All 49 episodes, each with a full transcript. Search for a story, a company or anything said on air, or narrow by topic.
Topics
Companies
15 episodes of 49
A 16-year-old buffer overflow in EDK II firmware can run code before the operating system boots. Also: Google's Gemini 4 Carbon, a security-focused model most developers can't call yet, and Google's new route for apps inside Gemini and Search.
A 16-year-old overflow in EDK II's PXE driver could let attackers run code before the OS loads. Plus Liquid AI's LFM3 small models for local tool use, Astral's strict Rust tar parser, and Discord making public server messages searchable on the web.
Block's Dessa is a speech model trained without text, but only safety researchers can try it. Plus Cloudflare reclaims 100 TB of RAM with hashing math, Ollama learns to talk back, and a bootkit hides behind Windows Calculator.
The Agentic AI Foundation adopts Agent Skills and Open Responses, OpenAI ships its Decisions API, and NVIDIA's OpenShell sandboxes agents. Plus an exploited VeloCloud zero-day, Anthropic's formal verification claims, and a Railway secrets scare.
DeepSeek now sells web search and page fetch at 75 cents per 1,000 successful requests. Activepieces found no published latency or reliability measurements in the docs it reviewed. Also: Vercel's session view for AI Gateway, Linux 7.3, and Google's switch from Pytype to Pyrefly.
A compromised ConnectWise backup credential reached 173 Microsoft 365 tenants. DeepSeek ships a million-token Flash snapshot, and Drupal patches two critical remote code execution flaws. Plus an ESP32 emulator that runs in your browser.
Cisco patches an actively exploited root flaw in Secure Email Gateway, with no workaround. Grok Voice 3.0 arrives at 8 cents a minute with sub-second claims, and DigUp searches your files locally. Plus a Chrome exploit, a phishing takedown, and two bots that can't hang up.
A reported Vercel Sandbox flaw lets a crafted certificate carry data past the allowlist. Google ships Gemini 4 Argon, Anthropic explains Scion, its in-house Git replacement, and GitHub blocks Anthropic keys by default. Plus an open-source Rust CAD app.
Meta launches Muse Wonder, but its top model, Wonder Full, stays out of the API. GitLab patches a CVSS 10.0 CI/CD code-execution flaw, and AWS brings Express and Next.js to Lambda Web Functions. Plus GridCraft, a Rust spreadsheet.
An open-source autonomous pentesting agent, ARTEX, and the question of scope. Credential-stealing GitHub Actions workflows hit more than 340 repositories, an Anthropic model sent Philadelphia police a false tip, and Python 3.15, uv 0.13 and Ruff 0.17 shipped.
Claude Haiku 5.5 cuts list prices 90 percent on short prompts, but a new tokenizer may eat some of that. Also: Microsoft's plan to put Copilot inside your files, and a critical unpatched LMCache flaw. Plus Docker Agent, FortiBleed and a fake Meta ad.
Microsoft's ThinkingBox benchmark grades agents on database state, not their own report. Cloudflare wants developers to build the next Git platform for agents, with credits as the prize. Plus the Coucou notch app, Zig 0.17, Istio 1.31 and uv.
SvelteKit 3 is stable, with config moved into Vite and a new hash lib import alias to migrate. Cloudflare ships Clef, open-weight decision models that return probabilities instead of text. Plus Pi 1.0 and durable agents, a local Qwen repo, and Copilot driving desktop apps.
Google unveils Gemini 4 Argon, a coding model with a 1 million token output limit that only trusted cyber defenders can use for now. EDG's C and C++ compiler front end goes open source, and Aurora PostgreSQL can now query Iceberg and Parquet data directly.
OpenAI launches Dots, always-on agents with their own cloud computers. GPT-6.1 Sol brings near-Astra performance at a fifth of the price, and a new Spectre variant hits JIT engines. Plus Codex cloud environments, Magpie, and a NetScaler zero-day.