Google’s Agent Sandbox Holds One Certificate and Nothing Else
Google's Agent Compute Engine gives each AI agent a microVM with no stored keys, no network card and no metadata server. One certificate is all it holds.
A CVSS 10 in GitLab That GitLab Never Wrote
An integer overflow in Ruby's regex engine gives GitLab CVE-2026-110264 unauthenticated code execution. Every release back to 7.0 is affected.
A Twelve Byte Hook Ran Before Your Code Did
LiteLLM 1.107.0 shipped a credential stealer in three files that ran on any Python start. Here is what it took and what to rotate.
llm-d Put a Fair Queue in Front of the GPUs
llm-d 1.0 ships flow control, a v1 router API and rolling prefill and decode upgrades. The queue is the feature and config is the migration.
Nscale Wants $30bn. Investors Are Offering Half of It.
The Nscale IPO is being repriced against a filing that shows 5.4 percent of contracted GPU capacity actually running.
Trainium Is a PyTorch Device Now. The Shapes Still Cost You.
TorchNeuron makes Trainium a standard PyTorch device. Static shapes and missing operators are where the porting cost went.
The Shared Key Was the Exposed One, and the Team Paid the Bill
Shared Console keys were the ones exposed in the OpenCode breach, not local CLI keys. Rotation stops the bill but not the damage done.
A Coal Plant’s Switchyard Is Why the Reactors Can Be Built There
Amazon funds 960 MW of reactors at a retired Indiana coal site that already had a grid connection. The investment decision is still ahead.
A 501B Model Fits on Four GPUs, and One Long Context Costs 36 GiB
Reflection's Beam fits on four GPUs once quantized. The 36 GiB one long context reserves is what actually sets capacity.
One Stolen App Secret, 162 Tenants, and No Sign-In to Challenge
One stolen app secret reached 162 Microsoft 365 tenants with no user sign-in to challenge. Here is what to audit.