Anthropic's compute bill, GitHub CI lockdown and live Node-RED attacks
8 stories~3 min read
- Top storyAI
Anthropic's amended IPO filing shows $33.2B nine-month revenue and $895B compute bill (opens in a new tab)
Anthropic's revised S-1 reports nearly $17B in Q3 revenue, up 46% on Q2, while compute costs rose 77% and it has signed about $895B in compute deals. If you build on Claude, watch pricing and rate limits as the company chases margin before listing.
- Dev Tools
GitHub will block pull_request_target in public repos by default from December 2 (opens in a new tab)
GitHub moved enforcement back from November 2 and will first run brownouts on November 9 and 16 (16:00–18:00 UTC). If your public repo uses this trigger for bots or labelers, audit workflows now or add an explicit Actions policy to keep them running.
- Security
Max-severity Node-RED bug is now being exploited to drop Linux malware (opens in a new tab)
VulnCheck says attackers began exploiting CVE-2026-58115, a CVSS 10 missing-authentication flaw in Node-RED on devices such as Siemens SIMATIC IoT2050, on October 30. If you run Node-RED, make sure its HTTP editor is not reachable from the internet and that authentication is turned on.
- Security
Trigger.dev says an attacker accessed customer environment variables (opens in a new tab)
The AI workflow platform says an attacker read environment variables for a subset of organisations, which it has not named, before the exploit was blocked. If you use its cloud service, rotate API keys and secrets stored there, even if you have not been emailed.
- Business
Salesforce agrees to buy voice AI company Cresta to boost Service Cloud (opens in a new tab)
Salesforce did not share a price and expects the deal to close in its first quarter of fiscal 2028. It shows voice agents for call centres are becoming a core CRM feature, so teams building in this space face a bigger rival.
- Business
SUSE to cut about 10% of its staff, pointing to AI and automation (opens in a new tab)
In a memo to about 1,900 staff seen by The Register, CEO Dirk-Peter van Leeuwen said automation and AI are deeply changing how software firms work. SUSE customers should watch for shifts in product focus when the company shares its new strategy on November 16.
- Open Source
Six German states pick a Nextcloud-based open-source platform for schools (opens in a new tab)
Berlin, Bremen, Hamburg, Hesse, North Rhine-Westphalia and Rhineland-Palatinate signed a framework deal, with Ionos hosting, to rely less on Microsoft and Google. It is another big public-sector win for European open source and data sovereignty.
- AI
OpenAI to merge ChatGPT's Chat and Work tabs, with Codex sharing one usage pool (opens in a new tab)
The change goes to select users first. ChatGPT and Codex will draw from the same token allowance, so heavy Codex users may hit usage resets sooner and should check their plan limits.