JadidJust-in AI Developments, Incidents & Deadlines
November 2026
SMTWTFS123456789101112131415161718192021222324252627282930

Attackers are going after the places that hold AI credentials, and the developer's own machine is the weakest of them.

20 stories · transcript

Binance's report says a rigged Homebrew download and a fake job interview led to a $6.34 billion theft, a dozen AI developer platforms lost stored customer keys in a month, and Postman's desktop app quietly installed plugins into Claude Code and Codex.

TLDR

  • Binance's incident report traces the $6.34 billion theft to three compromised engineer laptops, one hit through a tampered Homebrew install (Nov 3); an internal AI tool was abused along the way. Security Agents
  • CISACybersecurity and Infrastructure Security AgencyThe U.S. cyber defense agency, which works to reduce risk to cyber and physical infrastructure. It runs KEV.CISA ↗ says attackers are exploiting WordPress core CVE-2026-119977 during upgrades; federal agencies must patch by Friday (Nov 4). Security
  • At least a dozen AI developer platforms, including WorkOS, Northflank and Trigger.dev, have lost stored customer secrets in a month (Nov 4). Security Infra
  • Anthropic open-sourced FlashProve, a cryptographic proof that a specific model produced a specific reply (Nov 3). Research Open Source
  • Canva cut 1,271 jobs, 22% of staff, after growth slowed and AI costs weakened its forecast (Nov 4). Hiring Business

Upcoming Deadlines

Date What Who it hits Do this Source
Wed Nov 4 Moonshot promises Kimi K3.1 Pro full open weightsA model whose trained weights are published for anyone to download and run.NTIA ↗ (The Decoder, Oct 23) Self-hosters of open models Line up an eval; read the license The Decoder
Wed Nov 4 Apple Intelligence beta with Alibaba Qwen starts in mainland China (iOS 27.3 wide release in December) iOS developers and teams shipping in China Test Siri, Writing Tools and Visual Intelligence flows against the Qwen-backed beta TechNode
Fri Nov 6 CISA KEVKnown Exploited VulnerabilitiesCISA's list of vulnerabilities with reliable evidence of active exploitation and a clear fix, used to set patching priority.CISA ↗ federal patch deadline for WordPress core CVE-2026-119977 (RCERemote code executionA flaw that lets an attacker run malicious code on a target's computers or network.Cloudflare ↗ during core upgrades) Anyone running WordPress older than 7.1.4 Update to WordPress 7.1.4 BleepingComputer
Mon Nov 9 SEC roundtable on machine-understandable data and "Super Intelligence" Public-company and data teams Watch for stream SEC
Mon Nov 9 GitHub Actions pull_request_target brownout, 16:00-18:00 UTC: blocked runs fail in public repos Public repos with pull_request_target workflows Check Insights for runs the default rule would block; allow the trigger in an Actions event policy or fix the workflow GitHub
Tue Nov 10 CISA KEV federal patch deadline for Brotli CVE-2026-111497 (Node2Shell) Anyone running Node.js, .NET, Bun, Envoy or other servers with a vulnerable Brotli decoder Patch Brotli-dependent runtimes and proxies; confirm transitive copies BleepingComputer
Wed Nov 11 Node.js security releases for 26.x, 24.x and 22.x (highest severity HIGH) Anyone running Node.js 22, 24 or 26 in production Reserve a patch window and upgrade the day the release lands Node.js
Thu Nov 12 Rust 1.100 stabilizes Cargo minimum publish age (dependency cooldown, off by default; Socket, Oct 20) Rust teams Set a cooldown in Cargo config Socket
~Thu Nov 12 OpenAI's proposed end of model access in Cursor (official date not confirmed; Cursor may end it sooner) Cursor users on OpenAI models Check Cursor terms OpenAI
Mon Nov 16 GitHub Copilot retires Claude Opus 4.8, Claude Opus 5, GPT-5.6 Terra (replacements Opus 5.5, GPT-6.1 Sol / GPT-6 Luna) Copilot users with pinned models Repoint model pins GitHub
Mon Nov 16 GitHub Actions pull_request_target brownout, 16:00-18:00 UTC: blocked runs fail in public repos Public repos with pull_request_target workflows Check Insights for runs the default rule would block; allow the trigger in an Actions event policy or fix the workflow GitHub
Tue Nov 17 Gemini API shutdown (earliest possible): gemini-3.1-flash-tts-preview, gemini-3.1-flash-live-preview, gemini-2.5-flash-native-audio-preview-12-2025, gemini-2.5-flash/pro TTS previews TTS and Live API callers Move to gemini-3.8-live or gemini-3.8-flash-tts Gemini API
Tue Nov 17 Google Gemini Gems become Skills Gems users Review Gems Google

Action Items

  1. Update every WordPress site to 7.1.4 before Friday, Nov 6, including auto-update-disabled and staging copies; the flaw is exploited during core upgrades.
  2. Find every Rails app that attaches uploads with Active Storage and ImageMagick, and move to 8.1.4.1 or 8.0.5.2. Until then, tighten the ImageMagick policy to block the MSL coder, and rotate secret_key_base on apps that took uploads from untrusted users.
  3. Patch Xen, XCP-ng and Qubes hosts for XSA-523 and schedule the reboots; there is no mitigation and one guest can take over dom0.
  4. Check every cPanel, DirectAdmin and Plesk host for cPGuard 5.88.12 through 5.88.19. If present, rotate root database credentials and SSH keys, and force password resets for local accounts.
  5. Inventory the AI provider keys held by your hosting, eval and gateway vendors, and rotate any you cannot tie to a recent audit. Also check ~/.claude and ~/.codex on developer laptops for plugins or hooks you did not install.

Security

  • Binance's report: fake job interview, tampered Homebrew install and an abused AI tool led to the $6.34 billion theft (Nov 3) Security Agents Critical · No CVECommon Vulnerabilities and ExposuresA public catalog that gives each known security vulnerability a unique ID, a short description and at least one reference.NIST ↗ · Exploited in the wild (TraderTraitor, per the FBI) · Mitigation: vet installers and recruiter-supplied code Update — Binance says a June campaign compromised three engineers' computers. One downloaded a tampered Homebrew install while searching for an AI coding tool; another took a rigged coding assignment from a fake recruiter. About $2.85 billion is frozen or intercepted. (SecurityWeek | The Hacker News)

  • WordPress core CVE-2026-119977 is exploited during upgrades; CISA sets a Nov 6 deadline (Nov 4) Security High · CVSSCommon Vulnerability Scoring SystemA standard 0 to 10 severity score: 0.1–3.9 low, 4.0–6.9 medium, 7.0–8.9 high, 9.0–10 critical.FIRST ↗: not stated in sources · Exploited in the wild (CISA KEV; Wordfence blocked 13,095 attacks) · Patched in WordPress 7.1.4 A time-of-check race lets an unauthenticated attacker run code through predictable, web-accessible staging paths during a full-package core upgrade. WordPress shipped the fix Oct 28. (BleepingComputer | The Hacker News)

  • Rails Active Storage flaw GHSA-f3w6-w445-fwh9 lets an upload write files through ImageMagick (Nov 4) Security Critical · CVSS 9.8 · Exploitation unknown · Patched in 8.1.4.1 / 8.0.5.2 No CVE is assigned yet, so scanners keyed to CVE IDs may be silent. An SVG upload reaches ImageMagick's MSL coder at attach time, with no variant or preview needed. On Disk-service apps an attacker can also read files such as secret_key_base. (The Hacker News)

  • Xen flaws CVE-2026-102703 and CVE-2026-102704 let one guest read and write any VM's memory, dom0 included (Nov 3) Security Infra High · CVSS: not stated in sources · Exploitation unknown · Patched (XSA-523), no mitigation Every version from 4.6 on is affected. Xen credits Anthropic, using Claude, with finding the grant-copy bug; Ada Logics validated it. XCP-ng says one compromised guest can take over the host, and Qubes OS says every supported release is affected. (The Hacker News)

  • cPGuard update channel hijacked to push a credential-stealing script, versions 5.88.12 to 5.88.19 (Nov 3) Security Infra High · No CVE assigned · Exploited in the wild · Remove the affected versions and rotate credentials Attackers used compromised credentials on the OpsShield CDN at 02:06 UTC Nov 2. The script took Linux password hashes, root database config, shell history and SSH files. OpsShield stopped it within 12 hours; some servers may have missed it. (BleepingComputer | Help Net Security)

  • Barracuda CVE-2026-116606 and a command injection chain to root on Email Security Gateway (Nov 3) Security Critical · CVSS 9.3 · Exploitation unknown · Patched in current firmware; update all missed versions Chaining the authorization bypass with CVE-2026-111560 (CVSS 8.6, six products) gives root. Both need access to the admin interface, so keep it off the internet. (The Hacker News)

  • AI developer platforms lose customer secrets: WorkOS, Northflank, Trigger.dev and Chainstack (Nov 4) Security Infra High · No CVE · Exploited in the wild · Rotate keys held by these vendors SecurityWeek counts at least a dozen platforms hit in a month, all apparently hunting AI access tokens to resell. WorkOS says an attacker used the ARTEX AI framework against an internal sales app, with no production access. The Cloud Security Alliance warns one intrusion at an intermediary can expose keys for many inferenceRunning a trained model on new input to get an output, as opposed to training it.NVIDIA ↗ accounts. (SecurityWeek | BleepingComputer)

Models & Tools

  • Anthropic open-sources FlashProve, a proof that one model wrote one reply (Nov 3) Research Open Source The prototype covers mixture-of-expertsMixture of expertsA model made of many sub-networks, called experts, where a learned router sends each input to only a few of them.Shazeer et al. 2017 ↗ models, with a prover, a C++ verifier and a Lean reference verifier under Apache 2.0. It could catch a provider swapping in a cheaper model, but it needs labs to publish a fingerprint for each release, and Anthropic calls it a prototype. (TechCrunch | Help Net Security)

  • Postman's desktop app installed plugins into Claude Code and Codex without asking (Nov 3) Agents Security A developer reports version 12.33.4 added a plugin, a marketplace entry and a trusted session-start hook to Codex's config.toml, and a plugin to Claude Code. The hook tells Codex to prefer Postman's tools. Treat agent config directories as code that other apps can write. (The New Stack)

  • Tencent's 770B Hy4 adds vision and computer use, with weights promised (Nov 4) Open Source Agents The model is on OpenRouter at $0.834 input and $2.501 output per million tokensA small unit of data, such as part of a word, that AI models read and generate. Many AI services price by tokens in and out.NVIDIA ↗, with a flash model planned. Training targeted Blender, CAD and multi-program tasks. Capability claims are Tencent's own; weights and a system card come "shortly". (TechNode)

  • CrowdStrike ships an AI kill switch and reportedly pays $495 million for Fiddler and Dreadnode (Nov 3) Agents Business The switch stops internal agents, blocks relaunch and cuts network access, inside Falcon Guardian. Critics say a universal stop is hard across many systems. The acquisitions would add agent observability and automated AI security testing. (CNBC | SecurityWeek)

  • GitHub brings Copilot to JetBrains Air and Dependabot updates for agent skills (Nov 3) Agents Dependabot now keeps Agent Package Manager skills, prompts and instructions current, so agent config can be reviewed through pull requests like any dependency. (GitHub | GitHub)

APIs & Pricing

  • Anthropic removes fast mode for claude-opus-4-8 on Nov 30 (Oct 30) Pricing After removal, requests with speed: "fast" return an error. Anthropic points to Claude Opus 5.5. Search for the parameter in code and configs, since the failure arrives as a hard error rather than a slowdown. (Anthropic)

Industry & Business

  • Canva cuts 1,271 jobs, 22% of staff, in its first layoffs (Nov 4) Hiring Business CEO Melanie Perkins said growth slowed for the first time in a decade. Canva cut its revenue growth forecast from 30% to 20%, partly on AI costs, and TechCrunch reports it is building its own models to lower them. The reporting does not say AI replaced the roles. (TechCrunch | The Information)

  • Fal raises $1.3 billion at a $16 billion valuation (Nov 3) Business Infra Bessemer led, double April's $8 billion mark, and Bloomberg says annualized revenue passed $800 million. TechCrunch notes inference hosts such as Baseten, Fireworks and Modal grow fast but keep thin gross margins. (TechCrunch)

  • AMD's Q3 revenue rises 45% to $13.38 billion as data center sales nearly double (Nov 3) Business Infra CEO Lisa Su expects server revenue to double in 2027 and says supply for wafers, packaging and memory is secured. Tom's Hardware reports AMD expects to outsell Intel in Q4 for the first time. (CNBC | ServeTheHome)

  • Nvidia reportedly can fill about 1% of China's RTX Pro 5500 orders (Nov 4) Business Policy Bloomberg, via Tom's Hardware, says orders reached roughly $70 billion at $11,000 a card, up from earlier reports of $35 billion. The card has no export limit, so supply is the bottleneck. Sourcing is anonymous. (Tom's Hardware)

  • DeepSeek reportedly plans V5 training on Huawei Ascend; ByteDance limits personal Claude and Codex accounts (Nov 4) Business Policy STAR Market Daily reports the Ascend plan; it would extend Ascend from inference to training. ByteDance reportedly bars personal accounts of outside AI tools from L4 code repositories and Feishu documents, with some Seed team uses exempt. (TechNode | TechNode)

Policy & Safety

  • Google will make schools choose between AI and Search from 2027 (Nov 4) Policy Gemini, Gemini Notebook and Search will be off by default for student accounts, but a version of Search without AI is gone. Schools that enable it pick full AI Overviews or a Guided Learning mode. Google says the two are too fused to separate. (The Decoder | TechCrunch)

AI in Production

  • Meta's Muse bounty reaches $1.2 million; the top $300,000 award went to a trusted-header bug (Nov 4) Agents Security Muse gives each user's agent its own VM. An authentication check trusted a header added by a local proxy; a migration added a second proxy layer, so outside requests could carry it. Of 630-plus reports, 64 were valid. Audit any check that treats a proxy header as identity. (SecurityWeek)

Type to search · ↑↓ to move · enter to open