Still onboarding but I already go several improvements going in. Kudo to the team. They're great. Question for the community! If you use Hermes Desktop, is there any pain point or headache you dealing with? Anything that would make you go, "if only..." Love to hear from y'all!

Want a sneak peek at the Hermes Agent Mobile app? It's still in Private Beta (for now...), but I recorded a quick tour of the app, including all the features, options, and capabilities Now you can work from anywhere, with the customizability and power you always get with Hermes! Great job @fl_rn_st and the whole team!

Been focusing on the Desktop app this last week or two. This PR should be welcome news to a lot of you power users. On next full release later this week I think you'll start noticing the difference in the desktop app getting noticeably nicer. Still a long way to go, but we'll get there. Lots of UX and design work coming shortly.

Jensen closed his GTC Berlin 2026 keynote with this Hermes Agent demo as the finale. He introduced it by saying the way to build an agent is to ask an agent to build it for you, so he installed and set up a customized Hermes in one prompt. Then he used Hermes, running on @nvidia RTX Spark, to create a simulated training environment for the @huggingface Microduck. Hermes planned an obstacle course with Nemotron and had GPT-6 Astra build it using FreeCAD, Omniverse libraries, Blender, Newton, and Isaac Lab. Hermes trained thousands of simulated ducks on that course until the validated policy was ready to run on the real robot in the physical world. At Nous, we believe open source is a practical tool as much as a philosophical ideal. It gives users the ability to build powerful, complex workflows chaining numerous local+cloud models, devices, and tools themselves instead of waiting for a company to enable them.

Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines. If you run either stack in production, keep an eye on official advisories and apply patches promptly. Security maintenance doesn't stop at your application code. Your runtime matters too. Node.js advisory:

Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks. The FBI urges organizations to take the following steps now: ➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated. ➡️ Immediately update affected PHP installations following the guidance on Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP. ➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation. ➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or Those reports help us identify the actors involved and warn other organizations before they become victims. For the latest information, follow PHP’s announcement on CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.