Taklimat Pagi Saya

Uber uses OpenAI to help people earn smarter and book faster

Uber uses OpenAI to power AI assistants and voice features that help drivers earn smarter and riders book faster across a global real-time marketplace.

Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.

Proaction boosts sales 60% and saves 75+ hours with Codex

With Codex, GPT-Live-1, and GPT-6 Astra, Proaction builds, operates, and sells modern fleet management faster.

When Should Forecasting Agents Reason? Behavioral Stress Tests for Reliability Routing

arXiv:2609.28475v1 Announce Type: new Abstract: Forecasting agents increasingly combine language-model reasoning, retrieval, ensembling, and calibration, but it remains unclear when each behavior should be trusted. We study this question on ForecastB

Automattic has a new board after failed attempt to put CEO on leave

After days of upheaval at Automattic, following a failed attempt to remove CEO Matt Mullenweg, the company has a new board.

AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment

When autonomous AI agents "escape the sandbox," the real story isn't rogue machines — it's the same access-control failures we've seen for decades.

Observability-First AI Agents: What You Gain and What You Give Up

Observability is the bedrock of reliability, so I designed and implemented the full tracing layer for an AI agent before writing a line of the agent loop.

Liquid AI Releases LFM2.5-VL-3B-DSpark: Speculative Decoding for Vision-Language Models With Up to 3.13x Faster Decoding

Liquid AI has released LFM2.5-VL-3B-DSpark, a 279.5M-parameter draft model that brings speculative decoding to its LFM2.5-VL-3B vision-language model. It delivers up to 3.13x faster decoding on Apple M5 Max and 2.66x on H100, with identical output un

Fastino Releases GLiNER2.5-Decide: A 340M Open-Weight Decision Model That Runs on CPU

Fastino Labs has released GLiNER2.5-Decide, a 340M-parameter open-weight decision model. It takes text and a schema of typed questions and returns structured answers. Each answer comes with a probability distribution, a confidence score, and constrai

Nikon Z5IIC Dilancarkan – Kamera Bingkai Penuh 24.5MP Dengan Teknologi Autofokus AI

Nikon memperkenalkan Z5IIC sebagai kamera nircermin bingkai penuh yang direka untuk pemula namun masih menawarkan spesifikasi teknikal yang baik. Ia menggunakan sensor CMOS 24.5MP BSI (FX) bersama enjin pemprosesan imej EXPEED 7 yang mampu memberikan

How frontier firms are pulling ahead

OpenAI’s B2B Signals research shows how frontier enterprises deepen AI adoption, scale Codex-powered agentic workflows, and build durable competitive advantage.

Aikido Security Releases Altar-1: An Open-Weight Security Model Pruned From GLM-5.3 to 328 GB

Aikido Security has released Altar-1, its first open-weight security model. It is a compressed version of Z.AI’s GLM-5.3, built to run inside infrastructure the customer controls. Altar-1 powers Aikido Machine, the company’s autonomous pentesting app

In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure

Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul. The post In Other News: Clop Leak Site Takeover, Docker Botnet Hun

Building the Hugging Face MCP Server

Singular Bank helps bankers move fast with ChatGPT and Codex

Singular Bank built Singularity, an internal assistant using ChatGPT and Codex to help bankers save 60–90 minutes daily on meeting prep, portfolio analysis, and follow-up.

Pistis Technical Report

arXiv:2609.28554v1 Announce Type: new Abstract: We introduce the Pistis model family, comprising 27B- and 9B-parameter multimodal large language models built on Qwen3.6 and Qwen3.5, respectively, and developed through a general and scalable post-trai

TW3Cast: A Frozen Router of Lightly Fine-Tuned Foundation Models for Time-Series Forecasting on GIFT-Eval, Selected Entirely on the Training Split

arXiv:2609.28506v1 Announce Type: new Abstract: TW3Cast is a time-series forecasting system that reaches position 3 of 130 entries on the GIFT-Eval benchmark by mean MASE rank, as of 2026-09-14. The two entries above it belong to the leaderboard's ag

Nemotron-3-diarization: Here's What You Need to Know

Nemotron-3-Diarization is an open-weight speaker diarization model from NVIDIA that identifies who spoke when in real-world audio.

Crusoe abandons $1.25B plan to use Boom turbines at AI data centers

Boom Supersonic CEO Blake Scholl said its new stationary power plants were no longer in Crusoe's near-term plans.

Unsecured OpenAI agents posted 53 user images on the internet without the lab’s knowledge

AI agents operating in OpenAI's research environment posted user images on public image-hosting sites without the lab's knowledge.

Playdate Menerima Kandungan Musim Tiga Oktober Ini – Pra-Tempahan Dibuka

Pemilik konsol Playdate bakal menerima himpunan permainan baharu melalui penawaran Musim Ketiga yang dijadualkan pelancarannya pada 8 Oktober depan. Pakej yang ditawarkan pada harga $39 ini menggunakan format pengedaran berkala... The post Playdate M

Introducing ChatGPT Futures: Class of 2026

Meet the ChatGPT Futures Class of 2026—26 student innovators using AI to build, research, and drive real-world impact. Discover how this generation is redefining learning, creativity, and opportunity with ChatGPT.

What We Missed: Google Gemini Joins the AI Escape Party

In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from Google Gemini models breaking containment to ShinyHunters ratting on TeamPCP hackers.

Reachy Mini - The Open-Source Robot for Today's and Tomorrow's AI Builders

Grab AudioProtect Kini Mandatori Pada Semua Perjalanan Grab

Ciri Grab AudioProtect kini mandatori pada semua perjalanan dilakukan dalam perkhidmatan seru pandu Grab. Grab AudioProtect akan merakam audio daripada permulaan sehingga usai perjalanan bagi tujuan keselamatan. Sistem ini diperkenalkan oleh Grab pad

BaseCamp --- An Agentic AI Framework for Automating DNA Sequencing Data Pipelines

arXiv:2609.28557v1 Announce Type: new Abstract: DNA sequencing pipelines, spanning quality control, alignment, variant calling, and annotation, are now reliably executed by workflow management systems that orchestrate established bioinformatics tools

Pandang Pertama Vivo X500 Pro Max – Premium Dan Berkuasa

Label Pro Max kini sinonim dengan telefon pintar premium. Vivo mengikuti langkah ini dengan memperkenalkan X500 Pro Max sebagai model utama dalam siri X500. Dari reka bentuk hingga kamera, vivo dilihat terus cuba bersaing dalam kategori mewah. Ini ar

Ulasan Nothing Phone (4b) – Impak Minima

Nothing Phone (4b) dilancarkan di Malaysia hujung minggu lalu sebagai peranti kelas pertengahan mampu milik dalam pasaran yang kini dibanjiri telefon pada harga yang mencanak naik disebabkan oleh krisis RAM global. Mereka berjaya menawarkan peranti k

The Pentagon wants $30 million to build an AI-powered lie detector

The US government wants to spend $30.3 million over the next five years on an improved form of lie detector, according to a Department of Defense budget request. The program, called Polygraph+ or Polygraph Next, will focus on scoring algorithms that

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below - a

The SOC Doesn't Need to Start Over with Every Alert

Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on a low

Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions

Anthropic now allows you to run Claude Code via cloud sessions without signing up for the research preview, and it's offering up to $250 in free usage credits, so more users can give it a try. [...]

Henry’s First Dates Ditayangkan Pada 22 Oktober – Nadech Kugimiya, Minnie

Treler rasmi untuk filem Henry’s First Dates telah dilancarkan, memperlihatkan konsep penceritaan yang menguji cabaran ingatan dalam sesebuah perhubungan. Diterbitkan secara bersama oleh GDH dan Sony Pictures Entertainment, filem komedi... The post H

Perplexity Trains Its Computer Agent on Real Mistakes With Hint-Guided Self-Distillation

Perplexity Research published a new post-training study. It trains a model inside Perplexity Computer on real user sessions, including failed ones. The method pairs rejection sampling fine-tuning with hint-guided self-distillation. In a live A/B test

Asynchronous Robot Inference: Decoupling Action Prediction and Execution

The hottest new hangout for middle schoolers is NPR’s comment section?

When NPR staffers flagged strange comments under their podcasts on Spotify as bots, it took a Gen Z colleague to (immediately) figure out the mystery.

Creating custom kernels for the AMD MI300

ScreenEnv: Deploy your full stack Desktop Agent

Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court

Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services. The post Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court appeared first on SecurityWeek.

Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise

Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets. "At 18:31 UTC on September 24, 2026, Bitget's security systems identified unauthorized transfers involving a limited nu

CVE-2026-88003 - InvoicePlane: Failure to Revoke Administrative Privileges After Role Downgrade

CVE ID :CVE-2026-88003 Published : Sept. 25, 2026, 10:18 p.m. | 1 hour, 6 minutes ago Description :InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane fails to revoke admini

The Hacker House Files: 14 Notorious Scandals From 8 Prominent SF Bay Area Houses

From AGI House's 37 police calls to a still-open rape report at Genesis: 14 scandals from 8 Bay Area hacker houses, sourced from police records and lawsuits.

CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July. The post CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks appeared first on SecurityWeek.

CVE-2026-100501 - Flame through 2.4.0 Brute-Force Attack via Login Endpoint

CVE ID :CVE-2026-100501 Published : Sept. 25, 2026, 10:17 p.m. | 1 hour, 12 minutes ago Description :Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint that all

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack. [...]

CVE-2026-100382 - Unauthenticated remote code execution through wikitext in ExternalData

CVE ID :CVE-2026-100382 Published : Sept. 25, 2026, 10:17 p.m. | 1 hour, 12 minutes ago Description :Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki - External

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaScript for

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the

Russia's Hybrid Cyber-Physical War in Europe Heats Up

A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly those that provide material support to Ukraine.

Elementor WordPress flaw lets attackers create admin accounts

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. [...]

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vuln

CVE-2026-71483 - Horilla: Reflected Cross-Site Scripting (XSS) in Employee Filter View

CVE ID :CVE-2026-71483 Published : Sept. 25, 2026, 10:18 p.m. | 1 hour, 11 minutes ago Description :Horilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-filter-view is reflected by jQuery .html() in employee/t

CVE-2026-9655 - Rejected reason: This CVE ID has been rejected or

CVE ID :CVE-2026-9655 Published : Sept. 25, 2026, 10:18 p.m. | 1 hour, 6 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more details, such as

PAWS: Policy-driven Agentic World Simulation

arXiv:2609.28547v1 Announce Type: new Abstract: Policy interventions propagate through public communication, institutional decisions, and stakeholder responses, yet datasets for financial multi-agent simulation rarely connect these processes to tempo

CVE-2026-91768 - IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

CVE ID :CVE-2026-91768 Published : Sept. 25, 2026, 10:18 p.m. | 1 hour, 6 minutes ago Description :The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /

CVE-2026-100390 - Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6

CVE ID :CVE-2026-100390 Published : Sept. 25, 2026, 9:17 p.m. | 2 hours, 12 minutes ago Description :Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated att

North Korea Suspected in $351 Million Bitget Crypto Heist

Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen. The post North Korea Suspected in $351 Million Bitget Crypto Heist appeared first on SecurityWeek.

Stopping IT Worker Scams Requires Revamped HR Process

Training human-resource managers in the latest tactics and warning signs goes a long way toward blunting the threat, but automated analysis can help even more.

CVE-2026-9652 - Rejected reason: This CVE ID has been rejected or

CVE ID :CVE-2026-9652 Published : Sept. 25, 2026, 10:18 p.m. | 1 hour, 6 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more details, such as

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2. [...]

CVE-2026-92842 - OOB read / info leak in convert.* stream filters when line-break-chars contains NUL

CVE ID :CVE-2026-92842 Published : Sept. 25, 2026, 10:18 p.m. | 1 hour, 6 minutes ago Description :The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose le

CVE-2026-100391 - MediaFlow Proxy through 2.4.9 Server-Side Request Forgery via Incomplete Validation

CVE ID :CVE-2026-100391 Published : Sept. 25, 2026, 9:17 p.m. | 2 hours, 12 minutes ago Description :MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination val

Windows, Linux, Android File Notification Systems Leak User Activity

Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events. The post Windows, Linux, Android File Notification Systems Leak User Activity appeared first on SecurityWeek.

Samsung Peneraju Pembangunan Teknologi Peranti Pintar Boleh Lipat

Hari ini, peranti pintar dengan skrin boleh lipat bukanlah sesuatu yang asing lagi. Jika anda berkemampuan, terdapat banyak jenama peranti pintar seperti Google, Huawei, Oppo, Samsung, malah Apple juga kini tampil dengan penawaran peranti boleh lipat

Meta opens early access program for new Muse features

Anyone interested in joining has to ask Muse to put them on the list.

Logitech G Play 2026 – 15 Produk Diumumkan, Aplikasi G Hub Replay, Kerjasama McLaren Racing

Logitech G telah melancarkan lima belas produk dan perisian baharu di acara Logitech G PLAY 2026 yang menyasarkan pemain kompetitif, pencipta kandungan, dan peminat lumba simulasi. Pengumuman ini merangkumi peranti... The post Logitech G Play 2026 –

U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to

How to Manage Document Metadata in React 19

Manage document titles, descriptions, and canonical links directly in React 19 components, with key caveats when replacing React Helmet.

Just Publish an App. How F*****g Hard Can It Be?

I built my dream iOS app in two months while working full time, then got sick an hour after launch. An honest look at shipping solo.

Siri Animasi Ejen Ali Rai Ulang Tahun Ke-10 Dengan Konsert Orkestra di KLCC – Harga Tiket Bermula RM69

Bagi menyambut ulang tahun ke-10, siri dan filem animasi Ejen Ali bakal diadaptasi ke pentas muzik secara langsung menerusi acara “Ejen Ali in Concert” yang dijadualkan berlangsung pada 28 dan... The post Siri Animasi Ejen Ali Rai Ulang Tahun Ke-10 D

Uniqlo Hadir Dengan Tshirt Dan Beg Berdasarkan Proton

UNIQLO Malaysia akan melancarkan koleksi khas UTme! PROTON secara rasmi pada Isnin, 28 September 2026. Rangkaian produk ini menawarkan pilihan kemeja-T serta beg yang menampilkan cetakan grafik berasaskan legasi kenderaan... The post Uniqlo Hadir Den

Black Forest Labs Releases FLUX 3 Action: A 7B Open-Weights World Action Model That Tops RoboLab-120

Black Forest Labs (BFL), the lab behind the FLUX image models, has released FLUX 3 Action. It is a 7B open-weights World Action Model (WAM) for robot control. The model reads camera frames, robot state and a text instruction. It then predicts future