All 53 episodes, each with a full transcript. Search for a story, a company or anything said on air, or narrow by topic.
Topics
Companies
24 episodes of 53
A shared ChatGPT link could run attacker code in your signed-in session, and OpenAI has fixed it. Plus a Linux TCP flaw rated 9.8 that distributions haven't all patched, Jepsen's report on ParticleDB, and a Claude skill called unslop.
OpenAI, Google, Microsoft and Anthropic back a shared robots.txt opt-out for AI training, but it's a preference, not a lock. Also: a trojanized Claude Code extension in Cursor's marketplace, Cloudflare's weak eMudhra certificate keys, and an NES emulator built into Qwen's weights.
Mistral releases the weights for Large 4, a one-trillion-parameter model it says could help real attackers. Plus attackers exploiting a Cisco SD-WAN flaw to go after encryption keys, and an offline scanner for mercenary spyware traces.
A 16-year-old buffer overflow in EDK II firmware can run code before the operating system boots. Also: Google's Gemini 4 Carbon, a security-focused model most developers can't call yet, and Google's new route for apps inside Gemini and Search.
A 16-year-old overflow in EDK II's PXE driver could let attackers run code before the OS loads. Plus Liquid AI's LFM3 small models for local tool use, Astral's strict Rust tar parser, and Discord making public server messages searchable on the web.
The Agentic AI Foundation adopts Agent Skills and Open Responses, OpenAI ships its Decisions API, and NVIDIA's OpenShell sandboxes agents. Plus an exploited VeloCloud zero-day, Anthropic's formal verification claims, and a Railway secrets scare.
GitLab patches a CVSS 10.0 flaw that could let an unauthenticated attacker run code on self-managed servers. Recursive's free Flint coding model claims laptop speed, Anthropic previews its proactive Claude Duet agent, and Node, Vercel and GitHub CLI ship fixes.
Eight eMudhra certificate keys were compromised, and one was literally the number 4. Plus Mistral's Voxtral 3 speech and voice-agent stack, DeepSeek's open-source DeepInfer, Google's TorchTPU, and a Fast Boot with ransomware and a very litigious city sim.
MiniMax announces M3.1 Flash, with a free OpenRouter endpoint and a reliability catch. Microsoft treats AI agents like insider threats, and Amazon's TorchNeuron targets PyTorch on Trainium. Plus a Copilot model policy API, the Plex2Shell exploits and Tenstorrent's $1.5 billion.
A compromised ConnectWise backup credential reached 173 Microsoft 365 tenants. DeepSeek ships a million-token Flash snapshot, and Drupal patches two critical remote code execution flaws. Plus an ESP32 emulator that runs in your browser.
Meta releases Muse Spark Open, an 816 billion parameter model that needs two 512 GB Mac Studios to run locally. Also: NVIDIA's Nemotron 3.5 Super VL, the Anatomy agent skill, Codex and Claude Code updates, and a Nextcloud flaw under attack.
Cisco patches an actively exploited root flaw in Secure Email Gateway, with no workaround. Grok Voice 3.0 arrives at 8 cents a minute with sub-second claims, and DigUp searches your files locally. Plus a Chrome exploit, a phishing takedown, and two bots that can't hang up.
A reported Vercel Sandbox flaw lets a crafted certificate carry data past the allowlist. Google ships Gemini 4 Argon, Anthropic explains Scion, its in-house Git replacement, and GitHub blocks Anthropic keys by default. Plus an open-source Rust CAD app.
An open-source autonomous pentesting agent, ARTEX, and the question of scope. Credential-stealing GitHub Actions workflows hit more than 340 repositories, an Anthropic model sent Philadelphia police a false tip, and Python 3.15, uv 0.13 and Ruff 0.17 shipped.
Claude Haiku 5.5 cuts list prices 90 percent on short prompts, but a new tokenizer may eat some of that. Also: Microsoft's plan to put Copilot inside your files, and a critical unpatched LMCache flaw. Plus Docker Agent, FortiBleed and a fake Meta ad.
Aleph Alpha releases Kolibri, a 78.1 billion parameter open-weight German-English model, but the benchmarks are its own. Plus Google pauses its open-source bug bounty, the Dots browser agent, and fresh releases for Claude Code, Transformers and Vite.
GitLab patches a CVSS 9.9 sandbox escape in its self-hosted AI Gateway. Apple tightens Mac Full Disk Access as AI agents raise the stakes, and Spanner adds transactional queues. Plus Rust 1.99, Copilot review APIs, and a Git hook with bad manners.
SvelteKit 3 is stable, with config moved into Vite and a new hash lib import alias to migrate. Cloudflare ships Clef, open-weight decision models that return probabilities instead of text. Plus Pi 1.0 and durable agents, a local Qwen repo, and Copilot driving desktop apps.
OpenAI launches Dots, always-on agents with their own cloud computers. GPT-6.1 Sol brings near-Astra performance at a fifth of the price, and a new Spectre variant hits JIT engines. Plus Codex cloud environments, Magpie, and a NetScaler zero-day.
Meta launches an enterprise AI platform and hires MongoDB's CEO to run it. Anthropic ships Claude Sonnet 5.5 at the same list price as its predecessor. Shopify opens checkout to browser agents, and GitHub explains how its AI agent found 24 Android bugs.