微軟研究院、Microsoft Security 與加州大學柏克萊分校的團隊在 10 月中旬開源了 TokenEconomizer，主打「不換模型、不改代理程式，就能降低 coding agent 在常用 repo ...

Anthropic sandbox-runtime (srt) is the open-source, OS-level sandbox behind Claude Code. It restricts file and network access ...

IBM chains a superuser token leak with a code validator that runs Python in CVE-2026-9198. CISA logged exploitation on 4 ...

On October 30, 2026, Visual Studio has released a fix via CVE-2026-118147. Affected versions include Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.11, Microsoft ...

Cisco says patch faster, then sells you time, Turning AI refusals into vulnerability signals, Brotli’s are hiding, WordPress ...

The shortest path to Kimi K3.1 Pro in a terminal: one install script, one /login, and the Git Bash requirement that breaks ...

Hackers hijacked AOMEI Backupper updates for minutes at a time, delivering malware to unsuspecting users across multiple countries.

A suspected supply chain campaign abused the update system of AOMEI Technology, the maker of AOMEI Backupper and AnyViewer. The attackers pushed the CROSSROAD downloader and the SHINYROAD backdoor to ...

Tencent’s Hy-Memory-30B-A3B is a free open-source mixture-of-experts model claiming Claude Opus 5 parity on AI agent memory ...

Build a Python tracker for the Nintendo Switch 2 games list: scrape, dedupe, alert on new releases, and export a shareable list in 12 steps.

Windows 11 still won't let you name a file CON or NUL. Raymond Chen traces it to DOS 1.0, and our 26H2 test found NUL.txt now ...

Microsoft Execution Containers (MXC) are sandboxes for running untrusted code, such as AI model outputs or plugins, where the ...