NerdNews

A critical vulnerability in Langflow, an open-source framework for building AI applications, is being exploited to steal OpenAI and AWS keys. The flaw, CVE-2026-0768, allows for unauthenticated remote code execution and has been detected in at least 50 exploitation attempts. Threat actors are using the vulnerability to harvest administrative credentials, AWS secrets, and OpenAI API keys.

OpenAI's forthcoming Astra model is capable of finding unknown security flaws in computer systems and exploiting them without guidance. The company is taking precautions to ensure safety, including improving the model's harness and restricting responses to high-risk accounts.

Waymo argues fully autonomous vehicles require a mix of sensors, not just cameras and AI. The company takes a swing at Tesla's approach ahead of its Cybercab launch, which could be a major fight for the autonomous vehicle market.

GoPro is moving into AI data centers through a $285 million merger with Starman Optical, expanding its reach into new markets including defense, robotics, and aerospace, while continuing to produce action cameras and provide subscription and cloud services.

Apple has filed a lawsuit against OpenAI, claiming that former employees stole trade secrets to benefit the AI company. Apple says it has found 'shocking evidence' and is asking the court for expedited discovery, including the return of a Mac mini used by a former employee.

Nearly 22,000 Microsoft Exchange servers are vulnerable to hijack attacks due to an unpatched authentication bypass vulnerability, tracked as CVE-2026-62911. This flaw affects Exchange Server 2016, 2019, and Subscription Edition, allowing attackers to elevate privileges and take over all user mailboxes.

Anthropic has released Fable 5.1, a cheaper and less restrictive version of its AI model, with improved performance and zero data retention. The model is available on cloud platforms or through the Anthropic API, and includes a high-privacy service called Enterprise Frontier Safeguards.

OpenAI's ChatGPT Health now integrates with Epic's electronic health record system, allowing clinicians to import patient data and use AI to ask questions. The integration enables read-only access to health records and can help healthcare workers synthesize data for trial eligibility criteria, medication identifiers, and more.

Empirik, a Sequoia-incubated startup, has launched with $21M in seed funding to predict outages before they happen. The company uses AI to track system changes and infer potential ripple effects across the entire infrastructure, allowing DevOps and site reliability engineering teams to offload routine troubleshooting and focus on higher-value priorities.

AIR, an AI security startup, has raised $50M to help companies monitor and secure the skills and add-ons used by AI agents. The platform discovers agents, vets their skills and tools, and blocks malicious interactions. With over 20 customers, AIR aims to expand its go-to-market efforts in the US and Europe.

Google launches Google Pics, an AI-powered image creation and editing tool, to compete with Canva and Adobe Express. The tool allows users to create images based on prompts and includes editing features like object isolation and text modification.

Fable 5.1 is a significant improvement over its predecessor, offering faster and more reliable performance, clearer communication, and stronger results at lower effort. It's suitable for coding, writing, and knowledge work tasks, and its zero-data retention policy makes it accessible to enterprises. However, it may exceed limits and require fact-checking.

Waymo has expanded its robotaxi service to Denver, San Diego, and Tampa, bringing the total number of cities to 14. The company plans to gradually open access to the public, with tens of thousands already signed up. Waymo is also planning international expansion to cities like Tokyo, Munich, and London, although technical and regulatory delays may impact the timeline.

Perplexity's Hybrid Compute allows users to split tasks between cloud-based models and local models, keeping sensitive information secure on their machine. This feature can help reduce costs and improve data privacy. It is available on Apple Silicon Macs and requires a Pro or Max subscription.

HashiCorp positions HCP Terraform as a governance and control plane for AI-driven infrastructure, enabling AI agents to author Terraform configurations while ensuring policy, identity, and audit controls. This shifts infrastructure governance from human judgment to continuous and automatic enforcement.

Google's latest Android update introduces features like Motion Assist to reduce motion sickness, Guided Vision for blind and low-vision users, and personalized Google Messages. These updates aim to make Android phones more accessible and user-friendly.

Amazon's Alexa for Shopping AI assistant has launched a new feature called 'Update Me When' that sends personalized notifications when something new or relevant happens that could lead to a purchase. This feature can track new product launches, TV show seasons, concert tours, book releases, and more. Amazon is also using Alexa to source personalized deals, create shopping guides, and track product pricing history.

OpenClaw 2.0 releases with a simplified setup process, a rebuilt browser interface, and collaborative agent workflows, allowing multiple users to participate in an existing agent session while retaining its context.

The AI data center buildout is facing significant opposition, with 75% of Americans expressing opposition to data centers being built in their area. However, despite this backlash, the buildout remains massive, with demand for computing power driving the construction of new data centers. While local bans and restrictions may slow the buildout, they are unlikely to stop it entirely, as data centers can be located in a variety of locations and companies are willing to invest heavily in their construction.

Google's September Android update includes Motion Assist, Find Hub expansion, and Guided Vision. Motion Assist reduces motion sickness, while Find Hub helps locate items without a tracker. Guided Vision assists with reading fine print and locating items using the phone's camera.