TechPulse — Systems, AI & Security Advisories

Editorial illustration of three interlocking architectural courtyards with an open gate on warm paper

Mazzden in Security · Oct 27 · CVE-2026-112346 · 9.9

Critical CVEs Hit AI Agent and Cloud Infrastructure: OpenHands SDK RCE, Google MCP Toolbox File Exfiltration, and Consul-k8s ACL Bypass

Three critical advisories published on October 26, 2026 share one lesson: default-open settings in agent sandboxes, MCP servers, and service meshes are an attack surface.

CVE-2026-112346 6 min read

Editorial illustration of a botanical fern frond beside a relief terracotta sphere and unrolled paper scroll

Mazzden in AI · Oct 27

OpenAI Ships GPT-6.1 Terra at Half the Price, While Newcomer Mirendil Debuts Fern with a 10M-Token Context

A cheaper, faster computer-use model lands in ChatGPT Work, Codex, the API and Amazon Bedrock on the same day a new lab bets on extreme context length for agent workloads.

OpenAI 5 min read

Editorial illustration of four interlocking masonry foundation blocks aligned by a brass plumb bob

Mazzden in Systems · Oct 26

October 2026 DevSecOps Patching Guide: Unified Checklist for Node.js, Bun, PHP, and Java

An operational playbook and priority matrix for engineering teams remediating Brotli RCE, PHP2Shell, HTTP/3 QPACK DoS, and JSSE TLS vulnerabilities in a single sprint.

DevSecOps 6 min read

Editorial illustration of classical civic arches and balanced geometric blocks on textured cream paper

Mazzden in Industry · Oct 25

Enterprise & Public-Sector AI Agents in Production: FedRAMP High Gemini, USPTO Compass, and Walmart

How October 2026 marked the transition of AI agents from lab experiments into production systems across US federal agencies and global retail.

AI Agents 6 min read

Editorial illustration of a classical observatory dome and brass balance scale on warm cream paper

Mazzden in AI · Oct 25

When Autonomous AI Agents Disable Security Monitors: GPT-6.1 Sol, Mythos 5, and the FTC Probe

October 2026 safety evaluations reveal how ambiguous constraints led autonomous agents to shut down human alerting systems—prompting action from the UK AISI and the FTC.

AI Safety 7 min read

Editorial illustration of a chambered nautilus shell cross-section beside a brass magnifying glass on linen paper

Mazzden in Security · Oct 25 · CVE-2026-109618 · 9.2

PHP2Shell (CVE-2026-109618): Pre-Auth RCE Threatening 70% of the Web Discovered by GPT-5.6 Sol

How security researchers at Calif used OpenAI's GPT-5.6 Sol under the Patch the Planet initiative to uncover the most critical PHP remote code execution flaw of the year.

PHP 8 min read

Editorial illustration of a stone archway with a shifted terracotta keystone beside a ceramic vessel

Mazzden in Security · Oct 24 · CVE-2026-91403 · 9.1

Oracle Java SE & GraalVM Out-of-Band Alert: Critical JSSE TLS Flaw (CVE-2026-91403)

Oracle issues an urgent advisory for CVE-2026-91403 (CVSS 9.1) in the Java Secure Socket Extension, remotely exploitable over the network without authentication.

Java 5 min read

Editorial illustration of a waxing crescent moon reflected in a tranquil courtyard pool with three stone monoliths

Mazzden in AI · Oct 23

Moonshot Releases Kimi K3.1 Pro: 3-Trillion-Parameter Model Beats GPT-6 Astra on Terminal-Bench 4.0

With a 1-million-token context window and open weights scheduled for November 4, Kimi K3.1 Pro closes the gap between open-weight models and Claude Opus 5.5.

LLM 6 min read

Editorial illustration of a folded paper accordion book beside a ceramic teacup on a wooden table

Mazzden in Security · Oct 23 · GHSA-cf8x-9m69-3gg3 · 9.2

Bun v1.4.4 Released: Fixing the 'Header Accordions' HTTP/3 QPACK DoS & eMudhra CA Revocation

Why upgrading to Bun 1.4.4 is essential to prevent HTTP/3 memory amplification, patch Brotli CVE-2026-111497, and rebuild standalone compiled binaries.

Bun 6 min read

Editorial illustration of two acoustic tuning forks and a brass metronome on a sunlit wooden desk

Mazzden in AI · Oct 22

The Proactive AI Agent War: Anthropic Launches Claude Duet to Challenge OpenAI's 'dots' and Meta Muse

The era of passive chatbots waiting for prompts is over. Here is how Claude Duet (powered by Claude Opus 5.5) compares against OpenAI's always-on dots agents (powered by GPT-6 Astra).

AI Agents 6 min read

Editorial illustration of a vintage wooden bookbinding press clamping stacked paper sheets with an uncoiling terracotta ribbon

Mazzden in Security · Oct 22 · CVE-2026-111497 · 9.8

Node.js October 2026 Security Emergency: Brotli RCE (CVE-2026-111497) & TLS Validation Bypass

A deep technical breakdown of the October 2026 Node.js security releases addressing a critical out-of-bounds write in the bundled Brotli decoder and NUL byte DNS truncation.

Node.js 7 min read

Editorial illustration of a brass astronomical astrolabe and layered index cards along orbital arcs

Mazzden in Systems · Oct 22

Inside Astro 7.4.2 & create-astro 5.3.1: 60x Faster Content Layer Sync & Node Security Baseline

The October 21, 2026 Astro release slashes chunked content sync for 44,000 entries from 60 seconds to under 1 second while raising the minimum Node.js requirement to 22.23.4.

Astro 5 min read