Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks. The FBI urges organizations to take the following steps now: ➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated. ➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP. ➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation. ➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims. For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.

With your permission, Gemini can now reference your @GoogleMaps searches and saved places alongside your Google Calendar to give you tailored recommendations for your day. 📍

Starting next week, sessions across Claude web, desktop, and mobile apps will run in auto mode by default on Pro, Max, and Team plans. Rather than asking you to approve each step, an automated check blocks risky actions. Switch back to manual anytime.

想让 Claude Code 帮你做 3D 游戏，别让它从零手写物理和粒子特效，太费 token，效果也一般。 翻了一圈，挑出 10 个 GitHub 免费开源库，装上这些，做原型的时间能砍掉一大截。 按用途分成三组，看完就知道该装哪个。 第一组：让 AI 直接操作游戏引擎 1. Gamedev Agent Skills：一次装进 74 个游戏开发技能，它会读项目文件，自己判断你用的是 Godot、Unity 还是 three.js，再调用对应的技能。一条命令装好：npx skills add gamedev-skills/awesome-gamedev-agent-skills github.com/gamedev-skills/aw… 2. MCP Unity：Claude 直接在 Unity 编辑器里搭场景、改物体、配材质、看控制台报错，要求 Unity 6 及以上。 github.com/CoderGamester/mcp… 3. Godot MCP：同样的事换到 Godot 上，建场景、加节点、运行项目、读调试输出。 github.com/Coding-Solo/godot… 第二组：做素材 4. TripoSR：一张图片生成 3D 模型，拿来做道具原型够用。需要一块 6GB 显存左右的英伟达 GPU。 github.com/VAST-AI-Research/… 第三组：网页 3D 游戏的现成零件（three.js 和 React Three Fiber） 5. Drei：相机控制、天空、阴影、模型加载，全是现成组件 github.com/pmndrs/drei 6. React Three Rapier：刚体、碰撞、关节，不用自己写物理引擎 github.com/pmndrs/react-thre… 7. Yuka：NPC 寻路、感知和状态机 github.com/Mugen87/yuka 8. three.quarks：火花、烟雾、魔法拖尾这类粒子特效 github.com/Alchemist0823/thr… 9. React Postprocessing：泛光、景深、颗粒感，游戏画面看起来廉价不廉价，就看这一层 github.com/pmndrs/react-post… 10. Colyseus：多人联机，房间、匹配、断线重连都包了 github.com/colyseus/colyseus 算一下成本：10 个全是 MIT 或 Apache 协议，不需要额外的 API key，后 6 个就是普通 npm 包，Claude 照着文档写代码就能用。你唯一要花的钱，就是本来就在付的 Claude 或 Codex 订阅。 上手只要三步：先装 Gamedev Agent Skills；再让 Claude 用 Drei 加 Rapier 搭一个能跑能撞的小场景；最后加上 Postprocessing 和 three.quarks，画面质感立刻就上来了。

想自己搞一座？把提示词（Prompt）分 4 段喂给 Claude Code 就行： 1. 先画平面图，每栋建筑的位置用“米”标好。 2. 拆分成几个区块，每个区派一个 Agent（智能体）去建。 3. 每建完一个区就截图，跟参考图对比并微调。 4. 最后安排 10 个镜头，每个镜头从小细节的特写开始拉远。 第 1 步最关键，要是没有平面图，每个 Agent 各建各的，塔可能会直接建进池塘里。 4 段 Prompt 直接复制粘贴就能开干。 【段落 1：开工 ＋ 平面图】 我想用 three.js 做一座黄昏时刻的寺庙，最后输出成 70 秒的视频。 规则：不准用任何 3D 模型、贴图或照片，所有东西全用代码生成。 先不要渲染画面，先输出一份场景平面图 ⁠layout.js⁠：定义好主殿、五重塔、拱桥、莲花池、山门的位置和尺寸，单位用“米”。之后所有的代码都只能从这个文件里读取坐标。 太阳定在西南偏西方向、地平线上方约 7 度，打暖色光。 【段落 2：分身施工】 平面图确定后，开启 6 个 Sub-agent（子智能体）并行施工，每个 Agent 负责一个区域：地形、池塘（莲花、锦鲤）、主殿、五重塔、拱桥、树木。 每个 Agent 只能修改自己的文件。 全局材质（朱漆、金箔、青铜、屋瓦、木头）统一写在 ⁠materials.js⁠ 里供大家调用。 随机数一律使用固定种子（固定 Seed），保证每次打开渲染出来的样子一模一样。 （注：这一步记得附上几张高清的寺庙照片，给 AI 作为参考） 【段落 3：镜头调度】 安排 10 个镜头，每个镜头 7 秒。 每个镜头都从一个小物件的特写开始（灯笼、莲花、风铃、佛像面部等），再慢慢拉远露出整个场景。镜头开头先在特写停留片刻，中间加速拉远，结尾放慢缓动。 最后一个镜头，从逆光的枫叶拉远，最后过渡到整座寺庙的全景俯拍（航拍视角）。

Anthropic says junior technical hires fell from 27% to 9%, while meeting time per employee rose 20% over the past year.

Fields Medalist who famously cried over OpenAI’s paper dump, refuses to use AI in his own research: “People that don’t want to use AI… they need to be able to practice their arts in the way they are doing it today.” the interviewer pushes back elsewhere: name one other field where we hold back technology that can already do the work, just for the sake of students. Hugo Duminil-Copin: “The human understanding of mathematics is the only thing that at the end benefits society. […] If the purpose of mathematics was purely getting as many results proved and lean formalized then […] you could even imagine a totally automatized version. […] You have a black box which is providing you the answer […] it gives you 42 but you have zero clue why.”