
Retired Reverse Engineer. Suka sharing ilmu2 aneh, Nahdliyin. ✉️ [email protected] @evonic_ai
Jakarta
Joined January 2009
- Tweets11.5K
- Following505
- Followers16.1K
- Likes2.9K
Sebulan terakhir ini saya riset tentang proactive agent, yakni agent yg akan secara proactive mengingatkan kita kalau ada sesuatu yg urgent atau menarik yg perlu kita ketahui atau FU tanpa perlu kita tanya/minta duluan, dan dua hari ini mulai merasakan hasilnya, konsep proactive agent ini sudah mulai saya riset di Evonic sebelum rilis Claude Duet hari ini.
Bagus juga ini model untuk ukuran segini dg kecepatan ~900 tok/s di RTX 5090 🔥
🚨炸了!上海AI实验室推出新模型Sage-A1.5 !仅35B硬刚Kimi-K3、GLM-5.3、GPT-5.6-sol!同级第一还能反超巨无霸!
35B MoE智能体模型,仅3B激活,主打长程执行与科学探索。
它不仅全面碾压同级A1、Ornith-1.5,在多个指标上还压过Kimi-K3、GLM-5.3、GPT-5.6-sol:
🔹FS-Olympiad 81.0、CMT 80.0、PinchBench 90.0
🔹SWE-Bench Pro 61.2、BrowseComp 82.8、IFBench 81.6
🔹支持子代理并行编排、内置验证协议、开放科学发现
小参数做出大模型级Agent与科学能力,效率与实力双在线。
技术报告:arxiv.org/abs/2610.28578
模型:huggingface.co/InternScience…
#上海人工智能实验室 #SageA15 #开源大模型 #AIAgent #科学智能 #中国AI #KimiK3 #GLM53
Robin Syihab retweeted
Replying to @anvie
Tadi iseng cek dot go dot id om kaget pas liat ada yg pake 7.4(dah EoL 2022), ternyata masih banyak yg pake 5.3, 5.4, dan 5.6 bahkan. Buat website-website level provinsi/kabupaten hmm okelah(sedikit agak bisa dimaklumi), lah ini kemendikdasmen juga bejibun lol.
Mari kita coba buat PoC-nya.
Kita lihat apakah agent akan menolak?
‼️ BREAKING: Two leaked remote code execution flaws in PHP are real, watchTowr confirms.
PHP will ship fixes for two critical flaws, both rated CVSS 9.2, on Wednesday 21 October at 14:00 UTC, a day before the embargo was due to lift.
CVE-2026-109618 and CVE-2026-109619 first surfaced in a Hacker News post whose author admitted having no evidence beyond "source: trust me, bro".
Kevin Beaumont flagged the leak, and watchTowr confirmed it two hours later.
PHP says it may release sooner if details go public or exploitation appears. It has not named the CVEs or the affected versions.
Di era spt ini aseli kalian peternak server butuh agentic swarm yg standby 24/7 buat response team.
Bisa pakai Evonic, saya pakai Evonic cukup minta Super Agent untuk rapat darurat dg agent2 sentinel (penjaga server) dan melakukan mitigasi serentak dan segera di server masing2.
PHP's security team just confirmed two critical RCE flaws after a leak. Here's what you need to know.
Security researcher Florian Roth posted that there is an RCE vulnerability in PHP core, rated CVSS 10.0. He said details were due October 20 and that only PHP 8 would get patches. The post drew 53K views. The story spread after a leak broke the embargo, which watchTowr had expected to hold until Thursday at 11am ET.
The PHP Foundation then gave official advance notice. The security release is set for Wednesday, October 21, 2026 at 14:00 UTC, which is 10 AM EDT. It fixes two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619. The official rating is CVSS v4.0 9.2, not the 10.0 circulating online. The team says it may release earlier if details become public or active exploitation shows up. Some posts quoted 9 AM EDT, and watchTowr's post misprinted the CVE year as 2926.
The leak is confirmed as real. watchTowr says the embargoed zero-days are real, and Previdian says it reproduced them. No technical details are public. Reports say the flaws touch PHP 5, 6, 7 and 8, but only 8.0 and up are expected to get fixes. That is unconfirmed. Researcher Nicolas Krassas plans to publish a lab on the bugs when the embargo lifts. Security commentators expect exploitation within minutes of the details dropping.
PHP runs Wikipedia, WordPress sites, WooCommerce stores, Drupal sites and Adobe Commerce storefronts.
Key numbers:
- 2 critical RCE vulnerabilities
- CVE-2026-109618 and CVE-2026-109619
- CVSS v4.0 9.2 officially, 10.0 in leaked reports
- Patch release: Oct 21, 2026, 14:00 UTC
- Patches expected for PHP 8.0 and up
PHP admins should inventory their hosts now and update as soon as the release lands.
Kalau kamu buka halaman dv-g3b-emudhra.we-have-a-pro… dan tidak muncul error seperti ini (ERR_CERT_REVOKED) maka browser kamu perlu segera di-update.
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.co…
Robin Syihab retweeted
After I criticised @prabowo over the forest fires in Kalimantan, which the Indonesian gov has clearly failed to manage, my X account has been targeted by hacking attempts almost every day.
Guys, stop wasting your energy on me. I’m not the reason your country is falling apart.
Robin Syihab retweeted
mui meminta umat islam memboikot dan tidak lagi mengundang habib alwi bin abdurrahman assegaf sebagai penceramah
sebabnya: potongan video ceramahnya viral dan dinilai merendahkan perempuan
kata mui
wakil ketua umum mui, kh m cholil nafis, lewat akun x pribadinya (dikutip dari laman mui)isi ceramah dinilai tidak mencerminkan etika dan keteladanan seorang dai
bisa merusak citra dakwah islam dan moral masyarakat
“jangan undang lagi dan tak usah diikuti majelisnya orang model gini”
apa pun statusnya, penceramah yang melanggar kesantunan tidak layak, dan dia bilang malah merusak islam



































