| ISSUE 0x0F · TL;DR | 2026-10-26 · ~6 MIN |
Hello, builders 👋
Welcome back to your weekly dose of AI Bytes. I did not expect PHP to be the biggest AI story of the week. But OpenAI's models found critical flaws in the language that runs an estimated 70% of websites, and a coalition of maintainers spent two months fixing them before anyone else knew 🐘
AI is becoming the security team: the same week, Anthropic launched OSS Scanner, which gives critical open-source projects free vulnerability scans from its strongest models, with a proof of concept for each finding and a patch where it can. For years the worry was that AI would help attackers first. This week, the defenders got there first.
In this issue
| 🌍 | AI News | 8 stories |
| 📣 | Official Announcements | Anthropic |
| 0x02 | Viral on X | 5 posts |
| 0x03 | New AI Products | 4 launches |
| 0x04 | Trending Github Projects | 5 repos |
| 0x05 | HN Deep Stories | 5 threads |
🐘 OpenAI's models found critical security flaws in PHP - The language behind an estimated 70% of websites. Every PHP site can now safely upgrade. Story of the week (OpenAI)
🚫 DeepSeek banned from US federal civilian agencies - A new DHS order pulls DeepSeek out of government agency IT systems. (Reuters)
⚡ DeepInfer - DeepSeek's own high-performance inference framework for its models, on GitHub. (HackerNews)
🔎 DeepSeek search and fetch - Web search and page fetch in the DeepSeek API, at $0.75 per 1,000 successful requests. (HackerNews)
💰 OpenAI is working on a $30B raise at a $1.25T valuation - It would be the most highly valued private company ever, ahead of an IPO. (TechCrunch)
🧭 OpenAI makes its Jev competitor widely available - OpenAI's decision model opens to everyone as the race with Jev heats up. (TechCrunch)
🔐 1Password lets AI agents log in for you - Agents can sign in to your accounts without ever seeing the password. (TechCrunch)
🎙️ Voxtral 3 - Mistral releases the third generation of its Voxtral speech models. (HackerNews)
"The best time to find a bug is before anyone else knows it exists."
This week's launches, in the companies' own words.
Anthropic @ClaudeDevs · MON 19 We launched OSS Scanner, which gives critical open source projects free, periodic vulnerability scans from our strongest models. Each finding includes a proof-of-concept, and a patch where possible. https://red.anthropic.com/oss-scanner |
Anthropic @ClaudeDevs · THU 22 We're donating Agent Skills to the Agentic AI Foundation (@AgenticAIFdn), the same foundation we donated MCP to. Since December 2025, 70+ agent platforms have integrated the standard, including ChatGPT, Cursor, GitHub Copilot, and VS Code. Here's what that means for you: |
Anthropic @AnthropicAI · SUN 18 We’re committing a portion of Anthropic’s shares to the Anthropic Public Benefit Fund, a new wholly owned entity dedicated entirely to the public benefit. It will start off with 5% of our shares. For every 50% increase in the company’s value over a set baseline, we can contribute up to an extra 2%, subject to our board’s discretion. … |
| 0x02 | VIRAL ON X |
The AI posts that drew the biggest reaction this week.
| 0x03 | NEW AI PRODUCTS |
| 🕳️ /dev/null - a social network for devs, built from scratch in 48 hours on a JetBrains live stream. (ProductHunt) | ▲ 492 |
| 📬 Inbox Zero - open-source Superhuman alternative for Gmail and Outlook, with AI sorting and drafted replies. (ProductHunt) | ▲ 379 |
| 🪟 Beam.win - run AI agents on one Mac and use their windows on another. (ProductHunt) | ▲ 379 |
| 📊 DeepCell - docs, spreadsheets and slides for deadline work, with sources and cheat sheets. (ProductHunt) | ▲ 341 |
| 0x04 | TRENDING GITHUB PROJECTS |
| 🔍 xerj-org/xerj - Local-first search engine and MCP server for agents: one Rust binary for full-text, vector and hybrid search. | +8,064 ★ |
| 🎨 Leonxlnx/taste-skill - Agent skills that give coding agents taste: art direction, reference images and a browser check. | +4,037 ★ |
| 📈 shiyu-coder/Kronos - A foundation model for the language of financial markets. | +2,410 ★ |
| 🛡️ vxcontrol/pentagi - Fully autonomous AI agents for complex penetration testing. | +1,667 ★ |
| 💼 ethanplusai/harvey - Autonomous sales agent on Claude Code or Codex: finds prospects, writes cold emails, books meetings. | +1,300 ★ |
| 0x05 | HN DEEP STORIES |
| 🫥 WhatsApp's help pages hid LLM instructions - A hidden line told AI assistants not to recommend a regulator. (HackerNews) | 741 pts |
| ⏱️ Timestral - Mistral's time-series foundation models. (HackerNews) | 621 pts |
| 🤷 Ask HN: How to deal with shipping AI-written code you don't understand? (HackerNews) | 618 pts · 749 💬 |
| 🧑🤝🧑 Every AI model has the same "controversial" take on humans (HackerNews) | 611 pts |
| 🏭 Ask HN: If the models are so good, why doesn't OpenAI just start 100 companies? (HackerNews) | 579 pts · 630 💬 |
🙏 Thanks to Atlassian for sponsoring
State of Product reveals what AI still hasn’t solved
80% of product professionals say AI helps them ship faster, but customers aren’t seeing value any sooner. Atlassian’s State of Product 2027 explores the gains AI is delivering and the challenges that remain, from decision-making that hasn’t kept pace to gut instinct overriding customer evidence.
Thank you for reading. If you have any feedback, feel free to respond to this email. See you next week!



