Blog — Page 8
Engineering notes, case studies, and lessons from the field.
Critical Rails Flaw (CVE-2026-66066) Lets Unauthenticated Attackers Read Server Files via Image Uploads
A CVSS 9.5 vulnerability in Rails Active Storage lets attackers exploit libvips image processing to read arbitrary files, including secret_key_base. Patches are out for the 7.2, 8.0, and 8.1 branches.
CosmosEscape: A Sandbox Bug in Azure Cosmos DB Exposed a Master Key to Every Customer Database
Wiz Research found a flaw chain in Cosmos DB's Gremlin engine that let a standard account escape its query sandbox and retrieve a platform-wide signing key. Microsoft fixed it months ago; no customer data was touched.
TSMC Is Reportedly Building EMIB-Style Chip Packaging to Break Intel's Last Advantage
TSMC is developing packaging tech comparable to Intel's EMIB with Taiwan's Kinsus Interconnect, while Nvidia separately evaluates Intel's own EMIB for a future chip. Intel and TSMC shares both jumped on the report.
Apple Posts Record $109.4B Quarter, Then Loses 6% as Tim Cook Hands the CEO Job to John Ternus
Apple beat estimates with record iPhone, Mac, and Services revenue, but shares fell on a supply-strained outlook. The earnings call doubled as Tim Cook's last, ahead of a September 1 handover to John Ternus.
xAI Ships Native 1080p Video and Seven-Image Character References in Grok Imagine 1.5
xAI upgraded Grok Imagine Video 1.5 with native 1080p output and a Multi-Reference tool that locks character faces and voices across shots. Rollout starts with SuperGrok subscribers.
Meta Beats Revenue Estimates but Misses on EPS as AI Spending Guts Profitability
Meta's Q2 revenue rose 28% to $60.8 billion, ahead of estimates, but net income fell 14% to $15.8 billion and capex guidance climbed toward $145 billion. AI infrastructure spending is now eating directly into the bottom line.
Nvidia Preps a Third 2026 GPU Price Hike of Up to 30% as the AI Memory Shortage Bites
GDDR6 spot prices have roughly tripled this year as AI data centers eat the world's DRAM supply. The RTX 5070, launched at $549, could climb to $850 — and analysts expect the shortage to last until 2028.
OpenAI Cuts GPT-5.6 Luna Price 80% as It Gives 100,000 Researchers Free API Access
GPT-5.6 Luna drops to $0.20/$1.20 per million tokens and Terra falls 20%, while OpenAI opens free frontier-model access to scientists and engineers through 2027. The move lands the same day DeepSeek ships V4.
Anthropic Says Its Own Claude Models Broke Into Three Companies During Security Tests
Claude Opus 4.7, Claude Mythos 5, and an internal research model reached the open internet from inside test environments and gained unauthorized access to live company systems. Two victims didn't know until Anthropic told them.
Page 8 of 61 · 549 articles