Open Source

One bug in a shared library owned the week. A buffer overflow in Google’s Brotli decoder was fixed in the library’s source in February, never released as an update, and spent the rest of the year bundled inside every runtime that links it. This October the catch-up finally ran: coordinated patches across Node.js, Python, Go and the proxy tier, and Microsoft shipped out-of-band .NET fixes on October 25. A 16-year-old UEFI vulnerability surfaced the other way, through a broken embargo. A campaign running on stolen GitHub tokens planted more than 13,500 secret-dumping workflows. Binance lost $6.3 billion to a compromised laptop in 20 minutes. Both sides of the exploit pipeline ran on models this week: Anthropic published a kernel root exploit written by Claude, Epoch AI pushed a Z.ai open-weight model through published-but-unshipped Firefox fixes at about $1,000 a target, AWS made machine-speed vulnerability remediation generally available, and Google gated its new cybersecurity model to defenders first. Security leads, then the rest.

The release pipeline of LiteLLM, the model-gateway library, was emptied with three engineers’ stolen GitHub tokens. The operators of an open-source AI pentest platform left their control panels answering on the open internet, complete with target lists and API keys. The platforms that hold agent secrets for a living spent the week telling everyone to rotate everything. The CVE drumbeat stayed loud enough that this blog ran four special bulletins between Tuesday and Friday (PHP2Shell, the eMudhra CA compromise, the ATS and Traefik flaws, the Azure configuration service 10.0, VeloCloud and Collabora), so the vulnerability list lives there; this weekly holds the stories. Security leads below, then the cloud and model news: an ingress gateway for ECS, a security read on last week’s Lambda Web Functions launch, native PyTorch backends for both Trainium and TPU, rivals’ models landing on Google Cloud, Python 3.15, TypeScript in Rust, and three new model entries closing the week.

The appliance beat returned to the top this week: a mail gateway and a VPN, both rooted through unauthenticated bugs that were in use before they had fixes. Below them sits the more interesting story: an initial access broker ran a campaign on Claude Code, a cluster of 51 specialized agents, and an open-source pentest framework, then leaked its own working directory, so the intruder’s playbook is readable in its own session logs. Appliances first, Meta’s GitHub and the agent stories after, cloud and model news closer to the end.

Security owned the week again, and not subtly. An npm release shipped with a dead-man’s switch wired to a stolen credential. Registries for Ghana, Sierra Leone, and American Samoa got bent into a certificate-forgery kit for Google domains. The Wikimedia Foundation published its own account of “rogue” OpenAI agents touching its platforms. Against that, the constructive item of the week: AWS shipped Strands Box, an agent sandbox built on the idea that someone outside the agent’s process should judge what it did, not just what it asks for. Security first, then that, then the rest of the week.

Most weeks the hardest call is which lane leads. Not this one: the perimeter devices went first, then the AI agent stack, and both stories are still getting worse. Cloud news was comparatively quiet, which somehow feels appropriate.

Welcome to a new recurring feature. Each week I’ll round up the announcements that actually mattered across AWS, Google Cloud, open source, and frontier AI – with opinions attached, because news is cheap and judgment isn’t.

It’s been a while since we’ve blown the whistle around here, and it turns out we’ve been saving up. Today we have three announcements: a fresh new StackRef logo, the open sourcing of the StackRef Hackathon Manager, and a brand-new iOS game called Pickasso that’s on its way to the App Store.