AI social digest — Oct 24, 2026
Top line: OpenAI's red-teaming surfaced an unauthenticated remote-code-execution flaw in Brotli, a compression library built into Node.js, Bun and Envoy — disclosed with new Brotli releases and a published CVE, but unpatched servers remain exposed until downstream updates propagate. Thariq Shihipar, the public face of Claude Code during its year of scaling, announced he has left Anthropic. Grok Bot added a built-in credential vault a day after rolling out the 1Password integration.
- OpenAI red-teaming finds unauthenticated remote code execution in Brotli; disclosure, new releases and a CVE
- Thariq Shihipar leaves Anthropic after a year-plus on Claude Code
- Grok Bot adds a built-in vault for sensitive information
OpenAI red-teaming finds unauthenticated remote code execution in Brotli; disclosure, new releases and a CVE
Sources OpenAI on X
What happened: On October 23 at about 6:55 PM ET, OpenAI published a disclosure (OpenAI on X) that a red-teaming exercise found a vulnerability allowing unauthenticated remote code execution in Brotli, a compression library included in many pieces of software such as Node.js, Bun and Envoy. An attacker could run their own code on affected systems by sending — or replying with — malicious compressed data, with no need to create a user account: an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as curl --compressed) by a malicious server.
What's genuinely new: The flaw is new as a security finding, and the disclosure mechanics matter as much as the bug. The root cause was actually fixed in the Brotli source code in February 2026, but it was not known at the time to be exploitable and no newer Brotli release carried it; because Brotli is built into other software, anything embedding the library needs the update too, and then that software's own users. OpenAI disclosed to Brotli and downstream projects such as Node.js, which have released or are releasing security updates, and Brotli cut new release versions and published a CVE. Patch and mitigation details are at a project page on the initiative's own site. This is the second industry-wide flaw under the Patch the Planet banner after the October 21 PHP disclosure — the initiative is starting to look like a standing flaw pipeline rather than a one-off.
Watch: The CVE identifier and its severity rating; whether downstream embedders beyond Node.js ship updates quickly; and any exploitation telemetry on the scale of the PHP2Shell episode, where edge-provider stats showed attempted exploitation ramping from thousands to millions of requests inside two hours of public announcement.
Thariq Shihipar leaves Anthropic after a year-plus on Claude Code
Sources Thariq Shihipar on X nichochar on X Thariq Shihipar on X
What happened: Thariq Shihipar announced his departure from Anthropic in a post early on October 24 (about 12:04 AM ET), saying he spent more than a year working on Claude Code and saw it "scale larger than I ever imagined" (Thariq Shihipar on X). He writes that he loved working at Anthropic, believes deeply in the mission and "the idea of a race to the top," calls his colleagues there "the most talented, thoughtful, competent, and earnest people I have ever met," thanks the community on X, and says it is time "for a bit of a break before diving into something new" — directing readers who want more Claude Code content to named colleagues including Addy Osmani, Lydia Hallie, Cat Wu and Boris Cherny. Later the same day, at about 1:54 PM ET on October 24, he reposted Anthropic's Alex Albert sending a directory of the company's public-facing people to tag for product feedback — a list that names Shihipar among it and spans Claude Code, Chat/Cowork, Duet, API/Platform and general community accounts (Thariq Shihipar on X).
What's genuinely new: This is the first word of the departure; no destination is named and the post frames the break as personal, not a dispute. The same-day repost of Albert's team directory — whose Claude Code names include the colleagues Shihipar's own post singled out — is the first follow-through signal after the announcement: the community-facing bench is being publicly assembled as the continuity plan while its most consistent voice steps away. A reaction post the evening before (about 10:05 PM ET October 23) shows how widely he was recognized outside the company — a Claude Code community figure relaying the exit with little more than a stunned emoji (nichochar on X). Shihipar had been one of the most consistent public voices walking through Claude Code's updates as the agent-coding product grew.
Watch: Where he lands after the break; whether other members of Claude Code's public-facing bench follow; and whether Anthropic's own channels acknowledge the exit beyond Albert's standing directory.
Grok Bot adds a built-in vault for sensitive information
Sources Elon Musk on X
What happened: An announcement relayed on Elon Musk's account on October 23 at about 8:54 PM ET says Grok Bot can now save logins, cards and contact information in a secure vault — enter them once and the bot "securely remembers them for the future" (Elon Musk on X).
What's genuinely new: This is native credential storage inside the bot, distinct from the 1Password-backed sign-in that was announced the day before, which had the bot working through an external password manager with user approval. The two together sketch xAI's credential-handling architecture: an integration path for existing vaults and a first-party store for users who don't have one.
Watch: How the vault is protected and scoped (per-bot, per-user, revocation), and whether commerce and banking features already shown on the bot channel migrate onto the stored-card path.
Brief
- A fresh research claim with unusually wide reach: Jon Barron says all existing implementations of softmax and cross-entropy — naming JAX, PyTorch and even textbooks — carry two subtle bugs, and that a simple rewrite fixes both and eliminates "slingshots" when grokking (Yann LeCun on X, October 23 about 3:03 PM ET). Single-source for now; the post itself carries no paper link, so the writeup and any framework responses are what to watch.
- LeCun also relayed a thread by Mosh Levy asking how a JEPA world model decides which features to keep — whether it holds onto a feature it cannot predict, like a traffic light — and presenting evidence that prior work's answer (no) is wrong, with a new characterization of feature selection (Yann LeCun on X, posted October 20 about 9:50 PM ET). It extends the September MotionJEPA critique that JEPA-style models favor slow, simple features; independent academic work in the JEPA lineage, not a lab announcement.
- OpenClaw Enterprise got its first explainer interview — the OpenClaw account sat down with Kevin S. on what Enterprise is, why it was built, what its agents do that others don't, and why Red Hat and NVIDIA are contributing (OpenClaw on X, October 23 about 6:18 PM ET). It follows the September 29 Enterprise announcement; no new artifact or commitment is visible in the post itself.
- A UI-prompting tip from a Claude Code community figure aimed at "vibecoders": nichochar says OpenAI models are particularly bad at this habit and begs developers to add two lines to their AGENTS.md — "Cut taglines, helper text and secondary labels. If a screen needs them to make sense, fix the layout," plus a companion line asking for the best decision that elevates the user experience, developer experience and more (nichochar on X, October 24 about 9:26 AM ET). Single-source and the poster's own read on the OpenAI-models comparison; any rebuttal or corroboration from OpenAI-side builders is what to watch.
- Perplexity Computer's skills marketplace adds
/impeccable, an open-source skill built by @pbakaus that reviews an interface and fixes what a designer would flag — layout, type, contrast and accessibility — pitched to build interfaces that don't look like AI-generated slop, with 5,000 credits per user to get started (Arav Srinivas on X, October 24 about 11:51 AM ET). Tasks using the skill are free through October 31, the same time-limited-free structure as /graphify (October 21), /php2shell-exposure-check (October 22) and the Taste Skill (October 23), making it the second outside-creator skill and the fourth such promotion in four days. - Enact, a robotics startup building what it calls an "artificial nervous system" for robots — sensing force and touch through the robots' own actuators in real time, with no fragile sensors or extra hardware — emerged from stealth with a $30 million pre-seed, arguing vision and language are becoming commodities while fine manipulation is the gap. Backers named in its announcement include redalpine, Notion Capital, FirstMinute Capital, Yann LeCun, Mistral's Arthur Mensch, Path Robotics' Andrew Lonsberry and Hugging Face's Thom Wolf (Yann LeCun on X, relayed October 22 about 3:08 AM ET). Single relay for now; no paper, demo or use-of-funds detail in the post itself.