🇨🇦 Canada is putting up to C$1.6B into Cohere

Ottawa is backing the Toronto-based lab, CBC reports. Cohere is one of the few non-US labs training its own models, and now it has a government behind it.

It's an "up to" figure, so the final amount depends on the deal terms.

🪦 Google is killing Jules, its async coding agent, on December 31, 2026

Sessions go read-only after November 11. Google says the lessons are feeding "Google Antigravity", its agent-first platform.

Jules launched as an experiment in handing your backlog to an agent. Now it's one more coding tool folded into a bigger one.

🚨 Open-weight models can now turn a patch into an exploit before users update

Epoch AI shows that open-weight models like GLM 5.3 can exploit the patch gap. That's the window between a fix landing publicly and users getting the release.

Mozilla says it's working on a response. It won't ship renderer fixes and sandbox-escape fixes in the same gap.

🚨 A trojanized Claude Code extension is planting an SSH backdoor on developer machines

OpenSourceMalware details a fake extension that gives attackers persistent SSH access to whoever installs it. If you've added any Claude Code extensions lately, audit them and check your authorized_keys for keys you don't recognize, because uninstalling the extension alone won't close a persistent backdoor.