AI news for Sunday, October 25

Sam Altman went to Stanford's business school and said the world can't just patch its way out of the bugs AI keeps turning up. So point the AI at defense, he says. That's his plan, anyway, while his own models keep finding the holes.

Musk promised a full-length Odyssey movie from Grok Imagine back on July 21, due before the year's out. What exists is Episode 1 of a series, posted October 23. He reposted it with four words. There are a little over nine weeks left.

If you run Storybook, update it before you start storybook dev again: anyone on the same Wi-Fi could get code into your project. We also flagged undici, where one bad reply from a server can take down a Node.js app even if you catch the fetch() error, and Happy DOM (only if you've turned JavaScript evaluation on).

An Express app that takes uploads through multer with an async fileFilter can be knocked over by one request from a stranger, so update it or switch to a synchronous filter. vLLM has the same kind of hole if you serve a multimodal model: one request with oversized image settings runs the server out of memory. If you ship an Electron app, rebuild it, since older versions still trust the compromised eMudhra certificates that browsers already block.