Good morning, AI enthusiasts!
AI is uncovering serious software flaws, taking on background tasks, and bringing more coding power onto personal hardware. Today’s roundup covers the past 24 hours, with practical takeaways for the tools you use and the systems you build.
In today’s issue:
THE QUICK SCOOP
AI & CYBERSECURITY
Researchers disclosed serious flaws in PHP’s core engine after using frontier AI to investigate vulnerabilities that had survived for years. Patched releases are now available, making this an immediate issue for teams that run PHP websites.
The Quick Scoop:
Wiz says affected versions can expose sensitive memory or allow remote code execution.
The research involved Wiz Atlas, Gemini 4 Argon, and GPT-5.6 Sol.
The PHP team and industry partners coordinated fixes and protective measures.
Your AI Edge: Ask your hosting provider or engineering team to confirm that the underlying PHP runtime has received the security update. Updating a website’s theme or plugins alone does not address a core-runtime flaw.
AI ASSISTANTS
Anthropic introduced Claude Duet, an app that checks connected tools, prepares morning briefs, and works on tasks while you are away. It is launching as a research preview with a waitlist.
The Quick Scoop:
Initial access is for Pro and Max subscribers in the US.
Duet uses a cloud computer and shares the usage limits of your Claude plan.
It asks for approval before sending messages, making payments, signing documents, or deleting items.
Your AI Edge: Start with a narrow workflow such as preparing meeting briefs or drafting follow-ups. Review what the assistant considers urgent before relying on its background checks.
SPONSORED BY MAMMOTHCLUB
Explore MammothClub’s Complete Vibe Coding, Automation, and Profit Super Bundle. Choose a project, follow the lessons, and practice turning an idea into something you can use.
Explore AI-assisted web development and app building.
Practice workflow automation with tools such as Make.com and Python.
Use the included source files as you work through projects.
LOCAL AI
Recursive introduced Flint, an open-weight coding model designed for local hardware. The company says its automated research system helped develop the model’s training, architecture, and inference software.
The Quick Scoop:
Flint has roughly 40 billion parameters, with about 2.5 billion active per token.
Weights are available under the Apache 2.0 license.
Recursive reports more than 125 tokens per second on an M4 Pro MacBook Pro at short contexts.
Your AI Edge: Benchmark it on your own repository and hardware. Local execution can keep code on your device, but speed and quality will vary with memory, context length, and task complexity.
AI SUPPLY CHAIN
Security researchers confirmed that LiteLLM version 1.107.0 distributed malicious code through Python packages and some container images. The incident affects a tool widely used to connect applications to AI model providers.
The Quick Scoop:
The compromised package included credential theft and a backdoor.
Malicious code could run when Python started, without an application importing LiteLLM.
PyPI removed the release, and researchers identified affected container-distribution windows.
Your AI Edge: Check deployment records for the affected release. If exposed, follow the incident guidance for containment and credential rotation rather than assuming a package downgrade removes every consequence.
AI INFRASTRUCTURE
Nvidia announced agreements with six manufacturing partners to expand the less visible parts of AI computing: chip substrates, packaging, testing, and optical engines.
The Quick Scoop:
The plans target a combined 2.5-fold increase in substrate capacity over three years.
A $1.1 billion capacity advance will support new KYEC testing facilities in the US.
SPIL is targeting a 15-fold increase in optical-engine capacity by the middle of next year.
Your AI Edge: AI capacity depends on an entire manufacturing chain. When planning infrastructure, distinguish announced future capacity from systems that are available to deploy now.
SPONSORED BY MAMMOTHCLUB
Get more practice with the Complete Copilot Bundle with Excel and Prompt Engineering. Learn how to frame requests clearly and apply AI assistance to familiar Microsoft 365 tasks.
Explore and analyze Excel data using natural language.
Practice prompts for reports, writing, and everyday tasks.
Build your skills with downloadable practice files.
BUSINESS OF AI
Meta’s latest earnings report puts its full-year capital expenditure forecast at $135 billion to $145 billion, lifting the lower end of its previous range as the company builds out its AI ambitions.
The Quick Scoop:
Quarterly revenue reached $64.6 billion, up 26% year over year.
Capital expenditures totaled $34.91 billion for the quarter.
Free cash flow was negative $2.12 billion despite strong operating cash flow.
Your AI Edge: The infrastructure bill is becoming a central part of the AI business story. Watch whether new products and efficiency gains keep pace with the spending required to support them.
AI POLICY
Representative Shontel Brown introduced legislation targeting deceptive AI use in elections. The proposal would require disclaimers on covered AI-generated campaign content and prohibit AI-enabled efforts to defraud people of their voting rights.
The Quick Scoop:
The bill covers federal, state, and local campaign content.
It assigns enforcement to the Federal Trade Commission.
The announcement lists 30 House cosponsors; this is proposed legislation, not enacted law.
Your AI Edge: For teams producing election-related content, provenance and clear disclosure are worth building into the workflow. Track the bill’s progress before treating its proposed requirements as current obligations.
THE MAMMOTH LOWDOWN
⚙️ TOOLS FOR AI EDGE
Five tools for understanding and improving your AI applications:
LangSmith: Trace agent behavior and inspect model calls across your application stack.
Braintrust: Turn production traces into evaluations and compare quality across releases.
Helicone: Route, debug, and analyze AI requests with monitoring and usage controls.
TruLens: Evaluate and trace AI agents with an open-source, OpenTelemetry-based toolkit.
PRISMA AIRS AI Gateway (formerly Portkey): Manage model access, observability, and governance across enterprise AI applications.
📣 What Else Is Buzzing In AI
Walmart welcomes AI shopping agents: TechCrunch reports a new Agent Gateway for purchases and upcoming customer controls.
SAP’s cloud business keeps growing: SAP reported cloud revenue growth of 25% at constant currencies and a current cloud backlog of €24.1 billion.
A tiny model pretends to be a terminal: WorldTUI predicts terminal-screen changes from keystrokes. Its browser demo simulates a shell rather than running a real filesystem.