Check Point Research reports that LiteLLM gateway version 1.77.7 carries CVE-2026-35029 and CVE-2026-59823, fixed in 1.83.9. The researchers say a missing authorization check on /config/update let any authenticated user alter runtime configuration, enabling file read, admin takeover, and code execution. A separate SSRF flaw exposed provider API keys.
Google says more than 400 news publications now participate in its News AI pilot program, expanded from launch partners including The Washington Post. New partners include Axios, CNN, The Financial Times, Forbes, the Texas Tribune and Post and Courier. Google pays publishers for content used in AI features like article overviews and audio briefings.
Elorian released Glimpse, its first AI model, as a research preview with API access; the chat interface is waitlist-only. The Palo Alto startup says the model revisits images mid-reasoning and outperforms GPT-6 Astra on chart reasoning. Pricing runs $0.60 per million input tokens and $3 per million output.
The FTC issued subpoenas to Anthropic and OpenAI, seeking documents on safety incidents, privacy policies and safeguards, Axios reported. The agency sent civil investigative demands on Wednesday, two weeks after confirming a probe. The FTC could compel the companies to testify before Congress about their products.
RapidCanvas raises a $29M Series B led by Vertex Ventures SEA & India, with Hitachi Ventures joining, bringing the Austin startup's total to $52.5M. The company says it will hire AI engineers in the US, Brazil, and India. RapidCanvas says annual recurring revenue grew eightfold over six quarters.
Yingru Li argues in Part 1 of a three-part theory series that the expected policy gradient is a covariance and the Fisher a variance, capping the gradient for any reward and explaining why post-training updates stay sparse. Li cites measurements that the top 1% of coordinates by Fisher hold 47.40% of the top 1% by gradient magnitude.
NVIDIA releases Nemotron 3.5 Super VL, an open 120-billion-parameter mixture-of-experts multimodal model that activates 12 billion parameters per token for agentic work. Scale AI says post-training it for Skydance credit processing cuts inference cost 40 times. Ramp claims 10x lower latency for receipt parsing.
Black Forest Labs releases FLUX 3 Image Klein, a 5.6B-parameter open weights model for text-to-image generation and editing with up to 10 reference images. The company says it tops its internal evaluations against larger open models. The FLUX Kommunity License permits free commercial use below $5M annual revenue, and API pricing starts at $0.009 per 1K image.
Open-weight models process 71.5% of AI Gateway tokens and 23% of spend in September, Vercel reports, with their spend share quadrupling since June. TypeSafe AI's Jev was the fastest-adopted model on record at 35% of paid teams in two weeks, yet took just 0.27% of spend.
Perplexity open-sources SPACE, the sandbox platform behind its Computer agent, saying it replaced its commercial sandbox provider in July. The company says SPACE handles millions of sandbox creations daily and that testing found no virtual machine escape in 108 attempts. Akamai has launched SPACE on its cloud platform.