Cohere vs Red Hat

Introducing North 2: AI without compromises

Cohere has announced North 2, its latest platform update with 15+ new features, positioned as enterprise AI without compromises.

North 2: Enterprise AI without compromises

Cohere's biggest upgrade yet — unifying enterprise-grade security, performance, and flexibility in one platform.

Aleph Alpha's Kolibri Lags Behind Open-Weight Leaders

Aleph Alpha has released Kolibri, a new open-source German-English AI model under the Apache-2.0 license, designed for mission-critical applications in public administration and industry. Kolibri features a Mixture-of-Experts architecture with 78 billion total parameters and about 3.46 billion active per token. Trained on 20 trillion tokens, with 23% in German and a German-optimized tokenizer, it supports context lengths up to one million tokens. The model excels in agentic workflows, RAG, and native tool calling, while emphasizing data sovereignty and compliance, including a blocklist of 4.5 million URLs and GDPR/EU AI Act adherence. Independent benchmarks, however, place it behind at least 20 other open-weight models. Aleph Alpha is merging with Cohere to form a transatlantic sovereign AI company, subject to regulatory approval. In a broader economic debate, Reid Hoffman argues AI infrastructure expansion is the 'only reason' the US avoids recession, though economists dispute this.

• Aleph Alpha released Kolibri under Apache-2.0, with 78B total parameters and ~3.46B active per token.
• Kolibri trained on 20T tokens, with 23% German data and a German-optimized tokenizer, supporting 1M context.
• Independent benchmarks rank Kolibri behind at least 20 other open-weight models.

CISA flags three actively exploited Linux kernel flaws

The US Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities Catalog (KEV), indicating they are being actively exploited. The flaws, tracked as CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964, are rated as 'critical' or 'high' severity. Red Hat has confirmed exploitation via publicly known exploits. The vulnerabilities can lead to system crashes, privilege escalation, and remote code execution. CISA has ordered US federal agencies to patch affected systems within three days or temporarily take them offline. Patches are available in the kernel, and administrators are urged to apply them urgently. No details on the threat actors or targets have been disclosed yet.

• CISA added three Linux kernel vulnerabilities to its KEV catalog: CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964.
• Red Hat confirmed that all three vulnerabilities are exploited in real attacks via publicly known exploits.
• CVE-2025-39682 involves an error in processing empty TLS records in kernel TLS, potentially leading to system crashes and code injection.