# News: November 3, 2026

> 9 curated links on AI agents, Python, security, Google Cloud, and engineering, selected by Médéric Hurier.

- Author: [Médéric Hurier (Fmind)](https://www.fmind.dev/)
- Published: 2026-11-03
- URL: https://www.fmind.dev/news/2026-11-03/

- [NVIDIA/auto-ontology](<https://github.com/NVIDIA/auto-ontology>): Open-sources an Apache-2.0 Python framework from NVIDIA that builds semantic knowledge graphs from enterprise metadata to reconcile cross-system metrics, validate queries with lineage provenance, and expose context via MCP, CLI, and API.
- [GDPx: Measuring Frontier Model Capabilities Across the Most Valuable Domains](<https://newsletter.semianalysis.com/p/gdpx-measuring-frontier-model-capabilities>): Benchmarks frontier models across 11 high-ROI domains—including chip design, cyber, bio, quant trading, RSI, alignment, and software engineering—where the top model scores 12% and OpenAI and Anthropic lead despite safety classifiers sandbagging Opus 5.5 and GPT-6 Astra.
- [Lessons From Red-teaming Auto-review, OpenAI's Blocking Monitor](<https://www.lesswrong.com/posts/dbStc8ZFESqfihwAd/lessons-from-red-teaming-auto-review-openai-s-blocking-1>): Uncovers 11 exploit vectors that bypass OpenAI Codex's sandbox and synchronous Auto-review monitor via coverage gaps, prompt injections, truncated evidence, and stale-approval timing attacks, prompting OpenAI fixes and controls against trusting broad code loaders like pytest.
- [The AI cost of JavaScript frameworks](<https://nolanlawson.com/2026/10/28/the-ai-cost-of-javascript-frameworks>): Benchmarks Claude Code with Opus 5.5 across 12 JavaScript frameworks over five runs using official MCP servers and skills, finding median build costs from $2.67 (Hono+htmx), $2.76 (Astro), and $2.82 (Nuxt) up to $4.28 (SvelteKit), $4.65 (Gracile+Lit), and $4.97 (Angular).
- [Postgres 19 is late, and it's AI's fault](<https://rhaas.blogspot.com/2026/10/postgres-19-is-late-and-its-ais-fault.html>): Explains how LLM-assisted bug reports drove a 60% jump in back-patched commits to REL_19_STABLE (1,169 vs. 724) and 74% to REL_18_STABLE (433 vs. 248), delaying PostgreSQL 19 past October and forcing late reverts of FOR PORTION OF, SQL/PGQ, and partition merge/split features.
- [ARTEX and Friends: Enter Agentic Offensive Frameworks](<https://cloud.google.com/blog/topics/threat-intelligence/artex-and-friends-enter-agentic-offensive-frameworks>): Details Mandiant and Google Threat Intelligence Group incident response cases where threat actors weaponized open-source multi-agent pentesting frameworks including ARTEX, Hexstrike, and CAIRN to automate reconnaissance, exploitation, and attack-path chaining at machine speed.
- [The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources](<https://cloud.google.com/blog/topics/threat-intelligence/llmjacking-monetizing-compromised-cloud-models>): Analyzes 2026 Mandiant incident response engagements where threat actors hijacked enterprise cloud LLM credentials across finance, retail, tech, and transport, generating fraudulent API spikes exceeding $100,000 per day and up to $1 million per victim alongside an underground credential market.
- [North Korea Steals USD 6.36 Billion From Binance in the Largest Hack in History](<https://www.trmlabs.com/resources/blog/north-korea-steals-usd-6-36-billion-from-binance-in-the-largest-hack-in-history>): Attributes the October 29, 2026 theft of $6.36 billion from Binance across 10 blockchains to North Korea's TraderTraitor via compromised hot wallet signing infrastructure, with $2.7 billion frozen while the attacker launders roughly $2.4 billion through market makers and lending protocols.
- [Binance Hack: What Can a Compromised Laptop Reach?](<https://blog.gitguardian.com/binance-hack-compromised-laptop>): Examines how a compromised DevOps engineer laptop initiated the $6.3 billion Binance breach via an internal service container without leaking wallet private keys, highlighting lateral movement risks from CLI token caches, SSH keys, config credentials, and secrets left by AI coding agents.