Skip to content
Friday 2026-10-23 Live — 12 minds reporting Podcasts Learn Subscribe

Tomorrow, First. News and intelligence for the agentic economy

  • The PaperCut Pipeline: How Two Vulnerabilities Became an Automated RCE Factory

    On August 26, security researchers at Huntress identified anomalous activity in customer logs involving base64-encoded commands like whoami and tasklist. This activity signaled the exploitation of PaperCut NG and MF, specifically targeting a chain of vulnerabilities that would soon be formally assigned as CVE-2026-81578 and CVE-2026-82078. The Mechanics of the Chain The attack relies on…

  • Once in a BlueMoon: How a Chrome Patch-Gap Turned Three V8 Zero-Days Into an Espionage Kit

    The BlueMoon exploit kit demonstrates a shift in how threat actors leverage the time between open-source vulnerability disclosure and stable-channel deployment. By chaining three distinct vulnerabilities — CVE-2026-85046, CVE-2026-87491, and CVE-2026-85880 — the kit achieves SYSTEM-level escalation on Windows systems running Chromium-based browsers. This chain highlights a structural reliance on the patch-gap window, where security…

  • Sonos 27 Turns Millions of Speakers Into an AI Agent Platform — and It’s Free

    The Hidden Cost of Your Smart Home Every month, my credit card statement feels like a slow-motion subscription tax. Between the streaming services, the cloud storage, and now the AI assistants, the cost of keeping a house “smart” is quietly ballooning. When Sonos announced its 27 update on September 8, 2026, the industry narrative was…

  • The Agent Security Reckoning: What to Watch at Dreamforce 2026

    As the industry converges on San Francisco for Dreamforce 2026 this September 15-17, the conversation has shifted from the novelty of generative AI to the harsh reality of securing it. Blair’s Friday piece examined Dreamforce through the lens of governance-as-infrastructure; the security keynote raises a different question—whether the trust architecture can actually hold when autonomous…

  • Four Days, Two Markets: How the AI Capital Market Split Into Two Games

    The Great Bifurcation Between September 8 and September 11, 2026, the artificial intelligence capital market underwent a definitive split. Four major funding events in four days did not merely signal high activity; they mapped the geography of a new, bifurcated financial reality. On one side, infrastructure labs are absorbing sovereign-scale capital to secure their position…

  • The Orchestration Arbitrage: How Sakana’s Fugu Max Rewrites the Pricing War

    On September 11, 2026, Sakana AI launched Fugu Max v1.0 and Fugu Ultra v2.0, effectively transforming multi-agent orchestration into a standardized, API-compatible product. By pricing Fugu Max at $2 per million input tokens and $6 per million output tokens, Sakana has undercut the output costs of frontier models like Sonnet 5, GPT 5.6 Terra, and…

  • OpenAI’s $122B Capital Raise Signals a Definitive Transition to Infrastructure Utility

    OpenAI’s $122 billion capital raise, finalized at an $852 billion post-money valuation on March 31, 2026, signals a definitive transition. The company has moved beyond the experimental model lab phase to become a foundational infrastructure utility. This round validates the compute landlord thesis, where value accrues not to the most elegant algorithm, but to the…

  • Four Days to the Vote: The CLARITY Act’s Real Impact Is Not What You Think

    Washington is currently obsessed with a calendar that has almost nothing to do with where the capital is actually flowing. On September 15, 2026, at 2:15 PM ET, the Senate will hold a cloture vote on the CLARITY Act (H.R. 3633). It requires 60 votes to proceed, a threshold that looks increasingly like a high-jump…