The last 7 days in tech, AI & LLMs
October 22, 202627 stories from 24 sources

Digital Dhaba

Tech Digest

Your quick roadside stop for the week in tech.

Written & published by  Blogs by Kush
A kid in glasses reading the Digital Dhaba newspaper beside chai, samosas, tech books and a laptop

The last 7 days in tech, AI & LLMs

Top stories

01

DeepSeek open-sources DeepInfer

the inference framework behind DeepSeek's production services is now Apache 2.0, though it ships without the pieces needed for a full serving stack.

02

Critical PHP flaws allow unauthenticated remote code execution

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical holes, and updating is the only complete fix.

03

eMudhra intermediate CA keys compromised

eight intermediate CA private keys can be recovered by anyone, so software with bundled trust lists needs updating.

04

Claude reveals ECDSA curve origins

Claude traced the NIST curve seeds to a simple 1990s-style random number generator, ending years of backdoor speculation.

05

Muse Spark Open

Meta released the weights of an 816B-parameter multimodal model that two Mac Studios can run.

AI & LLMs3 stories

DeepInfer: High-performance inference framework for DeepSeek models

github.com · ▲ 2298 HN · 881 comments · also in Latent Space, TLDR AI

DeepSeek open-sourced the inference framework behind its large-scale production services under Apache 2.0. It supports DeepSeek-V4.1-Flash on NVIDIA SM100 GPUs and Huawei Ascend 950 NPUs, with batch-invariant inference, deterministic sampling and structured outputs. The KV cache system and load balancing needed for a complete service are not included.

Claude reveals ECDSA curve origins

Asked by an Anthropic employee, an internal research model found in under half an hour that the NIST P-192, P-224, P-256, P-384 and P-521 seeds came from the C library's lrand48 generator seeded with a Unix timestamp, not from hashing a phrase. It is not a cryptographic break. It makes a deliberate backdoor much less plausible.

Muse Spark Open

research.meta.ai · ▲ 919 HN · 478 comments · also in The Neuron

Meta released weights for a natively multimodal model with 816B total parameters (42B active) and a 1M-token context window, aimed at coding and agentic work. It runs on two Apple M5 Ultra Mac Studios via MLX and is licensed under the Muse Model License with limited commercial terms.

Research Papers3 papers

PremiseCheck: Efficient Fact-Checking of Human and AI Peer Reviews

arXiv · ▲ 691 upvotes · arXiv · Code ★ 5

In short: An LLM rewrites each review comment as explicit premises without reading the paper, and a cheap decision model then checks each premise against the paper. The authors also built ReviewFact, a benchmark of factual errors in review comments.

Why it matters: It reaches accuracy comparable to GPT-5.5 at about half the cost, and a quarter of the cost on NLP reviews.

LEV: Thinking Fast and Deep with Looped Decision Models

arXiv · ▲ 602 upvotes · arXiv · Code ★ 7

In short: LEV reruns a model's layers in a loop to "think deeper" on hard questions, scoring the options after every loop step instead of generating tokens.

Why it matters: A 2.6B model goes from 63.2% to 76.2% on JevBench as depth rises from one to four. Choosing depth per question saves 15–24% of compute for under one point of accuracy.

MJev-Spatial: System One Spatial Intelligence via Native Attention Matching

Mind Lab · ▲ 560 upvotes · arXiv · Code ★ 17

In short: Instead of generating text answers, the model treats each candidate answer as a class and scores it in a single forward pass. It is built on Qwen3.5-4B and trained on 12.3M spatial question-answer pairs.

Why it matters: It scores 65.64% overall, beats its base model on all twelve benchmarks, and runs 2.5x faster than the fastest autoregressive baseline.

Dev Tools & Engineering3 stories

eMudhra intermediate CA compromise

emudhra.we-have-a-problem.com · ▲ 1188 HN · 468 comments · also in Simon Willison

Private keys for eight eMudhra intermediate CAs were incorrectly generated, so anyone can recover them from the certificates. Firefox and Chrome have blocked them since October 17, Apple since the 19th and Microsoft since the 20th. Clients that don't check revocation, including many command-line tools, need software or trust-store updates.

Tsrs: A Port of TypeScript to Rust

blog.cloudflare.com · ▲ 427 HN · 209 comments · also in Cloudflare Blog

Cloudflare and VoidZero are working with Max Schwenk of Owner.com on a faithful Rust port of the TypeScript compiler, developed with the TypeScript team and not a fork. Early benchmarks show it up to 8x faster and using about 70% less memory than TypeScript 7.0. It's available as npm install tsrs.

Linux 7.3

Linus Torvalds released Linux 7.3, a record release with 18,765 non-merge commits from 3,021 developers, 807 of them first-timers. Changes include the fchroot() system call, the failfs filesystem and completion of sched_ext subscheduler support. The 7.4 merge window opens next.

Cloud & Infra2 stories

Google Cloud outage affects almost all banking and other operations in Europe

A Google Cloud outage disrupted banking and other services across Europe, with Neowin naming HSBC, Revolut, Bank of Scotland, Lloyds and Equifax among those hit.

AWS Weekly Roundup: AWS Lambda Web Functions, Amazon S3 on the Vercel Marketplace, and more

AWS News Blog

Lambda Web Functions runs a standard HTTP server (Express, Hono, Fastify, Next.js) with no adapter, and one aws lambda-web deploy command returns a live HTTPS URL. Each environment handles up to 128 concurrent requests and billing meters CPU time used. S3 buckets can also now be provisioned from the Vercel Marketplace.

Startups & Funding3 stories

Anthropic tells investors quarterly revenue up nearly 50% to $16.8bn ahead of IPO

Simon Willison

Per an FT report on Anthropic's investor day, revenue was about $4.8bn in Q1, $11.5bn in Q2 and $16.8bn in Q3. Adjusted operating margin, excluding stock-based compensation, was 11%. The figures come from people with knowledge of the matter.

Year-old AI lab Flapping Airplanes raises $1B at a $6B valuation

TechCrunch

The Series A was co-led by Index and Lux, nine months after a $180M seed at a $1.5B valuation. The lab is trying to train large models with far less data, so that they cost less to train and run.

Legal AI startup Legora raises $550M Series E at $8.8B valuation

TechCrunch

Atreides Management led the round. Legora's annual recurring revenue now exceeds $200M, up from $100M in April. Rival Harvey raised $550M at $15.5B a month ago.

Security3 stories

Security advisory: Critical remote code execution vulnerabilities, update now

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix CVE-2026-109618 and CVE-2026-109619, both able to give unauthenticated attackers remote code execution. Risk is highest for mod_php, with a demonstrated exploit. The PHP team says only updating is a complete fix, and workarounds such as disabling session.upload_progress only reduce exposure.

AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware

Citizen Lab found Al Jazeera devices infected with Candiru spyware via ads bought by Israeli firm Discover-Tech, whose Controlium platform fingerprints and infects devices when an ad renders. Google, IAB Europe, Beeswax, Vungle and Eskimi have cut off Discover-Tech's access.

Feds suspect ransom negotiator ran ShinyHunters extortion site

krebsonsecurity.com · ▲ 262 HN · 135 comments · also in Krebs on Security

Investigators pursuing ShinyHunters, which recently stole sensitive FBI data, identified executives at two ransomware negotiation firms with unusually close ties to the group. Sources say one US executive helped operate a site that pressured victims into paying.

Other Tech2 stories

Neural networks are clean

already-clean.goodfire.com · ▲ 840 HN · 341 comments

Goodfire's Nick Cammarata argues that polysemantic neurons and superposition were misread, and that networks are already legible building blocks. With ordinary architectural fixes, 99–100% of InceptionV1's last-layer neurons became easily interpretable. If it holds, researchers can study networks directly instead of first untangling them.

Solar surpasses nuclear power globally for first time

pv-magazine.com · ▲ 697 HN · 447 comments

pv magazine reports that global solar generation has overtaken nuclear for the first time.

Quick hits

■DeepSeek-V4.1-Flash-1017 — a minor MIT-licensed update that improves reasoning, coding, agentic and visual benchmarks while cutting task time and output length.
■DeepSeek banned from U.S. federal civilian agencies — Homeland Security ordered agencies to stop buying DeepSeek and remove it, including third-party tools built on it.
■WhatsApp's help pages hid LLM instructions — redact.dev found invisible text on 80 help pages telling an AI not to recommend a regulator in some cases.
■OpenCode hacked — a breach exposed API keys for about 1.4% of Console users, and some reported charges over $1,000. via The Neuron
■Ousted Savannah officer gave ICE agent husband Flock access — an audit flagged 983 license-plate searches on her account between January and July 2026.
■Blacksmith hits unicorn valuation — the CI platform raised a $66M Series C led by Sequoia at a $1B valuation.
■Tenstorrent raises $1.5B — the Nvidia rival is valued at $6.2B as it scales its open-architecture AI chips. via The Neuron
■Zoom deepfake detection — Zoom announced live video and audio analysis that shows a confidence indicator, due in December. via The Neuron

Try this

One AI habit worth picking up this week.

Make sense of a spreadsheet someone else left behind

Anthropic's walkthrough · via The Neuron

When you inherit someone else's workbook, ask an AI to explain it and log problems before you let it change anything. Work on a copy, then verify each flagged issue yourself or with the previous owner.

I inherited this spreadsheet and need to understand it before changing anything. Don't edit it. 1. Explain how the tabs connect and what each key formula does. 2. List anything undocumented, hidden, hardcoded where neighboring cells are formulas, or linked to outside files. 3. Give me an issue log: cell, what's wrong, which outputs it affects, and High, Medium, or Low risk.

■Why it works: Understanding the file first surfaces unwritten assumptions, like a floor that keeps a tax line from going negative, before any edits can break them.

Worth your weekend

Essays, talks, papers and books worth slowing down for, new or old.

Intro to Large Language Models

Andrej Karpathy · Video · 1 hr · 2023

A general-audience introduction to what large language models are, where they're heading, and the new security problems they bring. It's among the clearest non-technical explanations of what's inside a chatbot.

■Takeaway: Thinking of an LLM as the core of a new "operating system" helps explain where AI products are going.

15 Times to use AI, and 5 Not to

Ethan Mollick · Essay · 10 min read · 2024

A practical guide to when AI helps and when it hurts. Use it when you need volume, can check the result yourself, or want to rewrite something for a different audience. Avoid it when the point is to learn or accuracy is critical.

■Takeaway: Use AI where you can easily judge the quality of what it gives you, and not for thinking you need to do yourself in order to learn.

Steve Jobs' 2005 Stanford Commencement Address

Steve Jobs · Talk · 15 min · 2005

Apple's co-founder tells three stories, about connecting the dots, love and loss, and death, and ends with "Stay hungry. Stay foolish." It's short, and it holds up well for anyone building a career in tech.

■Takeaway: You can only connect the dots looking backward, so trust that following your curiosity will add up.

From the newsletters

The Pragmatic Engineer
data from 27 companies on whether AI spend changed shipping velocity
The Pragmatic Engineer
how AI is reshaping management and career ladders
Latent Space
agent harnesses that face the human instead of the machine
Latent Space
AI infrastructure's newest decacorn
Interconnects
US and Chinese moves toward controls on open models
The Rundown AI
Altman on how the safety race could end
The Neuron
lab-grown brain cells studied to speed up video generation
TLDR Tech
the day's top tech headlines

That's the week. Chai's on us next week.

—  Blogs by Kush

Forward to a friend