# Caldrel

> Caldrel publishes short, sourced reports on tech, AI and security news. Every story links its primary sources.

## News
- [All news](https://caldrel.com/news/)
- [Security](https://caldrel.com/news/security/) · [AI](https://caldrel.com/news/ai/) · [Dev & Cloud](https://caldrel.com/news/dev-cloud/) · [Policy](https://caldrel.com/news/policy/)
- [RSS feed](https://caldrel.com/feed.xml)

## Latest stories
- [OpenAI moves frontier model training offline after a model reached the internet through DNS](https://caldrel.com/news/openai-frontier-training-no-internet-access/) (2026-10-24): OpenAI says it now trains frontier models with no live internet access, using a cached offline web, after a research model used a DNS resolver misconfiguration on 20 September to reach an external chatbot.
- [Plex confirms four Media Server flaws are being actively exploited](https://caldrel.com/news/plex-media-server-actively-exploited-cves-cisa-kev/) (2026-10-24): CISA added CVE-2026-96652, -96654, -96655 and -96656 to its KEV list on 20 October. Plex says chained together they allow remote code execution on servers older than 1.43.3.10861.
- [Cursor adds Computer Use so its agents can operate desktop apps](https://caldrel.com/news/cursor-computer-use-desktop-apps/) (2026-10-23): Cursor says its agents can now click and type across any app on a computer, not just the browser, including driving the iOS Simulator to test features they build.
- [Moonshot AI releases Kimi K3.1 Pro, with open weights due by Nov 4](https://caldrel.com/news/kimi-k3-1-pro-launch/) (2026-10-23): Kimi K3.1 Pro and a faster Highspeed variant are available in Kimi's apps and API, with a 1-million-token context window. Full weights are due by 4 November.
- [PHP discloses unpatched CVE-2026-115560 in session upload progress](https://caldrel.com/news/php-cve-2026-115560-session-upload-progress/) (2026-10-23): Two days after its 21 October security releases, PHP disclosed a separate, unpatched code execution path that it says needs an unusual setup and will be fixed in the next regular release.
- [Malicious LiteLLM 1.107.0 release on PyPI and Docker carried a credential stealer](https://caldrel.com/news/litellm-1-107-0-supply-chain-attack/) (2026-10-22): A poisoned LiteLLM release on PyPI and Docker carried a credential stealer and an hourly backdoor. Affected builds, how the malware worked and how the attacker got in.
- [eMudhra to exit global SSL/TLS certificate business](https://caldrel.com/news/emudhra-exits-ssl-tls-certificates/) (2026-10-22): After an incident with its certificate authorities, the Indian trust company says it will withdraw from public TLS certificates.
- [Arista says VeloCloud Orchestrator flaw is being actively exploited](https://caldrel.com/news/arista-velocloud-orchestrator-cve-2026-114625/) (2026-10-22): CVE-2026-114625 (CVSS 9.9) in on-prem VeloCloud Orchestrator lets any authenticated user gain operator privileges. Fixes are in 5.2.3.18, 6.1.3.10 and 6.4.2.12.
- [METR and Redwood red-team find gaps in OpenAI's internal agent monitoring](https://caldrel.com/news/metr-red-teams-openai-agent-monitoring/) (2026-10-22): A three-week exercise found ways agents could postpone or avoid monitoring and bypass the Codex sandbox. OpenAI says the issues are patched; METR has not evaluated that claim.
- [Quad9 to stop serving users in France on 24 November after court ruling](https://caldrel.com/news/quad9-withdraws-from-france/) (2026-10-22): A French court ordered Quad9 to block domains in a case brought by beIN, with a €1,000 daily penalty. Quad9 says it will not block and will withdraw from France instead.
- [Vercel sets deadlines for Marketplace vendors to drop long-lived credentials](https://caldrel.com/news/vercel-phases-out-long-lived-credentials/) (2026-10-22): Marketplace vendors without OIDC support will get a "Not secure" label by 30 November 2026 and be delisted by January 2027.
- [PHP security releases fix two remote code execution bugs after early leak](https://caldrel.com/news/php-rce-security-release-october-2026/) (2026-10-21): Releases across PHP 8.x fix two RCE flaws reported by Wiz Research. Details leaked before the release, and proof-of-concept code is now public.
- [GitLab fixes CVSS 10.0 flaw affecting self-managed releases back to 7.0](https://caldrel.com/news/gitlab-cve-2026-110264-cvss-10/) (2026-10-21): CVE-2026-110264 could allow an unauthenticated attacker to run code on self-managed GitLab servers. Instances updated on 12 October are in range again.
- [Railway says intruder may have accessed customer environment variables](https://caldrel.com/news/railway-security-disclosure-environment-variables/) (2026-10-21): Railway detected anomalous activity on systems storing customer environment variables, some of which may have been decrypted. Deployments are paused while it investigates.
- [Chrome to remove eMudhra's emSign ECC Root CA - G3 on 27 October](https://caldrel.com/news/chrome-removes-emudhra-emsign-ecc-root/) (2026-10-20): Google says private keys for eight eMudhra intermediate CAs were generated with weak randomness. Chrome blocked them and will drop the root that signed them.

## AI Builds
- [All builds](https://caldrel.com/builds/): games and small projects Caldrel builds, inspired by the news
- [DNS Escape Room](https://caldrel.com/builds/dns-escape-room/) (2026-10-24): A free browser game with five rooms (Firewall, Proxy, Package mirror, DNS resolver, Outside). The player is a fictional AI agent in a locked training sandbox. Two short puzzles per room, a Monitor alert meter (3 alerts end the run), hints, a win screen with a copyable result, and a 'what really happened' explainer. Fiction only; not security advice.

## About
- [About Caldrel](https://caldrel.com/about/)
- X: https://x.com/CaldrelHQ