Meta unveils Muse Spark, the first model from its new Meta Superintelligence Labs. The Scale AI acquisition, the shift from open-weight to proprietary, multi-agent reasoning via Contemplating mode, and the evaluation awareness problem.
Anthropic's unreleased Claude Mythos Preview discovered thousands of zero-day vulnerabilities including a 27-year OpenBSD bug and a 16-year FFmpeg bug. Deemed too dangerous for public release, it ships exclusively through Project Glasswing to 12 founding partners.
Zhipu AI's GLM-5.1 is a 744B MoE (40B active, 200K context, MIT) targeting long-horizon agent tasks. Hits 58.4% SOTA on SWE-Bench Pro (edging out GPT-5.4 and Claude Opus 4.6) and sustains performance across 8-hour sessions with 6,000+ tool calls without degradation.
9 Japanese-specialized LLMs as of April 2026 — LLM-jp-4 (11.7T tokens from scratch), PLaMo, Nemotron Nano 9B JP (#1 sub-10B on Nejumi 4), Swallow 30B-A3B, Namazu — broken down by whether they were scratch-trained, continued pre-trained, or post-trained, with size, license, benchmark scores.
WordPress staple plugin ACF 6.8 adds Abilities API integration, automatic Schema.org structured data, and WP-CLI commands. How AI agents can now discover and manipulate WordPress content models.
The fix for CVE-2024-41110 missed the upper bound — request bodies over 1MB bypass AuthZ plugins. All Docker Engine versions before 29.3.1 are affected.
Breakdown of the Claude Code quality-regression issue: an AMD/IREE developer analyzed 17,871 thinking blocks and 234,760 tool calls, linking adaptive-thinking shrinkage and redaction changes to worse coding behavior.
Anthropic expands its partnership with Google and Broadcom to secure multi-gigawatt TPU infrastructure targeting 2027 operations. Annual revenue run rate surpasses $30B, with enterprise customers spending over $1M exceeding 1,000.
Cloudflare's Organizations feature is now in public beta for enterprise customers. After unifying the authorization system with 133K lines added and 32K deleted, it enables centralized multi-account management and shared policy distribution.
CVE-2025-59528: A Function() constructor-based arbitrary code execution vulnerability in Flowise's CustomMCP node is being actively exploited. Over 12,000 instances remain exposed on the internet.
A security scan of 50 open-source MCP servers found 61% lacked input validation. This article covers real vulnerabilities in high-profile servers like Playwright MCP and Puppeteer MCP, and examines when to skip MCP entirely and use CLI tools directly.
