security

7 articles

← All topics

GitLab patches a 9.9 RCE in its self-hosted AI Gateway

gitlabcve-2026-90970ai-gatewayduo-agent-platformrce+2+3

A critical prompt-template sandbox escape lets an authenticated Duo user run commands on self-hosted GitLab AI Gateways. Patch to 19.2.4, 19.3.2, or 19.4.1.

Mistral opens a public preview of Mistral Large 4, a 1.05T-parameter open-weight model trained in Europe

mistralmistral-large-4open-weightsmoeeurope+5+6

Mistral puts Mistral Large 4 ("le Chonk") into public preview: a 1.05T-parameter open-weight MoE served from EU datacenters, with weights promised by month's end.

Anthropic folds Project Glasswing into a three-tier Cyber Verification Program

anthropicproject-glasswingai-safetydual-usesecurity+4+5

Anthropic merges Project Glasswing and its Cyber Verification Program into Defense, Red Team, and Specialized access tiers for Opus 5.5, Sonnet 5.5, and Mythos 5.1.

Alberta scanned 466M lines of government code with Claude in 20 hours

anthropicclaude-codeclaudeai-agentsgovernment+3+4

Alberta's Ministry of Technology and Innovation scanned 466M lines of government code in 20 hours with Claude Code and ~50 agents — here is the playbook other provinces can copy.

Cloudflare 2026 Content Independence Day: AI bot taxonomy

cloudflareai-botspolicyrobots-txtcontent-signals+6+7

Cloudflare's second Content Independence Day splits AI bots into Search/Agent/Training, sets a Sep 15 default blocking Training and Agent on ad pages, and opens an x402 waitlist.

Sonnet 5 launches at $2/$10, nears Opus 4.8

anthropicclaudepricingapiclaude-code+8+9

Anthropic's Claude Sonnet 5 launches 2026-06-30 with intro pricing $2/$10 per MTok (→$3/$15 on Sep 1), a new effort-level API dial, and a near-Opus cost-performance curve.

Cloudflare `wrangler deploy --temporary` for AI agents

cloudflarecloudcliai-agentsdeveloper-tools+4+5

Cloudflare shipped `wrangler deploy --temporary` on 2026-06-19: a CLI flag that provisions a temporary Cloudflare account, deploys a Worker, and prints a claim URL — 60 minutes to claim, no human in the loop.