Nvidia is in early talks to deepen its investment in Reflection AI, in which it has put $800m, or to buy it, the Financial Times reported. One route, an acqui-hire, could avoid a lengthy regulatory review. Neither company had commented when Reuters published.
The team behind the Deno JavaScript runtime is joining Cloudflare to make its Workers platform easier to self-host. Deno said it will end development of the runtime after a year, shut Deno Deploy in six months and keep the code open source.
OpenAI has posted 722 mathematics manuscripts from a model it has not released. A week earlier, mathematicians had told AI labs what a responsible release should include. The repository meets some of that list, and leaves out the model's name, the prompts and the problems it failed.
Mistral and Reflection each launched an open-weight model this week pitched as the West's answer to China's. Neither has released the weights. Until Mistral does, its least restricted version is with governments and vetted partners.
The Wikimedia Foundation searched its own logs for rogue OpenAI agents and says it found them: test edits, tampering with a citation tool's settings, failed attempts on a note-taking server and millions of requests. It found no breach. Whether they caused May's outage is the point neither side has settled.
Google has stopped taking product vulnerability reports in its open-source reward programme, saying a rise in automated submissions has left most of them invalid. Curl ended its bounty in January for the same reason. Intel dropped its cash rewards last month and has not said why.
GitLab has fixed a 9.9-rated flaw that let users of its self-hosted AI Gateway break out of the sandbox for prompt templates and run commands. The patch shows where the gap was: one form of an instruction in the Jinja templating library, plus a memory bug in Python itself.
A flaw that Anthropic's Mythos model found in an open-source file server was patched 80 days before anyone was seen exploiting it. The attacks began the day after the researchers who found it published how the model had worked the exploit out, step by step.
arXiv took in 40,363 submissions in September, a record, and almost 9,000 support tickets with them. From this month each submitter may send it two papers a month. Its own monthly figures show September's rise was the largest in the archive's history, by a wide margin.
A handful of unpaid maintainers hold up a large share of commercial software. The industry has known this for a decade and keeps rediscovering it.
Security mandates and supply chain rules are converting free-rider dependence into maintenance contracts, and a small industry is forming to broker them.