the wild. A day later CISA added it to its catalog of actively exploited vulnerabilities. Also on 26 October, a second critical bug landed: HTTP2Shell (also tracked as Node2Shell and Broccoli2Shell), a memory-corruption flaw in the Brotli decoder built into Node.js, which triggered emergency patches, including Microsoft's for .NET.
What to do
- Update PHP on every server you run, including the ones behind a WAF. Cloudflare shipped WAF rules before the disclosure, but a firewall rule is a stopgap, not a fix.
- Update Node.js and .NET to their patched releases, and check whether any other software you run bundles its own copy of Brotli.
- If a PHP host stayed unpatched after 26 October, check it for signs of compromise.
Read more
- PHP2Shell flaws now exploited in the wild BleepingComputer
- CISA confirms PHP2Shell exploitation BleepingComputer
- Widespread PHP flaw may cause site outages Krebs on Security
- HTTP2Shell Brotli flaw triggers emergency patches BleepingComputer
- Microsoft's emergency .NET patches for Brotli BleepingComputer
The disclosure week, with Cloudflare's WAF rules and Krebs's outage warning, is on the week 43 page.
AI
23 linksOpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. [...]
bleepingcomputer.com
"No human at the helm": Delaware plan would let AI agents run entire businesses
Owners of AI-run firms would evade liability for "reckless" AI, US Rep. Comer says.
arstechnica.com
Anthropic IPO warns its AI could blackmail people, become sentient, end humanity
Seven potential AI nightmares pulled from Anthropic's 93-page "Risk Factor" tome.
arstechnica.com
Raspberry Pi Zero 3W and Pi 4 Model A spotted in device trees
bret.dkdiscuss on hn ↗
Survival LLM: AI assistant and emergency library that runs on your own computer
brangus.iodiscuss on hn ↗
Build specialized multimodal models with LFM3
huggingface.co
Can we trust LLMs to judge whether a research idea is novel?
huggingface.co
DeepMind unveils Genie 4 world model promising more realistic physics and humans
Genie 4 will roll out to developers and Google AI Ultra subscribers soon.
arstechnica.com
Retell uses OpenAI models to help power 100M monthly calls
GPT-6 Astra tops Retell’s voice agent benchmark, while Codex helps it reach a $1.6M annual revenue run rate per employee.
openai.com
This AI billboard might be too ballsy for its own good
I can’t decide if it’s stupid or genius.
creativebloq.com
OpenAI expands partnership with Oracle to bring its apps to ChatGPT
OpenAI and Oracle are expanding their partnership to bring business applications and AI agents into ChatGPT and power new Oracle offerings.
openai.com
There are now 5 inference providers for abliterated DeepSeek
allmodels.iodiscuss on hn ↗
Greptile takes bug detection beyond code review with GPT-6 Astra
How Greptile uses GPT-6 Astra to test user workflows, Daybreak to strengthen security, and Codex to reduce rework.
openai.com
OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing
OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger…
bleepingcomputer.com
Apple releases iOS and macOS 27.2 with new Siri AI features, new Music logo
Included is the ability to limit which applications Siri can directly access.
arstechnica.com
Sebastian Raschka's from-scratch video course on building reasoning models
magazine.sebastianraschka.comdiscuss on hn ↗
Working with academic communities to build scientific understanding
OpenAI shares model results on the Kakeya conjecture, Exponential Time Hypothesis, and quantum chromodynamics—and how researchers can verify and build on them.
openai.com
When an AI Agent Is the Incident, the Identity Record Is the Evidence
A new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used, and that…
bleepingcomputer.com
ChatGPT’s expanding world of work
Explore OpenAI Signals data on 165 work activities across nearly 100 countries, revealing how people use ChatGPT for work and how usage changes over time.
openai.com
How Fanatics and OpenAI streamline the fan experience
Fanatics uses OpenAI to help fans complete their game-day outfits with Shop the Look. Testing across roughly 30,000 MLB products showed 10% higher engagement.
openai.com
How Ultrafast cut incident investigation from hours to minutes at OpenAI
See how OpenAI engineers use Codex Ultrafast to investigate incidents in minutes. Explore faster security analysis, code refactoring, and daily workflows.
openai.com
Introducing GPT-6.1 Terra
Bringing fast and capable computer use to everyone
openai.com
Security
22 linksNefilim and Hive ransomware affiliate gets 70 months in prison
A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses…
bleepingcomputer.com
Japan's GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop…
bleepingcomputer.com
UNM Health ransomware attack disrupts patient care, surgeries
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. [...]
bleepingcomputer.com
Hackers hijack Convertr analytics script to steal payment card data
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout. [...]
bleepingcomputer.com
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that…
bleepingcomputer.com
Warp discloses breach exposing AI agent logs, user telemetry data
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's…
bleepingcomputer.com
Tailscale warns of SSH flaws allowing root privilege escalation
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root…
bleepingcomputer.com
The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest
Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses…
bleepingcomputer.com
Apple backports CoreGraphics zero-day patches to older iPhones
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks…
bleepingcomputer.com
Energy giant ENGIE discloses data breach affecting customers
French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform…
bleepingcomputer.com
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered…
bleepingcomputer.com
How Check Point accelerates vulnerability research with Daybreak
With OpenAI Daybreak, Check Point speeds up the research behind new security protections, enabling its analysts to turn vulnerability intelligence into customer defenses…
openai.com
University of Copenhagen data breach exposes data of 525,000 people
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. [...]
bleepingcomputer.com
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang
A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests. Here is how we addressed the issue.
blog.cloudflare.com
Former pentester used ARTEX AI to steal 8.2 million data records
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting…
bleepingcomputer.com
DreamHost forces password resets in ongoing "incident"
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. [...]
bleepingcomputer.com
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]
bleepingcomputer.com
Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. [...]
bleepingcomputer.com
Chinese man extradited for role in $36 million cryptocurrency scam
A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole…
bleepingcomputer.com
GPT-6.1 Sol helps CodeRabbit strengthen security across complex codebases
CodeRabbit uses GPT-6.1 Sol to investigate security risks across complex codebases. Its security agent helps developers review findings and proposed fixes.
openai.com
Kali Linux 2026.3 released with 6 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and…
bleepingcomputer.com
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...]
bleepingcomputer.com
Web Apps
7 linksCode-execution flaw in UEFI firmware affects most servers on planet Earth
Critical flaw in EDK2 allows attackers to execute code early in the boot process.
arstechnica.com
Introducing the Cloudflare PHP Capture the Flag challenge
We are launching a PHP Capture the Flag challenge integrated with our Bug Bounty program to test our WAF protections. Security researchers are invited to bypass our…
blog.cloudflare.com
What took the Internet offline in Q3 2026
An examination of global Internet disruptions observed by Cloudflare Radar during the third quarter of 2026. This review analyzes how power failures, natural disasters…
blog.cloudflare.com
Type Server Protocol
github.comdiscuss on hn ↗
Nietzschian Debugger
github.comdiscuss on hn ↗
CSS-Tricks has a new owner
css-tricks.comdiscuss on hn ↗
Websites Should Be Printable
brennenputh.mediscuss on hn ↗
Design
6 linksXPPen Magic Pro 13 review: a premium Android drawing tablet for work and play
XPPen’s Magic Pro 13 is an Android art tablet that also works as a desktop pen display, making it genuinely hard to choose between XPPen and Wacom.
creativebloq.com
This 3D artist achieves incredible realism to breath life into striking character designs
Discover the art of Tom Newbury.
creativebloq.com
Vibe genes? Natural(ish) language comes to protein, genome design software
You can apparently now tell AI tools what sort of protein you want them to make.
arstechnica.com
This creative agency’s website is giving me Tumblr 2000s vibes, and I’m here for it
It ditches templates for tarot cards, paper dolls and playlists.
creativebloq.com
Commuters appalled by accidental optical illusion ad
TFL has claimed it’s the work of flyposting.
creativebloq.com
Discover the process and Photoshop brushes behind this fantasy book cover
Fantasy artist Peng Lu reveals all.
creativebloq.com