Patch Tailscale and MLflow; Oracle opens OCI to Google TPUs
6 stories~2 min read
- Top storySecurity
Tailscale ships v1.104.4 to fix SSH privilege escalation bugs (opens in a new tab)
Tailscale released version 1.104.4 to fix SSH flaws named in a researcher's "Tailworm" report, where an approved session could get more rights than its local user, including through SSH forwarding. If you use Tailscale SSH, update now and tighten your SSH access rules.
- Security
Critical MLflow flaw lets attackers run code on tracking servers (opens in a new tab)
A CVSS 9.8 bug in MLflow 3.12 up to 3.16 lets an attacker upload a Python file and run it through the scorer endpoint, with no login needed on default setups. Upgrade to 3.17.0 and keep MLflow off the public internet.
- Cloud
Oracle adds Google TPUs to OCI and builds ChatGPT and Codex into its apps (opens in a new tab)
At Oracle AI World, Oracle said OCI will offer Google's eighth-generation TPUs from 2027, the first cloud outside Google to do so, plus Cerebras systems and OpenAI's Jalapeño chips. Teams get more choice beyond Nvidia, and Codex now powers Oracle's App Composer.
- Dev Tools
GitHub Copilot SDK adds server-to-server auth for GitHub Apps (opens in a new tab)
In public preview, agents built with the Copilot SDK can now call Copilot as an organization using a GitHub App token instead of a person's login. Usage is billed to the org, so automated agents stop depending on one employee's account.
- AI
Google DeepMind previews Genie 4 world model with native audio (opens in a new tab)
Genie 4 builds interactive worlds in real time from text or images, adds sound and dialogue, and lets you change the scene mid-run. It is a research preview for trusted testers for now, with Gemini API early access partners next.
- Business
Anthropic buys one-person biotech Mithril and starts its own drug programs (opens in a new tab)
Anthropic bought Mithril Medicine, whose sole employee Cody Tranbarger used Claude to run 11 outside labs, and shared results with six partners including Bristol Myers Squibb. AI labs are now doing the work themselves, though most is preclinical and trials could start late 2028.