https://threatfrontier.com/articles/gemini-free-flash-lite-ai-plus-loses-pro ThreatFrontier.com en 2026-10-14T16:52:21.306Z Gemini App Limits Cut: Free Users Get Flash-Lite Only, and AI Plus Loses Gemini Pro https://threatfrontier.com/articles/langflow-1-12-3-25-cves-two-unauthenticated-rce ThreatFrontier.com en 2026-10-14T16:52:12.503Z Langflow 1.12.3 Fixes 25 Flaws, Including Two Unauthenticated CVSS 9.8 Code-Execution Bugs https://threatfrontier.com/articles/minicpm-v-4-7-35b-moe-iphone-claim ThreatFrontier.com en 2026-10-14T16:51:45.519Z MiniCPM-V 4.7: OpenBMB Claims a 35B Vision MoE Runs at 13 Tokens a Second in 3 GB on an iPhone https://threatfrontier.com/articles/x-subscription-explained-cursor-grok-one-plan-claude-gpt-api-price ThreatFrontier.com en 2026-10-14T16:51:38.322Z The X Subscription Explained: Cursor and Grok in One Plan, and Claude or GPT Now Cost API List Price https://threatfrontier.com/articles/lfm2-5-24b-a2b-vs-qwen3-6-35b-a3b ThreatFrontier.com en 2026-10-14T16:50:17.606Z Liquid LFM2.5-24B-A2B vs Qwen3.6-35B-A3B: Better at Agents, Weaker at Coding https://threatfrontier.com/articles/vllm-0-31-code-revision-rce-tokenize-engine-crash ThreatFrontier.com en 2026-10-14T16:49:45.125Z vLLM 0.31.0 Fixes Remote Code Execution Through Request-Controlled code_revision, Plus Four Other Advisories https://threatfrontier.com/articles/reflection-beam-501b-weights-not-shipped ThreatFrontier.com en 2026-10-14T16:49:37.149Z Reflection Beam: A 501B Open-Weight MoE Claims 80.9 on SWE-bench Verified, but the Weights Have Not Shipped https://threatfrontier.com/articles/ai-floor-plan-generator-free-tiers-compared ThreatFrontier.com en 2026-10-14T13:00:00.000Z AI Floor Plan Generator Free Tiers Compared: Editable Plans and Code Checks https://threatfrontier.com/articles/claude-code-plugin-sha-pin-bypass-cve-2026-86063 ThreatFrontier.com en 2026-10-14T10:28:35.019Z CVE-2026-86063: Claude Code's Pinned Plugin SHA Check Could Be Bypassed With a Branch Name https://threatfrontier.com/articles/ivanti-connect-secure-zero-day-cve-2026-104935-exploited-cisa-sets-october-16-deadline ThreatFrontier.com en 2026-10-14T01:51:30.722Z Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited; CISA Sets October 16 Deadline https://threatfrontier.com/articles/dockhand-cve-2026-110130-js-suffix-auth-bypass ThreatFrontier.com en 2026-10-14T01:40:09.869Z Dockhand 1.0.45 fixes a CVSS 10 authentication bypass: any request path ending in .js skips login https://threatfrontier.com/articles/windows-shell-cve-2026-96951-motw-bypass-exploited ThreatFrontier.com en 2026-10-14T01:26:49.465Z Windows Shell Flaw CVE-2026-96951 Lets Crafted Files Dodge Mark of the Web, and Microsoft Says It Is Exploited https://threatfrontier.com/articles/underdog-saluki-27b-qwen3-8-27b-2-bit-gguf-16gb-gpu ThreatFrontier.com en 2026-10-13T13:43:53.819Z Underdog Saluki 27B Squeezes Qwen3.8-27B Into a 7.89 GB 2-Bit GGUF for 16 GB GPUs https://threatfrontier.com/articles/aleph-alpha-kolibri-1-78b-moe-open-weights-single-h200 ThreatFrontier.com en 2026-10-13T13:40:37.418Z Aleph Alpha's Kolibri-1 Puts a 78B Open-Weight MoE With 1M-Token Context on a Single H200 https://threatfrontier.com/articles/phishing-emails-hidden-prompt-injection-ai-email-assistants-barracuda ThreatFrontier.com en 2026-10-13T13:39:50.206Z Phishing Emails Now Carry Hidden Instructions for AI Assistants as Well as Lures for People https://threatfrontier.com/articles/gsa-llm-clause-552-239-7001-7-day-model-change-notice-no-training ThreatFrontier.com en 2026-10-13T13:39:17.038Z GSA's New AI Contract Clause: 7-Day Warning on Model Regressions and No Training on Agency Data https://threatfrontier.com/articles/gemini-api-deprecations-3-7-flash-deep-research-october-23-nano-banana-2-1 ThreatFrontier.com en 2026-10-13T13:36:02.385Z Gemini API Migration Checklist: 3.7 and 3.5 Flash Deprecated, Deep Research Preview Ends Oct 23 https://threatfrontier.com/articles/cyberxero-claude-code-51-agents-pentagi-ukraine-utilities-wordpress ThreatFrontier.com en 2026-10-13T13:35:55.462Z CyberXero Broker Ran 51 Claude Code Agents Against Ukrainian Utilities and WordPress Sites https://threatfrontier.com/articles/tofu-mcp-server-fuzzing-253-bugs-118-servers ThreatFrontier.com en 2026-10-13T13:35:14.420Z Fuzzing 273 MCP Servers Found 253 Verified Bugs, and Most Tools Trust Whatever the Model Sends https://threatfrontier.com/articles/vllm-0-31-upgrade-notes-preload-criu-snapshots-cuda-13-breaking-changes ThreatFrontier.com en 2026-10-13T13:35:10.017Z vLLM v0.31.0 Upgrade Notes: Preload Daemon, CRIU Snapshots, CUDA 13 Default and the Breaking Changes https://threatfrontier.com/articles/ollama-0-40-mlx-default-background-model-upgrade-disk-backups ThreatFrontier.com en 2026-10-13T13:35:05.782Z Ollama 0.40 Makes MLX the Default on Macs, and 0.40.2 Keeps a Backup of Every Upgraded Model https://threatfrontier.com/articles/gpt-5-5-retires-chatgpt-codex-october-14-replacement-by-plan ThreatFrontier.com en 2026-10-13T13:35:01.462Z GPT-5.5 Retires From ChatGPT and Codex on October 14: What Replaces It on Each Plan https://threatfrontier.com/articles/chatgpt-floor-plan-to-scale-we-tested-claude-and-gemini ThreatFrontier.com en 2026-10-13T13:00:00.000Z ChatGPT Floor Plan to Scale? We Tested Claude and Gemini https://threatfrontier.com/articles/sap-cloud-sdk-python-cve-2026-89111-oauth2-ssrf-october-patch-day ThreatFrontier.com en 2026-10-13T10:43:02.182Z SAP Cloud SDK for Python OAuth2 SSRF (CVE-2026-89111, CVSS 10.0) Leads October Patch Day https://threatfrontier.com/articles/ollama-pull-api-ssrf-cve-2026-108836-exposed-servers-public-exploit ThreatFrontier.com en 2026-10-13T10:32:53.429Z Ollama Pull API SSRF (CVE-2026-108836): Medium-Severity Flaw in Versions Up to 0.34.1, With a Public Exploit https://threatfrontier.com/articles/meta-muse-wonder-api-price-vs-opus-5-5-wonder-full-muse-code-plans ThreatFrontier.com en 2026-10-13T02:44:16.438Z Meta's Muse Wonder Costs the Same as Opus 5.5 on the API; Wonder Full Is Plan-Only https://threatfrontier.com/articles/bricksforge-cve-2026-85097-unauthenticated-upload-rce-exploited ThreatFrontier.com en 2026-10-13T01:33:59.359Z Bricksforge CVE-2026-85097: Unauthenticated PHP Upload Under Attack Since 7 October https://threatfrontier.com/articles/sonicwall-sma1000-cve-2026-102255-pre-auth-ssrf-exploit-attempts ThreatFrontier.com en 2026-10-13T01:26:43.496Z SonicWall SMA1000 CVSS 10 Pre-Auth SSRF CVE-2026-102255 Draws Exploit Attempts Within Two Days