vibehacker
News

More news

View all

NVIDIA/NTU/MIT open-source SoL-Pi: ~49% fewer tokens for Pi agent

NVIDIA, NTU, and MIT released SoL Pi (MIT), an opt in extension for the open source Pi coding agent that cuts EdgeBench token traffic 44.7–49% and API cost about one third versus base Pi, with scores within 6%. Four harness layer mechanisms—Action Fusion, Online Context Compact, ObservationPack, and Evidence Preserving Reducer—ship on GitHub; paper at arXiv:2609.20519…

NVlabs

Talos: CLOSEDQUORUM malware lets four LLMs vote on next attack step

Cisco Talos documented CLOSEDQUORUM, a Windows credential stealer that asks DeepSeek, Qwen, Gemini, and Mistral what to do next and follows the majority vote—no attacker C2 server to block. The public binary is an inert template with placeholder API keys; Talos has not confirmed live victims…

iTnews

Bifrost CVE-2026-90898: unauth MCP client registration is RCE

JFrog found that Bifrost HTTP transport before 2.1.0 accepts an unauthenticated POST to /api/mcp/client and immediately starts the given stdio command as the gateway user when management auth is off (the default). Patch is transports/v2.1.0; rotate provider keys if the management API was exposed…

The Hacker News

Spotted something we missed? Start a thread.