kebirou

‼️ PHP Warns of Two Critical 9.2 Security Vulnerabilities, Urges Users to Prepare for Patches Details: cybersecuritynews.com/php-to… The PHP security team has warned users about two critical vulnerabilities and urged administrators to prepare for an upcoming security release. Both flaws carry a CVSS v4.0 score of 9.2. Updates are scheduled for Wednesday, October 21, 2026, at 14:00 UTC, giving website owners and hosting providers a short window to prepare. Public reporting links the upcoming fixes to CVE-2026-109618 and CVE-2026-109619. Security firm watchTowr describes them as reported remote code execution vulnerabilities, which could allow attackers to run their own code on affected servers. However, PHP’s advance notice does not name the CVEs or explain how the flaws work. Reports suggest the vulnerabilities could affect PHP versions from PHP 5 onward. #cybersecuritynews

Hermes Agent makes 3D models from text. But the real news is bigger than that. An AI agent that makes 3D models from text? Not new. Meshy, a text-to-3D tool, has an MCP server (a standard way to plug tools into AI agents). Any agent that supports MCP, including Claude and Codex, can already connect to it. Agents asking permission before acting? Also not new. Claude Code and Codex do that all the time. So what did Nous Research actually add with the new Meshy plugin for Hermes Agent? The new part is the price check. A normal approval asks: "Allow this tool?" Hermes asks: "This costs 15 credits. Go ahead?" In the demo, someone asks for a boss enemy for their Godot game. Hermes picks the settings (15,000 triangles, 4K textures, a GLB file for Godot), tells them the cost, and only spends after they say yes. That's a small change, but an important one. Agents are starting to spend real money: credits, API calls, cloud resources. Permission alone isn't enough. You need to know what it costs before you click yes. Nous also added polish on top: → One-line install from the official plugin catalog
→ Models render in the chat, and rigged characters animate there
→ A gallery of every model and prompt you've made
→ Short preview videos on messaging apps, so you can create from your phone
→ 3D-print prep: fixing problems, splitting into parts, handing off to a slicer The catch: you need a Meshy Pro plan and API key, and every model costs credits. What I find interesting as someone building agent tools: as agents start spending money for us, every approval should show the price, not just ask permission. Hermes is one of the first to make that the default. Links in the reply 👇