October 23, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
Claude on Google Cloud, operated by Anthropic
Anthropic launched Claude Models on Google Cloud (Anthropic managed), where Anthropic operates the Claude API and you reach it through your Google Cloud project. Google Cloud IAM controls access, Google Cloud Marketplace handles billing, and fast mode is available for Claude Opus 5.5.
Anthropic donates Agent Skills to the Agentic AI Foundation
Anthropic is donating Agent Skills to the Agentic AI Foundation and says the standard will stay open, community-driven, and vendor-neutral.
Running frontier-class AI models across 8 NVIDIA DGX Spark nodes
NVIDIA shows how developers can run frontier-class AI models across eight DGX Spark nodes, with multiple models in parallel and chained inference calls.
Security
LiteLLM release pipeline hacked to spread info-stealer malware
Attackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
PHP security release: PHP2Shell flaws exploited four days before patches
The PHP Foundation shipped a security release that PHP users should install now. Amazon Threat Intelligence says attackers exploited the PHP2Shell flaws four days before patches arrived.
GitLab patches max-severity code execution flaw
GitLab released security patches for a maximum-severity flaw in its Regular Expression Compiler that lets remote attackers run arbitrary code on vulnerable servers.
Railway tells developers to rotate secrets after possible breach
Cloud platform Railway detected suspicious activity on systems that store customer environment variables and urges users to rotate their secrets immediately.
Arista patches actively exploited VeloCloud Orchestrator zero-day
Arista Networks released updates for a zero-day in VeloCloud Orchestrator On-Prem that attackers are already exploiting.
Capcom confirms data breach affecting 11.7 million accounts
Hackers breached the CAPCOM ID membership service and exposed more than 11.7 million email addresses and associated information.
Web
eMudhra exits the global SSL/TLS certificate business
Certificate issuer eMudhra is withdrawing from the global SSL/TLS certificate market.
IT
Quad9 to exit France
DNS resolver Quad9 announced it is leaving France. The post drew more than 1,000 points on Hacker News.
Other
Switch 2 jailbroken
A developer published a jailbreak for the Nintendo Switch 2 and documents the method in a technical blog post.