Meta fairseq parse_manifest flaw allows remote code execution (ZDI-26-938)
ZDI rates the unpatched flaw 7.8; a user must open a malicious file or visit a malicious page.
286 stories, newest first · one card per story
ZDI rates the unpatched flaw 7.8; a user must open a malicious file or visit a malicious page.
ZDI rates the unpatched issue 7.8; the user must visit a malicious page or open a file.
Opening a malicious file is required; ZDI rates the unpatched issue CVSS 7.8.
ZDI rates the unpatched FAIRChem flaw 7.8; a user must open a malicious file or visit a malicious page.
Untrusted deserialization in detection_checkpoint is unpatched; ZDI rates it CVSS 7.8.
ZDI rates the unpatched split_by_lang code-injection bug 7.8; a user must open a malicious page or file.
ZDI rates the unpatched FilterNamesDataset code-injection bug 7.8; a user must open a malicious page or file.

Physical Superintelligence uses AI to prove quantum computing conjecture; Meta publishes Tactus glove for data collection.

Muse could pull eBay listings until this weekend; eBay already bans buy-for-me agents and says some agent access is restricted.
Users build custom spaces in Muse for trackers and planners with automatic app integration and scheduled visibility.

Firmware through version 126 skipped signature checks; version 127’s check can be disabled by editing a phone settings file.

Meta prices Ember at 10 cents per million input tokens and pairs it with Muse Wonder for volume.

Meta is using AI to identify teens on Instagram and place them in age-appropriate protections globally.

OpenAI hired Sen. Chuck Schumer’s daughter and began calling data centers “compute campuses.”

Meta will consult with publishers before implementing ads and business terms changes

Meta has paused its commercial terms update that would have allowed scraping websites for generative AI training, keeping existing rules in effect while consulting stakeholders.

Voice conversations and animating avatars now available in the US for the iOS app; coming soon for AI glasses and Muse Charm gadget.

Midterm election results may complicate building data centers for AI due to community pushback.

Conductor Cloud shuts down on November 20, and the desktop app stops receiving new models in early 2027.

Claude Code added voice replies, a camera shutter, custom avatars and a Tamagotchi-style game to Meta's sample gadget.

The iOS and Android app builds a closet from Instagram photos and offers virtual try-ons and trip plans.

Funding covers community listening, peer demos, product feedback, and training, plus donated glasses for job seekers.

Wyden and Markey ask whether bystanders can delete biometric data captured by Meta’s glasses.

A $2 million grant covers medicine, physics, chemistry, biology, computer science, and mathematics projects.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views