The PHP Panic, Musk's Mega-Merger, and OpenAI's Biotech Bet

▸ • PHP admins are sweating as a critical "PHP2Shell" zero-day vulnerability threatens millions of sites, with emergency patches dropping today.

▸ • Elon Musk confirms SpaceX and Tesla have formed special committees to explore a massive merger, aiming to combine their AI and supercomputing efforts.

▸ • OpenAI acquires biotech startup Orchestra Bio to integrate its AI agents into Rosalind, pushing further into drug development.

🚀 SpaceX and Tesla Explore Mega-Merger

Elon Musk confirmed that special committees are exploring a merger between SpaceX and Tesla. The goal? Combining their AI and "superintelligence" efforts into one massive $3.5 trillion corporate behemoth. It's an odd Kabuki dance, but Musk thinks there's "a lot of merit" to the idea.

🧬 OpenAI Acquires Orchestra Bio

OpenAI is pushing hard into life sciences, acquiring biotech startup Orchestra Bio. The startup's AI agents will be integrated into OpenAI's Rosalind model to help pharma companies speed up drug development. Because why stop at writing code when you can cure diseases?

🚗 Google Puts Gemini in the Driver's Seat

Google is bringing Gemini's "Personal Intelligence" to Android Auto and cars with Google built-in. It can now tap into your Gmail, Calendar, and Maps to give you highly personalized responses while you drive. What could possibly go wrong with an AI reading your emails at 70 mph?

⚖️ Anthropic's AI Safety Bill Pitch

Anthropic has proposed a draft AI safety bill that would allow federal agencies to block an AI model's release. The catch? They need a judge's permission, and the model must pose a risk of killing 50+ people or causing $1 billion in damage. A very specific, slightly terrifying threshold.

🌩️ Anthropic's Messy Cloud Partnerships

As Anthropic gears up for a planned November IPO, it's reportedly struggling to secure enough compute. Cloud providers are increasingly viewing the AI startup as a direct competitor rather than just a lucrative customer, making infrastructure negotiations incredibly awkward.

📝 Meta Quietly Edits Its AI Terms

Meta has dropped the word "train" from its commercial Terms of Service following creator backlash. However, the company still refuses to add language respecting robots.txt, leaving web publishers in a tough spot. It's the classic "we heard you, but we're not actually changing anything" maneuver.

📺 Netflix's Viewing Time Paradox

Netflix is telling investors not to panic about falling viewing times. Instead, the streaming giant is pivoting its focus heavily toward monetization and leveraging new tech to squeeze more value out of the hours you do watch. Less binging, more billing.

🚨 The PHP2Shell Nightmare

Website admins are bracing for impact as PHP prepares to release emergency patches for two critical vulnerabilities (CVE-2026-109618 and 109619). The "PHP2Shell" exploit reportedly allows remote code execution and could affect millions of servers. Time to cancel your weekend plans.

🦀 Cloudflare's TypeScript-to-Rust Port

Cloudflare is spearheading tsrs, a Rust port of Microsoft's TypeScript compiler. It claims to be 8x faster and use 70% less memory, and they're actively sharing optimizations back with Microsoft. Just don't call it a fork.

🔐 eMudhra Certificates Compromised

Cloudflare is deploying mitigations after discovering that eight eMudhra intermediate certificates were using weak keys. Developers relying on these certs need to update their clients immediately before things get weird.

🕶️ Snap Hires Iron Man

Snap is paying Robert Downey Jr. to be the "Chief Customer Experience Officer" for its new Specs AR glasses. They're leaning heavily into the Tony Stark aesthetic to sell augmented reality, which is honestly a pretty solid marketing strategy.

👎 YouTube Hides the Dislike Button (Again)

YouTube is reportedly testing hiding the dislike button entirely by burying it in the three-dots submenu. Because apparently, we can't be trusted with negative feedback, even when it's already hidden from public view.