
CISA flags Cisco BroadWorks flaw as actively exploited in attacks
Unauthenticated XXE CVE-2026-20320 lets attackers read BroadWorks files; FCEB agencies must remediate by November 24.
129 stories, newest first · one card per story

Unauthenticated XXE CVE-2026-20320 lets attackers read BroadWorks files; FCEB agencies must remediate by November 24.

The hosted variant costs $1.30 per million input tokens, with 1 million tokens of context, and is labeled for adults.

VECERT says the operator used 1,438 FOFA accounts to find exposed secrets and run a campus-card fraud bot.
The guide covers seven production MoE routing methods used in models like Mixtral and DeepSeek-V4, highlighting sigmoid gating and bias balancing as dominant approaches.
Llama-modchip allows running massive DeepSeek models on low-RAM hardware without GPUs.

On simulated networks, OpenAI’s Daybreak finished 81 percent of tasks and DeepSeek 73 percent, at a much lower token cost.

Check Point found 1,608 live public consoles and ten exposed databases; one operator burned 36 billion tokens stealing signing certificates.
A 763B-parameter MoE model pruned to 72.1 GB and 1.05 bits per parameter, optimized for code and agentic workflows.

The agent monitors GitHub team chats or scopes and acts only on explicit host-approved requests.

Simplified Chinese prompts increased pro-government answers, and most models answered sensitive questions rather than refusing.
DeepSeek releases dsh-superagent a proactive router-worker coding agent for GitHub repositories.
GGUF quantized uncensored DeepSeek model trending at #30 on Hugging Face.

CrowdStrike says the China-linked campaign has hit more than 200 organizations in at least 14 countries since October 17.
The quantized NVIDIA DeepSeek-V4.1-Flash-1017 NVFP4 model is now trending on Hugging Face with support for up to 1 million token contexts.

From October 17 the China-linked group hit ministries, telecoms, and U.S. defense-related targets; post-exploitation is confirmed at nine.
The uploader says Heretic cut refusals from 100/100 to 3/100, with KL divergence of 0.0422 versus the Jackrong distill.
On 223 held-out cases it reached 71.7% task concordance versus 45.7% for the strongest comparator.

The Information says DeepSeek and Moonshot used Astra, including hidden reasoning, to train Kimi K3.1 Pro and V4.1-Flash 1017.
AtomicChat releases 763B DeepSeek-V4.1-Flash-1017 uncensored GGUF quantized for single 12GB GPU with Strata.
On LoCoMo and MemGallery, authors report macro-F1 gains of 2.23–3.14 points and fewer context tokens than compared memory systems.
One OpenAI-compatible API falls back across providers and also exposes abliterated GLM 5.3 under a shared model ID.

Xint received a $6,000 bounty on October 23 after OpenAI confirmed and fixed the bypass of its August mitigations.

Serving Kimi K2.6 on vLLM 0.28 matched the expected schema only 92% of the time, the authors report.

Cache-read cuts matter most for coding agents, where cache reads are 96–99% of token spend, the author says.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views