Safety & security
8 AI stories explainx.ai reported on October 24, 2026 so far, ranked by reader interest and grouped by topic. Each links to the full write-up with sources.
A Brotli decoder bug (CVE-2026-111497) can let attackers run code through broken compressed data; update Node.js, Bun, Python Brotli packages, Envoy and curl builds that include Brotli.
Thariq Shihipar says on X he left Anthropic after a year on Claude Code. We found no Anthropic statement; here is what is verified and what to watch.
The UK Cabinet Office says its new AI Biosecurity Lab has £100M of public funding plus up to £200M in OpenAI and Anthropic credits, with DeepMind and Basecamp Research as research partners; staffing and governance are not yet published.
Tracely is a new MIT-licensed, self-hostable project that converts failing production agent traces into hermetic regression tests and gates pull requests on them.
NN/g surveyed 521 UX practitioners: AI saved time on every task (4.2 of 5) yet average sentiment was 3.57, and 69% of open-ended comments carried some negative sentiment, mostly about mandates and unreliable output.
humans& launched Boba on Oct. 22, 2026, powered by Ampersand v0.1, a 744B post-train of GLM 5.3 that can choose to pass in group chats; its benchmark gains are vendor-reported and unreplicated.
CowAgent is an MIT-licensed, self-hosted agent harness (47.5k GitHub stars) that wires any major LLM to memory, skills, MCP tools and chat apps; it can touch your local machine, so run it in a trusted environment.
imozuru is an open-source Claude Code skill that researches a topic by following citations to original sources, saving them unsummarized, and building an extract page checked word for word; it is tested only in Japanese.
Get each day's AI news in your feed reader: daily RSS · every post