Thursday, October 22, 2026|20°C Partly Cloudy
Next edition scheduled
Your Personal Daily Intelligence

The Technology Desk

Technology

Models, chips, platforms, and the policy lines being drawn around them.

91 stories · Edition of 2026-10-22 · Curated by AI at Invalid Date

TECHNOLOGY

DNA genealogy and AI help solve decades-old murder case

7h ago · Source: bbc

A 1993 murder in Granite City, Illinois, was solved after investigators used genetic genealogy and artificial intelligence to identify a suspect, authorities said.

Gail Sperino, 34, was found dead in a field on November 9, 1993, after being blunt-force trauma victim. Her case remained unsolved for three decades despite extensive interviews and DNA testing that yielded no matches in standard law enforcement databases.

In 2023, Madison County detectives submitted crime scene DNA to Othram, a Houston-based firm that applies investigative genetic genealogy. The technique analyzes distant genetic relatives from public genealogy databases, building family trees to narrow down potential suspects. This approach, inspired by the 2018 identification of the Golden State Killer, allowed investigators to focus on Albert "Buddy" Zigler, 70, after DNA from his relatives linked him to the crime scene.

Captain Tim Lawrence of the Madison County Sheriff's Office confirmed that the genetic lead led to Zigler’s arrest in May 2024. He confessed to the murder, and Wes Sperino, Gail’s son, expressed relief at finally having closure.

The case also involved Centerline AI, a software platform from CentralSquare, which analyzed over 2,000 pages of historical records to reconstruct timelines and organize witness statements. Detectives used the AI to cross-reference evidence and assess Zigler’s statements during interrogation, though Lawrence emphasized that human judgment remained essential.

Investigative genetic genealogy has transformed cold case work, but experts caution about its limits and ethical concerns. David Mittelman, Othram’s CEO, compared the process to a GPS signal requiring a map built from public records and census data. However, the method requires DNA evidence and cannot solve cases without biological material.

Denise Syndercombe Court, a forensic genetics professor at King’s College London, noted privacy risks: genetic data submitted voluntarily by one individual may implicate relatives who did not consent. She also highlighted funding shortages, as many agencies rely on donations or crowdfunding to afford such services.

While the UK has a large DNA database — offering a 65% chance of matching DNA to an individual — it has not yet adopted investigative genetic genealogy. The Home Office is studying its use but has not commented publicly.

Othram has resolved thousands of cases globally, but Mittelman stressed that the technology is only one part of the process. "It can't solve every case," he said. "But it’s far more likely to yield identities than relying on chance matches in a database."

The convergence of DNA genealogy and AI marks a shift in forensic investigation, offering new pathways for unresolved crimes while raising ongoing questions about privacy, equity, and resource allocation.

TECHNOLOGY

PHP emergency patches trigger coordinated disclosure amid supply chain security debate

7h ago · Source: theregister

A coordinated effort to patch two critical PHP vulnerabilities triggered a complex chain of events involving security researchers, software maintainers, and a supply chain security firm. PHP developers accused Chainguard of prematurely publishing fixes for the vulnerabilities, dubbed PHP2shell, ahead of an official disclosure. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, could allow unauthenticated attackers to execute code on servers running PHP, which powers an estimated 70 percent of websites globally.

The situation unfolded when rumors about the vulnerabilities began circulating on Tuesday evening, prompting PHP maintainers to accelerate their planned disclosure by one day. This decision aimed to ensure users could apply patches promptly. Shortly after, a researcher from the Calif team mistakenly released a proof-of-concept exploit video, inadvertently revealing limited technical details.

Chainguard, a company focused on securing software supply chains, faced scrutiny for publishing built artifacts containing the fixes more than six hours before the coordinated release. PHP maintainers stated that Chainguard had received patches in advance but violated the embargo by making them publicly accessible. The company's CEO, Dan Lorenc, defended the action, stating that Chainguard had independently discovered the vulnerabilities using AI tools and sought to mitigate potential threats. He emphasized that the disclosure was timed to address emerging risks, noting that threat actors from China and Russia had already targeted the vulnerabilities.

The vulnerabilities stem from memory management flaws in PHP's handling of errors and memory allocation. Exploitation could lead to remote code execution, enabling attackers to seize control of servers, steal data, or deface websites. Both flaws affect PHP versions from 5.4 onward, with one allowing code execution via out-of-memory corruption and the other through stale memory states. Researchers from Wiz and VulnCheck highlighted the severity, noting that successful exploitation could compromise entire web infrastructures.

Chainguard's actions sparked debate within the security community. While some criticized the premature release for undermining coordinated disclosure efforts, others acknowledged the company's intent to address active threats. Lorenc maintained that the process, though messy, aligned with principles of proactive security. The incident underscores the challenges of balancing transparency, urgency, and collaboration in vulnerability management, particularly in critical open-source ecosystems like PHP.

TECHNOLOGY

Flapping Airplanes Secures $1 Billion Series A at $6 Billion Valuation

7h ago · Source: techcrunch

A year-old artificial intelligence startup, Flapping Airplanes, disclosed Wednesday that it had raised a $1 billion Series A funding round, valuing the company at $6 billion. The round was co-led by Index Ventures and Lux Capital, with participation from Sequoia Capital, GV, Kleiner Perkins, Valor, Atreides, A* and Nvidia. The company had previously raised $180 million in seed funding nine months earlier, which had valued it at $1.5 billion. That earlier round included GV, Sequoia and Index as investors.

Flapping Airplanes was founded by Aidan Smith and brothers Asher and Ben Spector. Smith previously founded a startup and was a Thiel Fellow, and he worked at Neuralink during his college years. Asher Spector earned a statistics doctorate from Stanford University, while Ben Spector was a computer science doctoral student at Stanford and founded a student-run startup accelerator called Prod while at MIT.

David Cahn, a Sequoia Capital partner who invested in Flapping Airplanes, described the founders as building what he called the "young person's AGI lab," emphasizing their focus on creating advanced artificial intelligence systems with limited resources. The company describes its technology as a "megakernel framework" that can manage multiple computational tasks within a single GPU program. This approach aims to improve efficiency by overlapping memory-intensive inference operations with compute-heavy training processes, reducing idle GPU time.

The founders argue that current AI development relies on consuming vast amounts of data and computational power, but their framework seeks to achieve significant progress without requiring such extensive resources. Asher Spector stated after the company's launch that a model requiring a million times less data would also be far easier to deploy in practical applications. The new funding will support hiring and the development of systems intended to realize this goal.

Julie Bort serves as the Startups/Venture Desk editor for TechCrunch. Inquiries can be directed to [email protected] or via @Julie188 on X.

TECHNOLOGY

GitLab issues emergency patches for critical vulnerabilities

7h ago · Source: Hacker News

GitLab issued emergency updates on October 21, 2026, releasing patched versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13 for both Community and Enterprise editions. The company urged all self-hosted instances to upgrade immediately, citing two newly disclosed vulnerabilities that could allow remote code execution and account takeover under specific conditions.

The most severe flaw, CVE-2026-110264, involved an integer overflow in the regular expression compiler that could permit unauthenticated attackers to run arbitrary code when processing specially crafted input. GitLab assigned it a CVSS score of 10.0, its highest severity rating. The vulnerability was patched in versions 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, and 19.5.1, with backports extending protection to older supported releases.

A second critical issue, CVE-2026-15723, stemmed from improper input handling in GitLab’s OmniAuth-to-LDAP integration. When both SAML and LDAP auto-linking were enabled, an authenticated user could potentially seize control of an existing LDAP-managed account without additional verification. This vulnerability carried a CVSS score of 8.2.

Additional patches addressed medium- and low-severity concerns, including improper access controls in GraphQL APIs, cache poisoning risks in OAuth discovery endpoints, and edge cases involving SAML/LDAP membership enforcement and AI feature billing validation. No active exploitation of these flaws has been reported publicly.

GitLab emphasized that GitLab.com and GitLab Dedicated environments were already running patched versions. Self-managed customers were advised to complete upgrades promptly to mitigate exposure. The company also reminded users to follow established security hygiene practices, including monitoring threat detection alerts for CVE-2026-110264 and CVE-2026-15723.

For organizations relying on GitLab for source control and DevOps workflows, the updates represent a mandatory step to maintain system integrity. The company reiterated its commitment to transparent vulnerability disclosure, publishing detailed technical reports 90 days after patch release via its public issue tracker.

While the patches themselves are routine in the context of regular security maintenance, the speed of deployment underscores the ongoing challenge of securing complex, large-scale development platforms.

TECHNOLOGY

NSA warns of critical PHP vulnerabilities affecting millions of websites

7h ago · Source: techcrunch

The U.S. National Security Agency issued an urgent advisory on Wednesday highlighting two critical vulnerabilities in the PHP programming language that affect an estimated 70% of websites globally. The flaws, present in PHP versions dating back to 2004, could allow attackers to access server file systems or databases if left unpatched. The PHP Foundation confirmed patches are now available, but the agency recommended immediately disconnecting unpatched sites from the internet until updates can be applied.

PHP powers more than 33 million websites, including major content management systems like WordPress. While WordPress clarified the vulnerabilities are not specific to its platform, site administrators must coordinate with hosting providers to implement fixes. The vulnerabilities were discovered through AI-driven security research: OpenAI’s Patch the Planet initiative identified one flaw using GPT-5.6 Sol, while Google’s Wiz team used its Wiz Atlas AI agent alongside GPT-5.6 Sol to uncover additional issues. Both groups followed responsible disclosure practices, collaborating with PHP developers to create patches before public disclosure.

Security researchers noted that AI has lowered barriers for exploiting such longstanding flaws, as machine learning models can now adapt exploits across diverse PHP configurations and memory layouts. This development has intensified pressure on website operators to update to PHP 8.5.12, the latest supported version, as older versions (including PHP 8.1 and earlier) are no longer maintained. The NSA’s warning underscores the urgency of patching, as malicious actors now possess the tools to target unpatched systems at scale.

The coordinated effort involved major technology companies including Automattic, Akamai, AWS, Cloudflare, Fastly, Imperva, Microsoft, and Vercel in testing and validating fixes. While no active exploits have been reported, the advisory emphasizes that the window to prevent widespread compromise is narrow. Website operators are advised to verify their PHP versions and apply updates through official channels to mitigate potential risks.

This incident reflects a growing intersection of artificial intelligence and cybersecurity, where advanced tools both reveal vulnerabilities and accelerate their remediation. The NSA’s guidance aligns with standard industry practices for critical infrastructure protection, prioritizing proactive risk mitigation over reactive crisis management.

TECHNOLOGY

PHP releases security patches addressing critical remote code execution flaws

7h ago · Source: Hacker News

The PHP development team issued four updated versions—8.5.12, 8.4.27, 8.3.36 and 8.2.35—earlier today to remediate two vulnerabilities that could permit unauthenticated attackers to execute code on servers running the language. The fixes, documented on php.net, detail attack vectors and provide update instructions for affected systems.

Both issues reside in core components of PHP that process nearly every request: memory management and error handling. One flaw, tracked as CVE-2026-109618 and assigned the identifier GHSA-w8hw-w9fx-j79w, permits remote code execution when a request triggers an out-of-memory condition at a precise moment, leaving partially initialized internal data that later becomes exploitable. The second, CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp), enables code execution through a use-after-free condition in PHP's global state handling, where freed memory from a prior request is later reused.

Exploitation requires specific conditions. In Apache with mod_php, the vulnerabilities can be triggered before application code runs, allowing full remote code execution under default configurations. Similar outcomes were demonstrated against PHP-FPM through application-level code paths. Researchers from multiple firms confirmed the feasibility of attacks under controlled testing.

The vulnerabilities were first identified during an external security audit commissioned by the PHP Foundation in 2024. The audit, conducted by Quarkslab, uncovered early indicators of the out-of-memory issue while examining a separate bug. Subsequent analysis by the PHP security team and external researchers validated the risks and refined exploitation paths.

Fixing the flaws required trade-offs between backward compatibility, performance, and ecosystem stability. Multiple technical approaches were evaluated, but each carried significant risks of breaking extensions or introducing new vulnerabilities. The complexity of coordinating changes across the broad PHP ecosystem delayed resolution for months, a situation the foundation later attributed to structural limitations in its decision-making processes.

In May 2026, the PHP Foundation established the Ecosystem Security Team to centralize triage and coordination of security issues. The team includes dedicated personnel such as Volker Dusch, who serves as AI Security Engineer in Residence, and Daniel Scherzer, who focuses on hardening efforts. Additional support arrived through hires Alexandre Daubois and Daniel Scherzer, both tasked with improving report triage and patch development.

The foundation also expanded its tooling capabilities, integrating AI-assisted validation from OpenAI's Daybreak Red and Anthropic's Claude Mythos into its workflow. These tools aid in identifying duplicate or invalid reports but do not replace human assessment in final decisions. Since July, the team has assigned 15 new CVE identifiers and processed over 100 vulnerability submissions, many of which were duplicates or non-reproducible.

A coordinated disclosure plan was disrupted when details of the vulnerabilities surfaced prematurely online two days before the scheduled release. The PHP project advanced its announcement by one day and adjusted the release timing to ensure users could apply updates promptly. Distributors and vendors were still finalizing packages at the time, making an immediate rollout impractical.

Shortly before the public release, Chainguard published patched container images ahead of schedule, exposing the fixes in binary form while other users awaited the official update. The premature disclosure did not appear to enable active exploitation at the time, but it highlighted challenges in maintaining confidentiality during multi-party coordination.

The foundation emphasized that while progress has been made in addressing the vulnerabilities, sustained investment is required to prevent similar issues in the future. It called on organizations relying on PHP—including hosting providers, cloud platforms, financial institutions, and government agencies—to increase financial support through sponsorship of the PHP Foundation.

Sponsorship, the foundation noted, directly funds the development of deep technical expertise within the PHP codebase and supports full-time security work. Further information on contribution levels and engagement opportunities is available at thephp.foundation/sponsor.

The release underscores both the ongoing risks in widely deployed open-source infrastructure and the growing complexity of securing foundational web technologies in an era of accelerated vulnerability discovery and AI-assisted research.

TECHNOLOGY

Compromised LiteLLM 1.107.0 package on PyPI deploys stealer and backdoor

7h ago · Source: Hacker News

A newly released version of the LiteLLM library available through the Python Package Index (PyPI) was found to contain hidden malicious components that activate automatically whenever Python runs on an infected system. The package, version 1.107.0, was removed from PyPI within hours of its publication on October 21, 2026, after researchers identified it as a supply‑chain attack that injects a credential‑stealing module and a remote‑code‑execution backdoor into any Python environment that installs it.

The malicious release targeted all three supported platforms—Linux, macOS, and Windows—by embedding three files in the site‑packages directory of each wheel. Two of those files, cook.pth and sitecustomize.py, are loaded by Python at interpreter startup, meaning the payload executes in every process, from end‑user applications to system tools such as pip and integrated development environment language servers. The third file, a data directory, stores exfiltrated information.

The stealer, identified as cook.py, harvests a broad set of credentials and secrets. It collects SSH keys, cloud‑provider credentials, continuous‑integration secrets, browser‑saved passwords, and API keys used by various large‑language‑model providers. The data are encrypted with a randomly generated AES‑256‑CBC key, which is then wrapped with an RSA‑OAEP public key baked into the implant. The encrypted payload is packaged into a tar.gz archive and posted to the domain www.litellm.dev via an HTTP POST request that includes a custom X‑Token header. Each host records a timestamp file to ensure the theft occurs only once.

A secondary component, sitecustomize.py, functions as a backdoor daemon. After acquiring an exclusive lock, it forks into the background, detaches from its parent, and changes its working directory to root. On an hourly schedule it retrieves a server address from a GitHub repository maintained by an account later deleted. Using that address, it re‑executes the stealer and downloads additional code from a URL pointing to codepy, which can be swapped out at any time. The daemon’s activity ceases if the address becomes unavailable; however, hosts that had already fetched a payload before the address was removed may have executed second‑stage instructions.

The attack vector appears to have leveraged the build system used to create the distribution packages. The source tarball for 1.107.0 contains a single line in its pyproject.toml file that instructs the maturin build tool to copy a cook/ directory into the wheel’s purelib area. This directory was absent from the upstream GitHub repository and from any legitimate release history. The resulting wheels match the cryptographic signatures of the legitimate release pipeline, suggesting that the compromised artifacts were produced by an internal build environment rather than by a public GitHub Actions workflow.

Investigators noted several anomalies in the release metadata. The tag v1.107.0 points to a commit whose pyproject.toml declares version 1.108.0, yet the uploaded sdist corresponds to a later commit that includes the malicious cook/ folder. Dependency pinning to companion packages litellm‑proxy‑extras==0.4.110 and litellm‑enterprise==0.1.78 aligns with the clean release candidate 1.107.0rc2, masking the deviation from normal version progression. The wheel RECORD entries for the malicious files are intact, indicating no post‑build tampering, and timestamps show separate native builds for each platform occurring within a narrow window on the day of release.

Network indicators include the command‑and‑control domain www.litellm.dev and the now‑defunct GitHub path raw.githubusercontent.com/letters9813/pythonclient-test/main/domain.txt, which supplied the server address for the backdoor. Host‑level artifacts such as cook.pth, cook.py, and sitecustomize.py remain present in infected environments, as does the lock file /tmp/remote_code_loader.lock and the environment variable PRIVCOLLECT_ACTIVE=1. The stealer writes a marker file (/tmp/.pc_once_72129118c59f5636c0bb) after a successful data upload to prevent duplicate exfiltration.

Hashes of the malicious artifacts are publicly available, allowing defenders to scan for their presence. The incident underscores the risk that a compromised maintainer credential or a hijacked private release pipeline can introduce malicious code into widely used open‑source libraries without detection until after deployment. The rapid removal of the package from PyPI and the subsequent deletion of the associated GitHub account illustrate the transient nature of such attacks and the need for vigilance in verifying package provenance.

The episode has prompted discussions within the Python community about strengthening supply‑chain security, including the adoption of reproducible builds, signed metadata, and provenance attestations for published wheels. While the immediate threat has been mitigated by the package’s removal, the incident serves as a reminder that trusted repositories remain attractive targets for adversaries seeking to exploit the breadth of automated dependency resolution mechanisms.

TECHNOLOGY

Code is clay now

7h ago · Source: Hacker News

A developer identified as Alberto Denia described a shift in software creation that emerged after November 2025. He noted that before this point, modifying code required significant effort akin to carving stone, where even minor adjustments often involved extensive rework. Larger changes demanded substantial planning and risk mitigation. Since then, the rise of agentic coding tools has altered this dynamic. These systems enable rapid iteration by allowing developers to generate, test, and refine code with minimal overhead. The cost of experimentation has dropped, making code more malleable. Denia compared this shift to working with clay rather than stone. With clay, initial structures can be shaped quickly, iterated upon, and restructured without the same constraints. This approach supports both exploratory development and large-scale refactoring. For instance, a developer might prototype a feature in a single session, test its functionality, and adjust based on real-time feedback. Similarly, teams could pivot entire product components within days, using automated checks to validate changes. The distinction between rapid prototyping and deliberate engineering remains critical. While the speed of iteration lowers barriers to experimentation, determining the right direction still requires careful analysis. Two primary workflows have emerged. One emphasizes continuous human involvement, where developers guide each iteration with contextual judgment. This method suits projects requiring nuanced design or user experience refinement. The other prioritizes automated systems that handle repetitive tasks, such as generating standardized code or enforcing quality controls. These pipelines operate with minimal human input, intervening only when predefined criteria are unmet. Both models retain human oversight but differ in timing and scope. Large-scale applications often blend these approaches, using automation for routine work while reserving creative problem-solving for complex challenges. The transition reflects a broader evolution in software development, where tools increasingly support flexible, adaptive workflows. Whether through iterative refinement or structured automation, the focus remains on balancing efficiency with intentional design. The implications extend beyond technical practice, influencing how teams approach problem-solving and innovation. As these tools mature, their integration will likely depend on aligning methodology with project goals.

TECHNOLOGY

Nvidia expands silicon substrate and packaging capacity through supplier investments

7h ago · Source: theregister

Nvidia announced plans to expand its silicon substrate and advanced packaging supply chain by investing in key suppliers, aiming to secure production capacity amid growing demand for AI hardware. The company will increase substrate capacity for its products by 2.5 times over the next three years, with new agreements involving Samsung’s Electro-Mechanics division, IBIDEN, Unimicron, and Amkor. These partnerships include capacity reservations and plant expansions, such as a planned tripling of output at an IBIDEN facility and a 300% increase in production capacity at Amkor. Nvidia also announced an expansion of its collaboration with SPIL, targeting a 15-fold increase in optical connector manufacturing capacity by mid-2027, with further growth expected by the end of 2028. Executives have emphasized that current capacity constraints, rather than demand, are the primary bottleneck in meeting AI hardware needs. The moves reflect a broader strategy to stabilize and diversify the supply chain for critical components used in AI processors and graphics chips.

TECHNOLOGY

mitmproxy introduces --emudhra option for custom certificate handling

7h ago · Source: Hacker News

The latest release of mitmproxy adds a command-line flag that lets users load a specific intermediate certificate authority. The option, named --emudhra, accepts a PEM-encoded certificate chain that includes a compromised eMudhra intermediate CA and its cross-signed root. Users can supply the chain via a file or directly through the flag. The feature aims to support testing scenarios where the eMudhra CA appears in a trusted store. The implementation resides in the mitmproxy source repository and is documented in the project's changelog. No public release date has been announced. The change does not alter the core functionality of the proxy but expands its configuration capabilities for advanced users.

TECHNOLOGY

Blackstone's AI finance chief says debt concerns overstated

7h ago · Source: techcrunch

Blackstone veteran Jas Khaira told attendees at TechCrunch Disrupt that fears about debt tied to the AI infrastructure boom are overstated. The private‑equity firm is channeling capital across a spectrum of activities, from issuing large loans to data‑center operators to backing frontier AI models and applications.

In early 2024 the firm launched Blackstone N1, a San Francisco hub that consolidates its AI‑related investments. Khaira, who moved from New York to lead the unit, said the capital intensity of AI distinguishes it from earlier tech waves such as mobile or SaaS, where moderate funding could achieve scale. Blackstone’s $1.3 trillion in assets under management positions it to supply the massive financing required for the current shift.

Khaira highlighted the firm’s focus on compute financing and its ability to structure flexible capital, ranging from debt to equity. Blackstone now ranks as the largest owner of compute assets outside the hyperscalers, with stakes in neo‑clouds, data‑center operators and related infrastructure.

One notable deal involved Crux AI, a neocloud partnered with Google to commercialize custom TPUs, for which Blackstone committed $5 billion. The firm also backed Etched, a chip startup whose rapid progress has drawn investor attention. Neoclouds are providers that rent out GPU‑heavy cloud capacity.

In 2023 Blackstone extended a $2.3 billion loan to CoreWeave, a neocloud that saw demand surge after the launch of ChatGPT. At the time CoreWeave reported only $30 million in revenue and limited profitability, but it possessed a substantial inventory of Nvidia GPUs that served as collateral. The loan was underpinned by contracts with major customers such as Microsoft, establishing a template for subsequent credit facilities.

Building on that model, Blackstone co‑led a $10 billion credit line for Firmus, an Australian GPU provider, earlier this year. Recent months have brought heightened scrutiny as debt levels at CoreWeave and other neoclouds have risen sharply; CoreWeave’s liabilities now total roughly $50 billion, prompting commentary from investors like Brad Gerstner of Altimeter Capital, who noted that GPU collateral alone may no longer suffice for cheap financing.

Khaira identified several drivers of current credit‑market tension. Interest‑rate hikes in September and elevated inflation have pushed borrowing costs higher, while the surge of AI‑focused debt issuances has intensified competition for capital. Lenders are responding with wider credit spreads, meaning higher premiums on top of already elevated base rates, even for companies with strong balance sheets such as Meta and Microsoft.

The market reaction is evident in equity price moves. CoreWeave’s shares have fallen more than 20 % in recent days, and Firmus abandoned a planned initial public offering on the Australian Securities Exchange that would have valued the company at about $30 billion. Khaira attributed the IPO’s cancellation to a mismatch between the proposed valuation and current market appetite, as investors reassess the appropriate pricing of neocloud businesses amid rising rates.

Despite these pressures, Khaira argued that the risk of a systemic credit crisis remains limited. He pointed out that most data‑center construction is commissioned by hyperscalers, whose creditworthiness underpins the financing. Consequently, the debt supporting AI infrastructure is, in his view, ultimately backed by some of the most financially robust corporations in the world.

Beyond direct financing, Blackstone is fostering AI adoption through a $1.5 billion joint venture with Anthropic and Hellman & Friedman, dubbed “Ode with Anthropic.” The partnership supplies forward‑deployed engineers to help companies integrate AI into their operations, initially targeting Blackstone’s 280 portfolio companies.

When questioned about returns for Blackstone‑owned firms that have embraced AI, Khaira acknowledged mixed outcomes, describing adoption as a “sawtooth‑type pattern” in which periods of excess compute may precede eventual utilization. He noted that while some portfolio companies are already seeing measurable ROI, the benefits are uneven across the broader investment base.

The article includes a standard disclosure that the publisher may earn a small commission from links, which does not influence editorial independence.

TECHNOLOGY

FCC Chair Brendan Carr Calls for Broadcasters to Avoid Airing Unverified Polls

7h ago · Source: arstechnica

Federal Communications Commission Chairman Brendan Carr issued a public warning to television and radio broadcasters about publishing or airing polling data that lacks scientific validity or credible methodology. His statement, posted on the social media platform X, emphasized that broadcasters have a responsibility to provide viewers with context when covering polls, particularly those that are later revealed to be fabricated. Carr did not name specific polls or stations in his message, but the timing coincided with heightened scrutiny of political polling practices following multiple incidents involving fabricated data.

The warning comes amid a broader effort by the Trump administration to challenge news organizations over their coverage of election-related surveys. In August, former President Donald Trump called on the FCC to take action against what he described as "fake polls" used by media outlets, arguing that such polls mislead the public. Carr’s post echoed these concerns, urging broadcasters to avoid disseminating poll results that could distort public understanding of voter sentiment.

Former FCC officials, including former chairmen Tom Wheeler and Mark Fowler, criticized Carr’s approach as an attempt to exert regulatory pressure on broadcasters to self-censor. In a joint statement, they argued that reporting on publicly available polling data—even when later found to be inaccurate—does not violate FCC rules and should not be subject to regulatory scrutiny. They emphasized that the FCC does not have authority over editorial decisions made by licensed broadcasters.

One case drawing particular attention involved a polling firm called Wedgewood Polls, which admitted to fabricating survey results as part of an experiment to test whether media outlets would report on unverified data. The company claimed it distributed fabricated polls through aggregators such as The New York Times, FiftyPlusOne, and VoteHub, which initially included the data in their polling trackers. Wedgewood stated it had no formal credentials or established methodology but was treated as a legitimate source by several platforms.

The New York Times later clarified that it had conducted some due diligence before incorporating Wedgewood’s polls into its reporting. According to the newspaper, it requested information about the pollster’s methodology, sample sourcing, and funding, and received responses from individuals identifying themselves as Jack Sims and Andrew Prater. The Times noted that while Sims had prior experience in polling, the firm’s lack of transparency raised questions about its credibility. Ultimately, the Times stated that none of the Wedgewood polls were used in its national polling averages or in tracking President Trump’s approval ratings.

Zachary Donnini, head of data science at VoteHub, explained that his organization assigned Wedgewood a low reliability rating but still included its data in limited form before learning of its fraudulent nature. The company noted that it had reached out to Wedgewood for clarification but received no substantive response before the firm publicly acknowledged the fabrication.

The incident has reignited discussions about the responsibilities of both pollsters and media outlets in ensuring the accuracy of public opinion data. While some aggregators have removed Wedgewood’s polls from their platforms, others have emphasized the need for improved vetting processes to prevent the spread of misleading information. Nate Silver, editor of FiveThirtyEight, confirmed that his site had removed Wedgewood’s data, noting that its results showed a slight Democratic bias compared to other polls.

The situation underscores the challenges of maintaining integrity in political polling and the importance of transparency in data reporting. As regulatory figures like Carr continue to call for greater accountability, media organizations and polling institutions may face increasing pressure to strengthen verification standards and clarify the limitations of the data they disseminate.

TECHNOLOGY

Meta secures Mark Zuckerberg's residency in California through special share structure

7h ago · Source: theverge

A regulatory filing released on October 21, 2026, revealed that Meta Platforms Inc. structured a transaction to retain Mark Zuckerberg as a California resident amid concerns over Proposition 40, a ballot measure that would increase taxes on large technology companies. The filing indicated that Zuckerberg was considering relocating his primary residence if the proposition passed. To address this, Meta's board authorized the creation of non-voting shares specifically for Zuckerberg, enabling him to liquidate portions of his holdings without diminishing his voting authority. In exchange, Zuckerberg committed to maintaining his primary residence in California or at Meta's headquarters for a minimum of eight years while serving in a full-time executive capacity. The arrangement was disclosed as part of the company's ongoing governance planning and does not alter existing ownership structures or control dynamics within the board.

TECHNOLOGY

Meta introduces a new class of non-voting shares to support AI expansion

7h ago · Source: theverge

Meta Platforms announced that it will issue a new class of non-voting shares to finance its artificial intelligence initiatives and other strategic priorities. The company disclosed the move in its third-quarter earnings release on Wednesday, stating that the shares will also be used for potential acquisitions and employee compensation. Trading of the new shares is expected to begin in 2027.

The press release emphasized the scale of investment needed to sustain growth, expand infrastructure, and maintain competitiveness in an industry increasingly shaped by AI. Susan Li, Meta’s chief financial officer, said during an earnings call that the new share class would "expand our funding tools and give us flexibility to invest behind the unprecedented momentum we’re seeing across every part of our business driven by AI."

Meta has committed substantial resources to AI development, including the construction of large-scale data centers, recruitment of talent from firms such as OpenAI, and the creation of proprietary AI models. The company projects capital expenditures of $135 billion to $145 billion for the current year, up from earlier estimates.

Recent product launches include Muse, an AI agent capable of tasks such as managing email, booking restaurant reservations, and planning travel. The Muse application reached 10 million downloads in the United States within a week of its release and was briefly the top app in its category. A related model, Muse Wonder, was introduced shortly thereafter.

The rollout has encountered challenges. A technology content creator reported that the agent disclosed personal address information during a Facebook Marketplace interaction, raising privacy concerns. Meta also suspended a feature allowing users to share AI-generated conversations after researchers identified publicly accessible data.

The issuance of non-voting shares is a structural mechanism that does not alter existing voting control, as the new shares carry no rights to vote on corporate matters. The move reflects a broader trend among large technology firms seeking alternative methods to raise capital without diluting controlling shareholders' influence.

TECHNOLOGY

EA to close BioWare studio and cut hundreds of jobs amid restructuring

7h ago · Source: kitguru

EA announced plans to shut down BioWare, the video game studio behind the Mass Effect and Dragon Age franchises, as part of broader cost-cutting measures. The company, which was acquired by a private equity group earlier this year, disclosed intentions to reduce its workforce by approximately 400 employees, representing about 3% of its global staff. The initial reductions include the closure of BioWare's development studio, ending production on a new Mass Effect title that had been in early development with roughly 50 team members. EA indicated that further workforce adjustments may follow in upcoming quarters as it seeks to streamline operations and redirect resources toward other franchises, including Battlefield, Apex Legends, and a forthcoming Star Wars Jedi game. The move marks the end of BioWare's 30-year history of developing narrative-driven role-playing games, during which it released influential titles such as Star Wars: Knights of the Old Republic, Mass Effect, and Dragon Age. Earlier attempts to pivot toward multiplayer and live-service models, including the development and subsequent cancellation of Anthem, had strained the studio's creative focus. A new entry in the Dragon Age series, released in 2024 after multiple development cycles, underperformed commercially and critically, contributing to shifting strategic priorities. EA has not indicated plans to divest the BioWare intellectual property, though industry observers suggest potential interest from third parties following the announcement.

TECHNOLOGY

Cyberpunk 2077 joins Xbox Play Anywhere program

7h ago · Source: kitguru

Microsoft announced that Cyberpunk 2077 will be added to its Play Anywhere program, allowing digital purchases on Xbox to be played on PC via the Xbox app and vice versa. The company first introduced the Play Anywhere initiative in 2017, aiming to let users access Xbox Store purchases across both platforms. While third-party support has grown slowly, Microsoft noted that the number of Play Anywhere titles released this year has been significant. The addition of Cyberpunk 2077 follows the launch of Cyberpunk Edgerunners Season 2 and precedes a scheduled patch that will introduce new content tied to the series, including a mystery quest for the character V and a perk enabling dual-wielding pistols. The update will roll out next week. The move provides players who purchased the game digitally on either platform with a complimentary copy on the other platform. KitGuru reported that the timing aligns with the series' release and the upcoming patch.

TECHNOLOGY

Opposable launches AI tool that controls smartphones through desktop interfaces

7h ago · Source: theregister

A new service called Opposable allows artificial intelligence to interact with Android and iPhone devices from a connected computer. The system uses accessibility features on Android to scan screens, then applies a vision-language model named GUI-Owl 1.5 2B to interpret visual input and determine where to tap. On iOS, the process requires a companion computer, with a Mac beta currently available and Windows/Linux options relying on hardware assistance.

The platform is designed to let AI agents perform routine actions such as opening apps, reading content, tapping interface elements, and typing. According to the developers, approximately 40 standard tasks—including setting alarms, sending messages, and toggling Wi-Fi—are handled by predefined code rather than AI processing. More complex operations demonstrated on the company's site involve multiple steps and extended execution times.

In one example, an AI agent used the MCP protocol to change a device's theme to dark mode and set a five-minute timer, requiring 50 seconds and 17 tool calls. Another task, retrieving the launch date and crew details for Apollo 11, took nearly two minutes and cost $0.44 in compute credits. A third demonstration showed an on-device Android agent launching the clock app and switching to the stopwatch function after about 96 seconds.

Performance metrics from internal testing indicate limited success rates. When presented with eight unseen tasks on an emulator, the system completed four out of eight attempts. When guided step-by-step through subgoals and verified against accessibility trees, success improved to six out of eight attempts across two runs. The company acknowledges that its current testing has been minimal and limited in scope.

Opposable's website includes warnings about security, noting that control tokens function similarly to passwords and should be protected accordingly. The service is not officially marketed as an accessibility solution, though the developers have stated they would consider feedback from users with disabilities. A spokesperson explained that demo slowness reflects execution on laptop CPUs without smartphone hardware acceleration, though performance improves when running directly on the device.

The project has drawn attention for its approach to delegating simple device interactions to AI, raising questions about efficiency, cost, and practical utility. While positioned as a way to offload routine smartphone tasks, the service requires manual setup, including sideloading an APK on Android and granting extensive accessibility permissions. No official release date or pricing model has been announced beyond usage-based costs observed in public examples.

TECHNOLOGY

Xbox to introduce handheld device alongside 2028 console release

7h ago · Source: kitguru

A Fortune report detailing Xbox chief executive Asha Sharma's first year reveals that Microsoft has shifted its timeline for the next-generation console, now targeting a 2028 launch for Project Helix. The company confirmed it will not accelerate the console's release, though hardware development continues toward a 2027 milestone. Among these plans is a first-party Xbox handheld, distinct from third-party devices such as the ROG Xbox Ally, which previously tested Windows-based gaming functionality. Pricing details remain unconfirmed, though industry analysts project a $1,200 to $1,800 range for the eventual console, significantly above the $500 price point of recent generations. The handheld market currently features devices averaging $1,000, positioning Microsoft's offering above entry-level competitors like the Steam Deck. While the handheld may carry less processing power than a full Helix console or a Series X, its pricing trajectory reflects broader market trends toward premium hardware configurations.

TECHNOLOGY

Star Wars Zero Company discounted to $48 on PlayStation 5 and Xbox Series S/X

7h ago · Source: theverge

Amazon is offering a discount on the physical editions of Star Wars Zero Company, a turn-based strategy game developed by Respawn Entertainment and set within the Star Wars universe. The PlayStation 5 version is listed at $47.99, down from its standard price of $59.99, while the Xbox Series S/X edition is priced at $49.99. The promotion reflects a reduction of roughly 20 percent from the game’s typical retail cost.

The title blends elements of tactical combat and narrative-driven missions, drawing comparisons to the XCOM series in its gameplay structure. Players assume command of a small squad, making strategic decisions that influence mission outcomes. Features include branching story paths with lasting consequences, higher difficulty settings that increase penalty for tactical errors, and a character customization system offering numerous unlockable outfits, accessories, and alien species inspired by the broader Star Wars franchise.

The game’s design emphasizes player agency and immersion, particularly for those familiar with the lore and aesthetics of the Star Wars universe. Its release has drawn attention from both genre enthusiasts and fans interested in leading a diverse team of characters into combat scenarios involving iconic adversaries such as droidekas.

Brad Bourque, a technology and commerce journalist based in Portland, Oregon, has written about the game’s mechanics and appeal for several digital media outlets. His reporting focuses on the game’s strategic depth, customization options, and the practical details of current retail pricing across console platforms.

TECHNOLOGY

Blacksmith reaches unicorn status with $66 million Series C led by Sequoia

7h ago · Source: techcrunch

Blacksmith, a company that provides tools for building and testing software — including code generated by artificial intelligence — disclosed on Wednesday that it has raised $66 million in a Series C funding round. The round was led by Sequoia Capital and brings the company’s valuation to $1 billion.

The funding follows a $45 million Series B round two months earlier, which had valued the company at $550 million, and a $10 million Series A round a year prior that valued the firm at $60 million. To date, Blacksmith has raised $125 million in total capital.

Co-founder and CEO Aditya Jayaprakash stated in a blog post that the company was created to simplify continuous integration, a process that involves building, testing, merging, and validating code changes. He noted that many organizations are finding it difficult to manage the increasing volume of CI activity, particularly as AI-generated code becomes more prevalent.

Jayaprakash added, “As agents write more of the world’s software, the question that matters is whether it can be trusted.”

Blacksmith also reported that its annual recurring revenue has increased 17-fold and that it has executed more than 90 million CI jobs. The company counts Mercury and Granola among its customers.

The latest round underscores growing investor interest in infrastructure that supports AI-driven software development.

TECHNOLOGY

Sony lists Kena: Scars of Kosmora as its trademark amid ongoing IP relationship

7h ago · Source: kitguru

Sony Interactive Entertainment has listed Kena: Scars of Kosmora as a trademark in recent legal filings, marking a shift in how the upcoming title is presented. The move follows the game's appearance in a PlayStation promotional video featuring K-Pop artist LISA, where it was showcased alongside other first-party titles. Earlier this year, the game was introduced in a teaser trailer that identified it as the property of Ember Lab LLC. The new trademark designation does not reference Ember Lab, signaling a change in the game's branding affiliation. Sony has maintained a long-standing partnership with Ember Lab, the developer behind the 2021 title Kena: Bridge of Spirits, which initially launched as a PlayStation console exclusive before later expanding to other platforms. The upcoming sequel, Kena: Scars of Kosmora, is scheduled for release in 2027. Industry observers note that Sony's growing involvement in the franchise may lead to further integration, including potential acquisition of the studio, though no official plans have been announced. The development underscores the evolving nature of intellectual property ownership in the video game industry.

TECHNOLOGY

Xbox Game Pass to Offer A La Carte Service Options

7h ago · Source: kitguru

Microsoft is planning a major overhaul of Xbox Game Pass that would let subscribers select individual features rather than commit to a bundled tier. According to Fortune, the redesign would allow users to pick specific add‑ons such as console‑only titles, cloud streaming and multiplayer services. The current offering includes four tiers — Essential at £6.99 per month, Premium at £10.99 per month, Ultimate at £16.99 per month and a PC‑only version also priced at £10.99 per month. Higher tiers bundle extra benefits like extended cloud streaming time, additional reward points and access to Ubisoft+. Under the proposed model, pricing for each service would be set separately, potentially raising costs for users who opt for multiple features while possibly lowering expenses for those who only need a single function. The timing of the changes and the exact price points have not been disclosed. KitGuru asked readers for their views on the upcoming revamp and how much they believe each service should cost.

TECHNOLOGY

AI Could Accelerate Cyber Threats Against Critical Infrastructure, Security Experts Warn

7h ago · Source: theregister

The potential for artificial intelligence to speed up attacks on power grids, water systems and other essential services was highlighted by security professionals during a media briefing ahead of the release of a report by Frenos, a firm that conducts AI‑based penetration testing for operational technology environments.

Steve Swick, who previously served as chief information security officer at American Electric Power, noted that reliance on secrecy has long been a cornerstone of utility security. "The knowledge required to compromise these systems is becoming less of a barrier," Swick said.

Paul Shaver, head of OT security at Armadin, explained that AI can rapidly ingest technical manuals and documentation to identify exploitable design weaknesses. "I can download a controller’s manual, parse it quickly and discover features that were never intended to be exposed," Shaver stated.

Armadin, a startup founded by Kevin Mandia, employs autonomous AI agents to mimic real‑world cyber attacks. Shaver, formerly global OT practice leader at Mandiant before its acquisition by Google in 2022, cautioned against overstating the immediate risk. "The tools are improving, and access to information is faster, but we are not yet seeing script kiddies transform into nation‑state adversaries," he said. "What AI does is let someone with modest skills generate functional attack tools in days rather than months."

Harry Thomas, chief technology officer and co‑founder of Frenos, described the findings of a recent test suite that evaluated large language models on planning and executing simulated attacks against industrial control systems. The study involved 16,980 test cases run between October 2025 and September 2026, covering decision making, planning and execution across six frontier models, two U.S. open‑source models and two foreign open‑source models.

Results showed that the most capable frontier models succeeded in roughly 90 % of planning attempts, though consistency varied, with success rates between 60 % and 74 % across repeated trials. Open‑source models performed lower, with one achieving a 36.2 % overall success rate, surpassing three of the frontier models that scored 31.9 %, 18.8 % and 17.9 % respectively. Thomas emphasized that while AI can accelerate the creation of attack plans, it remains prone to errors and hallucinations, making human oversight essential.

Frenos recommends that operators of critical infrastructure adopt layered defenses, including network segmentation, restricted remote access, strict permission controls and regular testing of recovery procedures. "Business continuity and disaster recovery plans exist for a reason," Thomas said. "Activating them is a practical first step."

The report underscores that AI can lower technical barriers for would‑be attackers, potentially increasing the number of actors capable of targeting essential services. However, it also notes that successful exploitation still depends on detailed knowledge of specific systems, and that human expertise remains a critical component of both offensive and defensive strategies.

TECHNOLOGY

Greenpeace interrupts Nvidia CEO Jensen Huang's GTC keynote in Berlin over chip use in Russian drones

7h ago · Source: tomshardware

A Greenpeace activist interrupted Nvidia CEO Jensen Huang's keynote address at the GTC conference in Berlin on Wednesday morning. The protest occurred within minutes of Huang beginning his presentation, as attendees reported a crowd member demanding he address allegations that Nvidia chips were being used in Russian military drones and questioning the company's environmental impact. Video footage captured by audience members showed demonstrators standing on chairs holding a banner reading "Nvidia, clean up your dirty business!" with a visible Greenpeace logo. The protester directly addressed Huang, asking, "Jensen, what about the technology found in Russian drones? Those were Nvidia chips. What are you doing about that? What are you doing about the environmental destruction?" Nvidia's official livestream did not broadcast the interruption, though attendee recordings confirmed the disruption. The incident highlighted ongoing concerns about semiconductor supply chains and conflict-related applications, though Nvidia has not publicly responded to the specific claims made during the protest.

TECHNOLOGY

Apple delays HomeView launch until November 2026 due to Siri AI readiness

7h ago · Source: 9to5mac

Apple has confirmed that its HomeView smart home device will not reach consumers until November 13, 2026, after a multi-year postponement. The delay stems from the company’s need to integrate advanced Siri AI capabilities that enable personalized, context-aware interactions within the home environment.

Mark Gurman of Bloomberg reported in November 2024 that Apple had targeted a March 2025 launch for HomeView, but the timeline repeatedly shifted. The company now attributes the final delay to the development timeline of Siri’s next-generation AI features, which were essential to the product’s core functionality.

In statements to The Verge, Apple executives Kaiann Drance, VP of product marketing for home, and Lilian Rincon, VP of product marketing for AI, emphasized that Siri’s enhanced natural-language processing and conversational abilities are central to HomeView’s design. Drance described the integration of “personal context” through Siri AI as the key enabler for a new kind of home interaction, stating that the technology had finally matured enough to deliver a seamless experience. Rincon added that the shift to natural, intuitive voice interaction marks the point at which AI becomes broadly usable across generations, allowing both older relatives and younger users to engage with the device without technical barriers.

The executives also explained that launching HomeView in the European Union would have required waiting for Siri AI to become fully available on iOS devices in that region, as the product’s value proposition depends on these AI features. Without the advanced assistant, the device would lack the personalized functionality Apple intends to offer.

HomeView is positioned as a shared household device that leverages user-specific data to tailor smart home controls, such as adjusting thermostats or managing security settings through voice commands. Its delayed rollout underscores Apple’s prioritization of software readiness over hardware completion, reflecting a broader strategy of aligning product launches with the maturity of underlying AI systems.

TECHNOLOGY

Tech billionaires fund opposition to California wealth tax proposal

7h ago · Source: theverge

A coalition of tech billionaires has contributed more than $340 million to defeat Proposition 40, a California ballot measure that would impose a one-time 5 percent tax on billionaires. The Guardian reports the campaign against the measure spends over $1 million daily on advertising and outreach. Google co-founder Sergey Brin has given at least $102 million, joining a list of Silicon Valley executives supporting the effort. Other contributors include Palantir co-founder Peter Thiel, former Google CEO Eric Schmidt, DoorDash CEO Tony Xu, Stripe CEO Patrick Collison, crypto entrepreneur Chris Larsen, and several prominent venture capitalists. The proposal would target individuals with net worth exceeding $1 billion, affecting approximately 11 people in the state. Critics argue the tax could deter investment, while proponents say it would address growing economic inequality. The campaign's funding level represents one of the largest private efforts to influence a state-level tax policy in recent history.

TECHNOLOGY

Blizzard extends World of Warcraft Forever beta access

7h ago · Source: kitguru

Blizzard announced on Thursday that the ongoing beta for World of Warcraft Forever will remain open through Friday, pushing back the originally scheduled closure date. Production director Clayton Stone confirmed the extension in a statement released this afternoon, noting that current participants may continue testing until the end of the day. The extension follows a period of strong player engagement since the beta's launch, with thousands of users having accessed the test environment over the past several weeks. Access will remain restricted to those who received an invitation, though Blizzard opened a limited stress test on Thursday that allows any player to join. Participants in the beta are currently capped at level 30, and only a portion of the game's content is available for testing. A full public release is scheduled for November 4, at which point the level cap and content restrictions will be lifted. The company has not indicated plans for additional testing phases beyond the current window.

TECHNOLOGY

PHP 8.2.35 released as security update addresses remote code execution flaws

7h ago · Source: Hacker News

The PHP development team has issued PHP 8.2.35 as a security-focused update addressing two critical vulnerabilities. CVE-2026-109618 and CVE-2026-109619 could permit unauthenticated remote code execution if exploited. The update requires immediate installation by all users of PHP 8.2, as no alternative mitigations exist. PHP 8.2 entered its end-of-life phase on 31 December 2026, meaning no further security patches will be issued after that date. Users are advised to transition to supported versions promptly. Source code and binaries for PHP 8.2.35 are available through the official downloads page, with detailed change logs documenting the fixes.

TECHNOLOGY

Airbnb restricts guest cleaning duties, hosts voice concerns

7h ago · Source: techcrunch

Airbnb announced a new rule that bars hosts from requiring guests to perform cleaning tasks before checkout, including stripping beds, washing dishes, starting laundry or removing trash. The policy takes effect for bookings made on or after November 20.

The change follows sustained complaints from travelers who say they already pay cleaning fees yet are asked to handle chores themselves. Social media posts have highlighted frustration over what some describe as excessive checkout expectations and penalties for failing to meet them.

Some hosts have pushed back against the update. In Airbnb community forums, a number of property owners argue that basic cleaning is necessary to maintain hygiene and protect their investments. They note the financial and logistical effort involved in preparing a space for the next guest.

One host wrote that the rule shifts the platform toward a hotel model, diminishing the personal connection that distinguishes private rentals. "Guests are given complete freedom to be lazy while the hosts bear the risk," the post said. "The major distinction between commercial hotels and my private home is the personal touch. Guests can certainly be expected to wash their dishes or put them in the dishwasher and remove their dirty linens. In exchange, they enjoy a personal connection and a unique environment that a hotel simply can’t provide. Plus, every potential guest has the opportunity to read the listing beforehand and decide what they prefer. If these restrictions are removed, it could lead me to withdraw my listing and bid farewell to Airbnb after twelve years."

Airbnb has carved out limited exceptions, allowing hosts to request water conservation during droughts or require bear-proof trash containers in areas with wildlife concerns.

The move reflects ongoing tension between guest expectations and host responsibilities. It comes amid broader scrutiny of platform practices, including 2024 inquiries into fee transparency and a 2023 report that over 260,000 hosts had reduced or eliminated cleaning fees. In May 2025, Airbnb began defaulting to display total prices — including fees but excluding taxes — in search results worldwide.

The policy shift may influence host participation, though the company has not indicated how many might opt out. At the same time, it could appeal to travelers seeking rentals without the expectation of post-stay cleaning duties.

Lauren covers media, streaming, apps and platforms at TechCrunch.

You can contact or verify outreach from Lauren by emailing [email protected] or via encrypted message at laurenforris22.25 on Signal.

View Bio

TECHNOLOGY

Apple Stores Offer Limited Walk-In Access to iPhone Duo at Launch

7h ago · Source: macrumors

Apple announced that only a limited number of iPhone Duo units will be available for walk-in customers at select Apple Stores on launch day, Friday, October 23, 2026. The company confirmed the rollout will occur in the United States, Australia, Austria, Belgium, Canada, Mexico, Germany, the Netherlands, Singapore, Spain, Sweden, Switzerland, Türkiye, and the United Kingdom, with additional limited availability in certain locations in Italy. In Macao, walk-in access will be granted solely on launch day with similarly limited inventory. Customers in France, China, Hong Kong, India, Japan, Malaysia, South Korea, Taiwan, Thailand, and the United Arab Emirates will not be able to purchase the device in-store on launch day and must instead reserve a pickup time through Apple’s online store. Apple cited unprecedented pre-order demand and supply constraints as reasons for the limited in-store availability, noting that inventory is expected to sell out rapidly. The company also indicated that staff have been instructed to discourage walk-in purchases without reservations, particularly in regions where stock is expected to be extremely limited. Apple’s online store currently advises customers to revisit on Saturday, October 24, regarding reservation availability, leaving uncertainty about whether Friday reservations will be possible. Industry analysts have criticized Apple’s decision to open pre-orders before securing sufficient inventory, calling it a misstep given the anticipated demand. The iPhone Duo’s launch has generated significant attention, with early previews showing updated app interfaces designed for the device’s unique form factor, including landscape-oriented applications and revised system-level interactions.

TECHNOLOGY

Global websites offline as critical PHP vulnerability disclosed

A newly disclosed set of flaws in the PHP scripting language has prompted governments, councils and major online platforms to take websites offline while patches are developed.

7h ago · Source: bbc · 2 min read

A newly disclosed set of flaws in the PHP scripting language has prompted governments, councils and major online platforms to take websites offline while patches are developed.

The vulnerabilities, identified by researchers at cyber‑security firm Wiz in collaboration with Calif and the PHP Foundation, were uncovered using artificial‑intelligence tools. Wiz described them as the most severe weaknesses ever found in PHP, a language that underpins roughly 70 % of the web according to the researchers, though the BBC cannot independently verify that estimate.

The issues were first reported on Tuesday after details were leaked on social media, forcing the PHP Foundation to accelerate its planned announcement and release an emergency update. The foundation warned that the flaws could allow unauthenticated remote code execution, potentially giving attackers direct access to server file systems or databases.

In response, several public services have temporarily disabled their sites. Finland’s government halted its public web services, the Netherlands’ cyber‑security agency took its own site offline, and the UK’s National Cyber Security Centre (NCSC) issued guidance urging organisations to apply the patch immediately or, if that is not possible, to shut down affected systems. The White House confirmed that federal agencies are working with leading AI labs to accelerate a fix.

Japan’s Prime Minister Sanae Takaichi also urged citizens to verify whether their publicly accessible sites run on PHP. The Wikimedia Foundation, which operates Wikipedia, said it had taken down a number of auxiliary systems as a precaution, resulting in brief access problems for some users on Wednesday. Edinburgh Council’s website and portions of the BBC’s own site, including pages for programmes such as Doctor Who and The Traitors, were among those rendered inaccessible.

Experts note that PHP is embedded in a wide range of platforms, from content‑management systems like WordPress and Drupal to commercial hosting control panels, making the scope of the problem extensive. Don Smith, a cyber‑security analyst at Sophos, said the vulnerability is likely to become a high‑priority target for threat actors, especially because many organisations may not be aware of all the places PHP is running within their infrastructure.

The NCSC and counterpart teams in the EU and Australia have recommended that affected entities continuously monitor for further updates from third‑party vendors, as the flaw may affect all PHP versions dating back to PHP 5, released in 2004. However, the immediate patch is only available for the latest PHP releases, prompting users of PHP 8.1 and older versions to upgrade.

While the full impact remains uncertain, early signs of exploitation have emerged, according to Cloudflare’s chief technology officer Dane Knecht, who said the company is updating its mitigations as new attack vectors appear. The incident underscores the challenges of securing widely deployed software that underlies much of today’s online infrastructure.

TECHNOLOGY

Australian Federal Court Orders Apple to Permit Third-Party App Stores and Payment Options

7h ago · Source: 9to5mac

An Australian federal judge has mandated that Apple permit alternative app distribution and payment mechanisms for iOS users in Australia, marking a significant development in the country's antitrust case against the company. The ruling, delivered on March 1, 2027, requires Apple to allow iPhone users with Australian Apple Accounts to install applications from external websites and marketplaces beginning March 1, 2027, subject to a February 15 deadline for requesting a potential extension until May 3, 2027, pending court approval. This decision follows a prior finding that Apple violated Australian competition law by restricting alternative app distribution channels and payment methods, as alleged by Epic Games in a lawsuit mirroring its ongoing U.S. litigation against Apple. Justice Jonathan Beach determined that Apple possessed 'a substantial degree of power' in both iOS app distribution and in-app payment markets, leveraging developer agreements and App Store guidelines to suppress competition. The judgment specifically prohibits Apple from blocking app installations outside its official store, restricting developers from distributing apps through alternative channels, mandating the use of Apple's in-app purchase system, or preventing links to external payment options. Additional directives require Apple to provide access to necessary developer tools on comparable terms, eliminate fees for alternative distribution channels, and permit developers to offer lower pricing outside Apple's payment ecosystem. The court also ordered the immediate reinstatement of Epic Games' Fortnite and related applications on the Australian App Store upon receipt of a formal application from Epic, though this specific remedy is not bound by the March 2027 timeline. While Apple must comply with these changes, the court rejected Epic's request for global enforcement of the injunctions and permitted Apple to maintain security scanning and notarization requirements for apps distributed externally. Apple has announced its intention to appeal the decision, stating it will seek a stay to preserve its intellectual property rights and the security model underpinning the App Store experience. Epic Games hailed the ruling as 'great news for developers worldwide and iOS users in Australia,' emphasizing the restoration of Fortnite to the Australian App Store as a victory for an open mobile ecosystem.

TECHNOLOGY

Texas data center expansion threatens decades of air quality progress

7h ago · Source: theverge

A surge of new data centers in Texas could reverse air quality improvements achieved over recent decades, according to a report from the Houston Advanced Research Center. The state has emerged as the leading hub for data center construction, with 26 gigawatts of existing and planned capacity — the highest of any U.S. state. Projections indicate that Texas may accommodate four times more proposed data center capacity than any other state, much of it reliant on on-site power generation.

If all planned facilities were to draw power from the current electricity grid mix, emissions of fine particulate matter and nitrogen oxides would rise sharply. Soot levels could exceed those recorded in 2006, while smog-forming pollutants might approach 2004 levels. Carbon dioxide emissions from the sector could increase by 90 percent compared to 2025 benchmarks. These outcomes depend heavily on how energy demands are met.

Developers are exploring multiple strategies to secure power, including building dedicated renewable sources or installing on-site gas turbines. While pairing grid electricity with locally generated solar or wind power could reduce NOx emissions by up to tenfold, reliance on less efficient gas turbine technology — chosen to accelerate construction timelines — risks maximizing pollution output. The environmental impact hinges on whether clean energy infrastructure can keep pace with the rapid expansion of digital infrastructure.

John Hall, CEO of HARC, noted that decades of progress in emissions reduction are at risk, particularly as gains in transportation and industrial sectors are now threatened by unchecked growth in data infrastructure. The trajectory of future air quality will depend on policy choices, utility planning, and the willingness of developers to prioritize sustainable power sources over convenience or speed.

TECHNOLOGY

GPU Lifespans Extend as AI Demand Drives Value Retention

7h ago · Source: wccftech

The growing longevity of graphics processing units has emerged as a key trend in the AI hardware market, with industry leaders highlighting shifts in depreciation patterns. NVIDIA CEO Jensen Huang stated at the GTC Berlin conference that modern GPUs now maintain productive utility for eight years or longer, a significant extension from earlier four-year expectations. This durability stems from software programmability and continuous performance enhancements throughout a unit's lifecycle, enabling sustained relevance across diverse applications.

Elon Musk reinforced this perspective during SpaceX's Q3 2026 earnings discussion, noting that advancing AI model capabilities increase 'useful intelligence per watt' over time. He observed that older GPU generations, such as H100 units, now command higher rental rates than when initially deployed, reflecting their enduring value in compute-intensive workflows. The SpaceX chief emphasized that compute value scales proportionally with AI efficiency gains, stating: 'The value of that compute is proportionate to the useful intelligence per watt.'

Analyst Gavin Baker, recognized for semiconductor market insights, pointed to pricing dynamics where GPU rental costs have risen sharply despite declining token prices. Baker noted that increased token efficiency per GPU hour has driven up the value of compute time, with rental rates climbing 'vertical' as AI workloads become more optimized. This trend aligns with broader market observations about residual value retention.

Market data indicates NVIDIA's older A100 and H100 models currently trade at premiums exceeding standard depreciation schedules, with B200 units fetching 158 percent of their original cost. This depreciation pattern contrasts with traditional linear scheduling models, as retired GPUs transition through secondary markets rather than becoming obsolete. The sustained demand for compute resources is further underscored by financial metrics showing AI infrastructure investments yield payback periods under one year, with $40 billion annual revenues from $50 billion in dedicated compute capacity.

These developments reflect a structural shift in how computing hardware maintains economic value, driven by software-hardware synergy and evolving AI workload requirements rather than hardware obsolescence cycles.

TECHNOLOGY

NVIDIA Expands DGX Spark Cluster Support and AI Inference Performance

7h ago · Source: wccftech

NVIDIA has announced that its DGX Spark platform can now be configured as an 8-way cluster, expanding the previous 4-way limit. The update allows 64 GB configurations to aggregate up to 512 GB of memory and 128 GB configurations to reach 1 TB of pooled memory, enabling larger models and longer context handling. This scaling supports frontier-class models such as GLM 5.3 and the 74B Bolt variant. A new Sync Model Launcher will streamline model deployment by automatically matching containers to system configurations and linking to OpenCode documentation. The October software update also introduces a Wi-Fi Assistant for easier network switching in appliance mode and enhanced Spark Skills for troubleshooting and maintenance. Seven enterprise management integrations, including tools from Cisco, Microsoft, and Perforce, will be added to DGX Station for IT deployment workflows. DGX Station will launch with Windows support in December, targeting manufacturing applications and agent harnesses. New open-source robotics workflows are being released to aid in training manipulation skills and generating synthetic data. NVIDIA Cloud Functions will enter early access on DGX Station, allowing teams to share model endpoints and update models without altering application code. Performance improvements include a 30% speed gain in Qwen 3.8 27B inference on Spark, a 20% boost in GLM 5.3 Flash on Station, and a 40% uplift in Qwen 3.8 Flash-Next on RTX PRO 6000 Blackwell. Additional Day-0 models from Nemotron, DeepSeek, and others are now supported across RTX and DGX systems. Optimized model checkpoints improve RAM efficiency, leaving more memory available for KV cache. These updates position DGX Spark and RTX platforms as scalable solutions for local AI development, particularly for agentic workloads and distributed inference tasks.

TECHNOLOGY

EA to close BioWare studio and halt next Mass Effect development

7h ago · Source: Hacker News

Electronic Arts confirmed it will shut down BioWare, the studio behind Mass Effect, Dragon Age and Star Wars: Knights of the Old Republic, and halt early development of the next Mass Effect title, according to an internal announcement sent to staff.

The company also disclosed plans to lay off roughly 400 employees, including about 50 at BioWare, as part of broader restructuring following EA’s $55 billion acquisition by a consortium led by Saudi Arabia’s Public Investment Fund, Silver Lake and Affinity Partners in August.

Other major publishers have announced similar workforce reductions this year, with Xbox planning 3,200 cuts, Bungie reporting "significant" layoffs and Epic Games confirming over 1,000 job reductions.

In the statement, EA president and chief studios officer Cam Weber and EA president and COO David Tinson described BioWare as a "legendary studio that helped define the role‑playing genre" and said the decision was not taken lightly. They noted the studio’s 30‑year history of titles such as Baldur’s Gate, Neverwinter Nights, Star Wars: Knights of the Old Republic, Dragon Age, Mass Effect and Anthem.

The executives said the closure reflects BioWare’s recent challenges, including a mixed reception to Mass Effect: Andromeda in 2017, an unsuccessful live‑service bet with Anthem in 2019 and missed sales expectations for Dragon Age: The Veilguard, which prompted earlier staff reductions.

Amazon MGM Studios declined to comment on the status of a planned Mass Effect television series, though IGN reported the project remains in development. EA’s announcement also outlined continued investment in other franchises, including new entries in the Marvel’s Iron Man and Star Wars Jedi lines, a social‑first open‑world football title called Project Gridiron, and a pre‑production effort on a new Fight Night boxing game.

Within EA’s portfolio strategy, the company said it will concentrate resources on shooter and action‑adventure titles, streamline development on The Sims and skate., and adjust its live‑service Skate project. It emphasized that while some changes are difficult for affected employees, it will support them in seeking other roles within the company.

The restructuring reflects EA’s effort to focus on projects with clearer growth potential amid a rapidly evolving gaming market.

TECHNOLOGY

Global coordination emerges as researchers uncover critical PHP vulnerabilities

7h ago · Source: Hacker News

A coalition of maintainers, researchers and security providers recently completed a coordinated effort to address two critical vulnerabilities in PHP, the open-source scripting language that powers an estimated 77% of the web. The work, conducted under the Patch the Planet initiative, involved teams from OpenAI, Wiz, Cloudflare and other partners who validated the flaws, developed fixes and helped orchestrate a worldwide response.

Calif identified one flaw using an AI model, while Wiz independently reported both issues. PHP maintainers led the patch development and release, with external teams providing research, technical support and coordination. The vulnerabilities were resolved before public disclosure, creating what researchers called a "Defender’s Window" for deploying protections ahead of any potential exploitation.

The priority for organizations now is applying the available fixes. To assist, OpenAI released a PHP version checker as a Codex skill that helps operators identify vulnerable versions and determine which updates apply. The company also committed $1 billion in subsidized Daybreak access for frontline defenders, focusing on organizations protecting essential services with limited security resources.

Coordinating the global response required multiple stages. After upstream fixes were validated and tested, affected organizations received advance information to prepare protections. Infrastructure providers and security vendors worked on interim mitigations, including web application firewall rules. Government agencies, including the White House’s Cybersecurity Unit, CISA and international partners, helped distribute guidance to critical systems operators.

The process included five key steps: validating and fixing the vulnerability, giving organizations time to act, coordinating with government partners, preparing updates across affected products, and publishing guidance once patches were available. Participants received only the information necessary for their protective work, balancing the need for detail against potential misuse risks.

Beyond this specific case, the incident highlights how AI is reshaping vulnerability discovery. While AI can accelerate defensive research, the same capabilities could enable rapid development of offensive tools. The researchers emphasized that their findings were among several critical issues already being addressed, with similar discoveries expected to increase sharply in coming months.

The effort also underscores challenges in building secure software foundations. Researchers suggested AI could help prevent vulnerabilities by promoting safer coding practices, supporting migrations to memory-safe languages, enabling formal verification and improving sandboxing technologies. These approaches aim to reduce reliance on emergency patches by strengthening systems during initial development.

To refine the response framework, the team is seeking feedback on disclosure timelines, emergency patching protocols and strategies for securing downstream packages when upstream fixes are unavailable. They specifically want input on how much advance notice maintainers and defenders need, when staged notifications are preferable and how to balance coverage with leak risks.

Independent security experts are invited to review the approach and identify gaps. Feedback can be submitted through a public form, with the goal of improving coordination methods for future critical vulnerabilities in widely used software.

TECHNOLOGY

UK regulators urged to address suicide content after teen death linked to TikTok

7h ago · Source: guardian

A 14-year-old student from Norfolk died by suicide after viewing suicide-related material on TikTok, prompting renewed calls for UK regulators to intervene in harmful online content.

Adriana Retyte, a pupil at Langley School, died in May 2025. A coroner concluded that her exposure to suicide content on TikTok likely contributed to her decision to take her own life. The inquest found she had viewed multiple videos and images related to self-harm in the week before her death. Coroner Johanna Thompson stated that while it was impossible to determine the exact cause of her actions, her access to such material may have played a significant role.

TikTok expressed condolences to the family and affirmed its policies against self-harm content, citing automated systems designed to detect and remove violating material. The company said it had not yet conducted a formal review of Adriana’s account activity.

Ofcom Chief Executive Melanie Dawes told Parliament that major social media platforms have not demonstrated a genuine safety culture, particularly regarding risks to children. She noted a lack of accountability and delayed responses to known harms, including algorithmic amplification of self-harm content. Ofcom had previously opened an investigation into TikTok’s compliance with child safety obligations.

The case echoes the 2017 death of Molly Russell, a 14-year-old who died after prolonged exposure to self-harm content on Instagram. Her family has since advocated for stronger digital regulation. The Molly Rose Foundation now campaigns for stricter oversight of algorithmic content recommendation systems.

A 2026 survey by the foundation found that 7% of UK teens had encountered suicide-related content described as “normal, appealing, or cool,” while 75% reported exposure to high-risk mental health content on platforms including TikTok. The survey included responses from 1,825 students across 21 schools.

Adriana’s tablet was monitored by school staff in late December 2025 after a search related to suicide methods was flagged. School officials contacted her and her mother, after which normal device use resumed. She was observed attending classes and playing football in early May 2025 but was later found unconscious at home and hospitalized. She died two days after the incident.

The coroner is preparing a prevention of future deaths report to be sent to Ofcom and other agencies. Support resources are available through national helplines in the UK, US, and Australia.

TECHNOLOGY

Epic Games Restores Fortnite to Australian App Store Following Court Order

7h ago · Source: reuters

A federal court in Australia mandated that Apple must allow external payment systems within iOS apps, prompting Epic Games to reintroduce Fortnite to the country's App Store. The ruling determined that Apple's previous restriction on such systems breached competition legislation. Apple responded by stating its disagreement with portions of the judgment and indicated plans to pursue a stay while appealing the decision. A company representative told Reuters that the appeal aims to safeguard intellectual property rights and maintain the security standards associated with the App Store ecosystem. The reinstatement marks the first time since 2020 that Fortnite has been available through Apple's platform in Australia.

TECHNOLOGY

Tesla plans to sell Cybercab autonomous vehicles by year-end amid safety probe

7h ago · Source: techcrunch

Tesla announced it will begin selling its Cybercab autonomous vehicles to customers before the end of the year, even as federal regulators examine whether the vehicle complies with U.S. safety standards. The two-seat, gold-colored vehicle lacks a steering wheel and other conventional controls, relying entirely on autonomous driving systems.

Lars Moravy, Tesla’s vice president of engineering, stated during the company’s third-quarter earnings call that current production of Cybercabs is intended exclusively for Tesla’s own robotaxi network. He added that as the fleet expands, the company will gradually introduce fully autonomous vehicles to customers, beginning with a limited rollout. Moravy emphasized that scaling production will depend on insights gathered from operating the vehicles as a service, managing ownership logistics, and refining fleet deployment strategies.

Tesla first indicated plans to offer the Cybercab to external buyers in November during an event in Austin, where it also launched a pre-order form for interested parties. However, the company did not clarify whether sales would proceed or under what conditions.

CEO Elon Musk has long advocated for a large-scale fleet of low-cost robotaxis, initially envisioning a model where privately owned Tesla vehicles could serve as autonomous taxis through software updates. That approach has not yet been realized, and Musk’s recent remarks suggest a strategic shift toward prioritizing purpose-built autonomous vehicles for fleet operations rather than retrofitting existing models.

At present, Tesla owners can subscribe to Full Self-Driving (Supervised), an advanced driver-assistance system that automates certain driving functions but still requires constant driver supervision. Despite ongoing software updates aimed at improving performance, the system does not permit fully unsupervised operation, and numerous recordings have shown drivers testing its limitations.

Musk indicated on the earnings call that an unsupervised version of Full Self-Driving would be made available to customers in the second quarter of next year, marking another delay for users who have awaited this capability for years.

If both timelines remain on track, third-party operators could gain access to the Cybercab and begin offering robotaxi services before Tesla owners receive equivalent autonomous functionality in their personal vehicles.

Musk described the Cybercab as a vehicle designed for ride-hailing services rather than individual ownership, distinguishing it from Tesla’s consumer models such as the Model 3 and Model Y. He noted that the majority of Cybercabs will remain under Tesla’s ownership and operate as part of a service-based transport network.

A potential obstacle to the rollout involves regulatory scrutiny. The National Highway Traffic Safety Administration (NHTSA) opened an investigation into the Cybercab in November, shortly after the vehicles began operating on public roads in Austin. The probe focuses on Tesla’s certification process and compliance with Federal Motor Vehicle Safety Standards, which currently require manual controls such as brake pedals and rearview mirrors.

While the Department of Transportation has proposed exempting autonomous vehicles from certain manual control requirements, current regulations do not permit widespread deployment of vehicles without them. NHTSA has stated it will assess the technical data and decision-making processes Tesla used in certifying the Cybercab.

The outcome of this investigation may influence whether Tesla or any third party can legally deploy the Cybercab for public use.

Kirsten Korosec is a transportation journalist covering autonomous systems and electric mobility for TechCrunch. She previously reported for outlets including The Verge, Bloomberg, and MIT Technology Review. For professional inquiries, contact [email protected] or via encrypted message at kkorosec.07 on Signal.

TECHNOLOGY

YouTube clarifies it is not hiding dislike button from users

7h ago · Source: theverge

YouTube announced that it is not conducting any test to hide the dislike button from viewers, according to a statement from company spokesperson Kimberly Taylor. The clarification came after multiple users on X posted screenshots suggesting the button had been moved into the three‑dot menu for regular users.

The company explained that the change will only affect creators when they view their own uploaded videos. In that context, the dislike button will appear behind the three‑dot menu, but the public count of dislikes will remain accessible through YouTube Studio. Taylor said the new interface will begin rolling out to creators over the next few weeks.

This development follows earlier adjustments to the platform’s dislike functionality. In late 2021, YouTube removed the public display of dislike counts across the site, citing concerns about harassment. Earlier this year, the company also eliminated the dislike button from Shorts.

Taylor’s statement emphasized that the move is intended to give creators more control over how they interact with their content while preserving the ability for viewers to signal disapproval through the platform’s internal analytics.

The Verge reported the initial screenshots and obtained the official response from YouTube, confirming that no broader experiment to conceal the dislike button is underway.

TECHNOLOGY

Meta creates non-voting stock class to fund AI expansion

7h ago · Source: techcrunch

Meta announced plans to issue a new class of non-voting shares to support its growing artificial intelligence initiatives. The company disclosed the proposal during its third-quarter earnings release, stating that the shares would be distributed to existing shareholders as a stock dividend.

Chief Financial Officer Susan Li explained that the move would establish a publicly traded non-voting stock class for capital raising, employee compensation, acquisitions, and other corporate needs while maintaining the voting influence of current Class A and B shareholders. This structure aims to preserve Meta's founder-led governance model.

The company reported $64 billion in revenue for the quarter, up 26% from the previous year, though operating costs increased 68% year-over-year. Meta's Reality Labs division, which develops AR glasses and VR headsets, continues to operate at a loss but showed improved performance compared to earlier projections, with expected 2025 losses narrowing to between $18 billion and $19 billion.

Meta has accelerated its artificial intelligence development over the past year, releasing multiple models including Muse Spark, Muse Glimmer, Muse Wonder, and Muse Spark Open. The company also introduced Muse Code, an AI coding assistant for developers, and unveiled new avatar designs for its Meta Muse AI service during the Meta Connect event. According to CEO Mark Zuckerberg, over 10 million users in the U.S. and Canada have created personal AI agents through the platform within six weeks of launch, with the service maintaining top App Store rankings.

Zuckerberg stated that the company has reached product-market fit with its AI offerings and is now focusing on scaling infrastructure to serve billions of users. He emphasized that AI development represents "unprecedented momentum" across Meta's business operations.

Li noted that the company remains attentive to regulatory and legal challenges that could affect business outcomes, particularly ongoing scrutiny related to youth safety issues in multiple markets, with several related trials scheduled in the United States.

The new stock class will provide additional financial flexibility as Meta expands its AI investments, which include both consumer-facing applications and foundational model development. This financial strategy enables continued funding for AI research and product deployment while maintaining existing shareholder voting power structures.

TECHNOLOGY

Microsoft introduces hourly cloud gaming purchases for Xbox titles

7h ago · Source: arstechnica

Microsoft has begun offering a la carte cloud streaming time for Xbox games to users of its Xbox Insider program, allowing players to buy specific hours of streaming access to titles they have already purchased. The service, announced in September and now active for insiders, charges between $0.24 and $0.40 per hour depending on the package size. Ten hours cost $4, 25 hours cost $8, and 50 hours cost $12, with purchased time remaining available until used. This model requires players to have bought the game separately or have free-to-play access, unlike the Xbox Game Pass subscription that bundles streaming access. The approach contrasts with Google's discontinued Stadia platform, which offered unlimited streaming for purchased games but required separate purchases without local download options. Microsoft's hourly pricing has drawn attention for resembling vintage arcade payment structures, where users paid per session rather than owning full access.

TECHNOLOGY

Meta reports 10 million users have configured Muse agents

7h ago · Source: theverge

Meta chief executive Mark Zuckerberg disclosed on the company's earnings call that ten million users have established Muse agents, according to a report from The Verge. He noted that approximately 25 percent of those users engage with the feature on a daily basis, and that retention appears to improve the longer early adopters continue using it. Sensor Tower data released this week indicated that the Muse application reached ten million downloads within the United States. Jay Peters contributed reporting.

TECHNOLOGY

TechCrunch Announces 2026 Founder Summit in Boston

7h ago · Source: techcrunch

TechCrunch will host its annual Founder Summit on November 4, 2026, at the SoWa Power Station in Boston. The one-day event is designed for company founders and investors seeking practical guidance on scaling, fundraising, product development, and leadership.

The summit targets entrepreneurs at all stages, from early-stage builders to established founders, as well as investors focused on East Coast innovation. Organizers emphasize hands-on learning over passive panel attendance, offering sessions on topics such as AI-native product development, market validation, and cap-table strategy.

Featured speakers include Steve Fredette of Toast, Chase Garbarino of HqO, Kent Bennett of Bessemer Venture Partners, Lior Div of 7AI, Vineet Edupuganti of Cogent Security, and Tina Tosukhowong of TDK Ventures. Sessions will address company reinvention, regional startup ecosystems, and pitch refinement techniques.

A pitch competition, "So You Think You Can Pitch?", will give three early-stage startups four minutes each to present to a judging panel. Organizers note that past iterations of the summit have evolved from previous formats, including rebranding from "Early Stage" and "All Stage" events.

Tickets are currently available in three tiers: Investor ($399), Founder ($199), and Student ($149). Early-bird pricing includes a $100 discount for founders and investors, with additional discounts for group registrations. A volunteer program will offer free access to select attendees who assist with event operations.

Registration and detailed logistics, including speaker lists and agenda updates, are available through TechCrunch’s event portal. Pricing tiers will increase after October 16, and volunteer applications close on October 19.

The event is part of a broader series of founder-focused gatherings, with supplementary side events scheduled between November 1 and 7. Attendees can also use the Braindate platform to arrange peer-to-peer networking sessions during the summit week.

TECHNOLOGY

OpenClaw creator estimates $10 million token spend in single month

7h ago · Source: theregister

Peter Steinberger, a technical staff member at OpenAI and the developer behind the OpenClaw project, disclosed that he expended approximately $10 million worth of computational tokens during the preceding month. The admission emerged during a Cloudflare Connect 2026 session in San Francisco, where he conversed with Cloudflare chief technology officer Dane Knecht.

Knecht had previously noted Steinberger's acknowledgment of possessing "a virtually unlimited token budget," a condition not shared by most conference attendees. When audience members reacted audibly to the scale of expenditure, Steinberger remarked that much of the consumed capacity yielded limited practical value.

The discussion turned to infrastructure readiness, with Steinberger questioning why AI workloads continued to rely on personal computing resources rather than fully migrating to cloud environments. He highlighted cost considerations for organizations lacking venture capital backing, contrasting cloud-hosted AI agents' expense with the prospect of local execution.

Knecht referenced the OpenClaw initiative and the growing reluctance of open-source maintainers to accept pull requests amid concerns over AI-generated code quality. Steinberger argued that the pull-request workflow requires revision, emphasizing that transparent documentation of reasoning behind code changes would increase trust in contributions. He suggested that future AI assistants might operate autonomously, generating solutions without explicit user prompting.

When addressing trust in AI agents, Steinberger acknowledged the difficulty of determining appropriate data access levels. He pointed to architectural choices made during OpenClaw's development, noting that enhanced model capabilities can alter previously hardcoded behaviors. While recognizing improvements in areas such as prompt-injection mitigation, he cautioned against granting unrestricted permissions to autonomous agents. Instead, he proposed a layered authorization model where specialized agents evaluate and allocate capabilities to other agents, potentially introducing self-regulatory checks within AI workflows.

TECHNOLOGY

Anthropic launches standalone AI assistant app Claude Duet

7h ago · Source: reuters

Anthropic introduced Claude Duet, a new AI assistant app designed to help professionals and small-business owners manage tasks autonomously. The app operates as a proactive agent that monitors connected services and surfaces items requiring attention without waiting for user prompts.

Duet delivers daily briefings and handles activities such as scheduling meetings, generating financial forecasts, and building web applications. It is accessible on iOS, Android, and through the claude.ai platform via a research preview that requires users to join a waitlist. Initially, the service is available only to subscribers of Anthropic's Pro and Max plans in the United States, who share existing usage limits.

The assistant is built on Anthropic's Opus 5.5 language model and integrates with more than 6,000 connectors in the Claude Marketplace, including Gmail and Slack. It can process purchases through Stripe's Link digital wallet and Shopify's Shop Pay system. For sensitive operations, Claude Duet requires explicit user approval before proceeding.

Anthropic notes that the agent may occasionally misjudge task urgency and remains less effective for personal errands like ticket reservations. The launch follows similar efforts by competitors: OpenAI recently released always-on "dots" agents that pursue goals across platforms such as Slack and Microsoft Teams, while Meta's Muse AI agent attracted millions of downloads and heightened investor interest in autonomous AI services.

TECHNOLOGY

Walmart launches Agent Gateway to enable AI-driven shopping

7h ago · Source: techcrunch

Walmart announced on Wednesday its plan to support AI agents that can make purchases on behalf of consumers, introducing a new Agent Gateway system designed to manage these transactions. The initiative follows Amazon's recent decision to block AI agents from completing purchases, a move that has limited their functionality across several major platforms. Unlike competitors, Walmart is actively integrating tools that allow approved AI agents to interact with its online inventory through the model context protocol (MCP), originally developed by Anthropic. This protocol enables agents to search for products, compare options, and complete transactions without direct user involvement.

The company emphasizes that the system prioritizes user control and security. Shoppers will be able to create distinct Agent Profiles for each AI assistant they use, granting limited access to their purchase history and setting custom spending limits. These profiles function similarly to authorized users on a credit card, with transactions tracked separately from personal activity. Walmart also introduced safeguards requiring explicit approval for purchases or capping spending thresholds, ensuring agents operate within predefined boundaries.

Walmart President and CEO John Furner highlighted the strategy during a presentation at the Masters of Scale Summit in San Francisco, stating the company aims to prepare for a future where AI agents are mainstream shopping tools. The system will initially support both Walmart and Sam's Club, the retailer's warehouse chain.

To address consumer concerns about accountability, Walmart confirmed that its standard return policies apply to agent-initiated purchases, and agents that violate agreed-upon terms will be blocked from accessing the platform. The company also stressed that AI agents cannot access sensitive payment details or act beyond the shopper's explicit instructions.

Sarah Perez, a TechCrunch reporter covering Walmart's announcement, noted the contrast with other platforms that have shut down AI agent capabilities entirely. She emphasized that Walmart's approach reflects a calculated effort to balance innovation with consumer protection as the technology evolves. The Agent Gateway and Profile features are scheduled to roll out in the coming weeks, with no Walmart+ membership required for access.

TECHNOLOGY

Nvidia expands open-weight model suite for European sovereign AI initiatives

7h ago · Source: theregister

Nvidia introduced a series of new open-weight models aimed at supporting enterprise and government AI deployments across Europe, where demand for sovereign AI solutions has grown amid concerns over data control and foreign infrastructure reliance.

The company unveiled updated versions of its Nemotron Retriever embedding and reranking models, along with a refreshed Nemotron Parse model designed to extract content from PDF documents. These models are part of Nvidia’s broader push to provide modular, customizable AI components that can be adapted to specific use cases without requiring organizations to build large language models from scratch.

Embedding models, though less visible than generative AI systems, play a critical role in retrieval-augmented generation (RAG), a technique used to improve the accuracy and relevance of AI responses by grounding them in external data. Nvidia’s latest embedding models support text and image inputs across 34 languages and are available in parameter counts ranging from one to eight billion. Quantized versions optimized for Nvidia’s Blackwell architecture can run efficiently on systems like the DGX Spark, leaving capacity for additional models.

According to Nvidia, the 8-billion-parameter embedding and reranking models currently rank highest among dense models on the ViDoRe V3.1 benchmark when measured at BF16 precision. The company also claims its Nemotron Parse model can process approximately 10.5 pages per second when running on a single H100 GPU, making it suitable for large-scale document ingestion workflows.

In parallel, Nvidia released Alpamayo 2 Edge, a lightweight variant of its autonomous driving model intended for real-time processing of video and sensor streams on the DRIVE AGX Thor platform. This follows the recent launch of the Nemotron 3.5 Super vision language model and preview of the 74-billion-parameter Nemotron 3.5 Bolt MoE model, which is designed to operate within 24 GB of video memory and is scheduled for public release on Friday.

Nvidia’s open-weight models are distributed with accompanying training data and configuration details, allowing users to inspect and modify the model architecture more transparently than many competing offerings. This approach differs from the typical black-box release model, where only the final weights are made available. The company joins others, such as the Allen Institute with its OLMo series, in providing full recipe transparency.

While open models offer greater accessibility and control, their performance and reliability depend on implementation, training data quality, and intended use. Nvidia has not announced partnerships or deployment commitments beyond its own roadmap, and no independent third-party evaluations of the new models have been published at this time.

TECHNOLOGY

Xbox Project Helix may launch at $1,200 to $1,800 price point

7h ago · Source: kitguru

A Fortune report citing internal projections indicated that Microsoft's upcoming Xbox console, internally referred to as Project Helix, could carry a launch price between $1,200 and $1,800. This estimate emerged from a discussion with Asha Sharma, who was noted as leading Xbox during her first year in the role. The projection represents a significant increase over the $500 price range typical of recent console generations. Microsoft has not confirmed plans to sell the hardware at a loss, though the company has previously explored offsetting costs through subscription services and game sales. Industry analysts have pointed out that the rise of free-to-play titles, such as Fortnite, reduces the likelihood of consumers spending beyond the initial purchase, potentially complicating strategies that rely on long-term revenue from the ecosystem. At current cost levels, some observers suggest that the pricing could slow adoption and shift developer focus toward existing hardware platforms. The financial outlook for next-generation console sales remains uncertain, with questions about market response and long-term sustainability still unresolved.

TECHNOLOGY

Signal messaging app bug could leave microphone and camera active after call ends

7h ago · Source: theregister

A flaw in Signal’s calling library could allow a call to remain connected after users believe the conversation has ended, potentially leaving audio and video streams active without indication. The vulnerability, identified as CVE-2026-113380, affects Signal’s open-source RingRTC library in versions prior to 2.72.0. MITRE assigned a CVSS score of 9.3, classifying it as critical. The issue stems from improper handling of events in RingRTC’s finite state machine, which manages call lifecycle operations. If the event queue becomes saturated with requests, the system may fail to process a hangup command, preventing the call from terminating cleanly. The flaw is categorized under CWE-754, which addresses inadequate validation of exceptional conditions. A proof-of-concept demonstration using a Python script illustrates how flooding the event queue can block termination requests. While CISA has not confirmed active exploitation, the vulnerability remains unpatched for earlier versions. Signal released version 2.72.0 last month, which introduces changes to allow the finite state machine to detect termination requests independently of the event queue and adds a timeout mechanism to prevent indefinite blocking. The update has been incorporated into Signal Desktop, though rollout timelines for Android, iOS, and other platforms are not fully documented. Users are advised to ensure their applications are updated to the latest version to mitigate the risk. The incident underscores the importance of timely software updates in maintaining secure communications, particularly for encrypted messaging platforms handling sensitive conversations.

TECHNOLOGY

Critical PHP vulnerabilities trigger emergency patches and temporary site takedowns

7h ago · Source: theregister

PHP developers released emergency updates for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which can enable unauthenticated remote code execution. The patches, versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35, address flaws affecting all PHP installations that handle web requests, including those using PHP-FPM, Apache's mod_php, php-cgi, FrankenPHP, and LiteSpeed. Developers emphasized the highest risk for mod_php, where an unauthenticated request could trigger exploitation before application code runs.

CERT-EU issued an advisory urging immediate patching or temporary isolation of internet-facing applications, citing CVSS scores of 9.2 for both vulnerabilities. As a precaution, Finnish government services, Dutch parliamentary websites, and privacy campaign group noyb temporarily took their sites offline. The advisory highlighted the widespread use of PHP across content management systems like WordPress and Drupal, as well as shared hosting platforms, making vulnerability identification complex.

Jake Knott, head of threat intelligence at watchTowr, noted ongoing exploitation attempts observed in the wild, with proof-of-concept code already circulating. John Hammond, senior principal security researcher at Huntress, stated that locating vulnerable PHP installations requires extensive scanning across numerous systems. The incident underscores the pervasive role of PHP in web infrastructure and the urgency of coordinated patching efforts.

TECHNOLOGY

Mach9 raises $34M to expand AI-powered CAD platform for civil engineering

7h ago · Source: techcrunch

Mach9, a startup that began in 2021 as Mach9 Robotics, has secured $34 million in Series A funding to accelerate development of its AI-driven computer-aided design software for civil engineering workflows. The round was co-led by First Round Capital and Bessemer Venture Partners, with participation from Prudence and Quiet Capital. The company shifted focus from hardware-based inspection tools to AI software after determining that data capture devices were not the primary bottleneck in construction projects.

Alex Baikovitz, who founded the company, explained that engineers faced significant delays in transforming laser scan and image data into usable survey information. "The real pain was in their workflows," he said, noting that existing software required months to process site data and involved manual tasks taking approximately one week per mile. Mach9’s platform automates this process, reducing time requirements by up to 10 times while maintaining centimeter-level accuracy.

The software generates initial design drafts from survey data, which engineers then refine. Baikovitz emphasized that the system was built with industry-specific accuracy requirements, stating that "off-the-shelf models are not able to deliver at the accuracies that the industry demands." Customers use the platform for surveying, asset management, and infrastructure planning, with implementations reported across more than 2,500 projects and nearly 100 private beta clients.

The funding will support product development, hiring of industry specialists, and organizational scaling. Baikovitz reflected that the initial hardware phase provided valuable customer insights, particularly from transportation agencies like those in Texas, which use the platform to improve safety and efficiency in statewide mapping initiatives.

Mach9 competes with other technology firms attempting to modernize construction workflows, including CivilGrid, which recently raised $26 million for its underground mapping platform, and Blueprints AI, a participant in TechCrunch Disrupt’s Startup Battlefield.

The company serves civil engineering organizations that require licensed professionals to validate final deliverables, maintaining liability standards within the industry. Baikovitz noted that customer feedback confirmed a need for better software rather than cheaper hardware, shaping the company’s current development priorities.

TECHNOLOGY

Iran warns undersea cables in Strait of Hormuz could become targets

7h ago · Source: tomshardware

Iranian officials have said that several undersea fiber-optic cables running through the Strait of Hormuz could become legitimate targets in any future conflict involving Iran. General Hossein Mohebbi, a spokesman for the Islamic Revolutionary Guard Corps, made the comment during a public event this week, according to The Telegraph. He noted that seven major cables carry all internet and commercial data that pass through the strait, and described them as potential targets for future attacks. Another IRGC general, Yadollah Javani, who serves as the organization's political deputy, later suggested that Iran would strike such infrastructure if its own facilities were attacked, as reported by Iran International. The Strait of Hormuz has seen heightened military activity since February, when naval forces from the United States, Israel and other nations began operating in the area. No specific timeline or plan for attacks has been disclosed, and no independent verification of the threat has been provided.

TECHNOLOGY

Apple expands Creator Studio through strategic acquisitions

7h ago · Source: 9to5mac

Apple has been acquiring companies whose technologies align with Apple Creator Studio, a suite of professional creative applications launched in January. The most recent purchase, Samplab, specializes in audio editing software designed for musicians, making its tools a logical addition to Logic Pro. Earlier in the year, Apple acquired MotionVFX, which develops visual effects templates, plugins, and motion graphics tools used in Final Cut Pro, and Color.io, known for digital color management and grading software. These moves follow the acquisition of Huxe, a company focused on audio technology, and reflect Apple’s ongoing effort to enhance its ecosystem for creative professionals.

Apple Creator Studio debuted as a collection of pro applications including Pixelmator Pro, Logic Pro, and Final Cut Pro, with regular feature updates since its launch. The company has emphasized expanding the suite’s capabilities through both software development and strategic purchases.

Next week, Apple is expected to introduce four new hardware products targeting creatives: a redesigned MacBook Pro with touch functionality, an updated iPad mini, and new M6-powered versions of the iMac and MacBook Pro. While hardware announcements are anticipated, Apple’s broader push centers on integrating software and services into a cohesive creative workflow.

The company has not disclosed specific plans for how the newly acquired technologies will be integrated, but industry observers expect updates to Creator Studio applications to be highlighted during Apple’s upcoming ‘Pro and tell’ event on October 28.

Apple’s focus on expanding Creator Studio aligns with its long-term strategy of unifying hardware, software, and services into a seamless experience for professionals. The initiative underscores the company’s interest in strengthening its position within the creative community, though no official timeline has been provided for feature rollouts or integration plans.

TECHNOLOGY

Two species thought extinct for 6,000 years rediscovered in West Papua rainforests

7h ago · Source: Hacker News

Scientists have rediscovered two mammalian species in remote West Papua rainforests that were believed to have vanished 6,000 years ago, according to findings published in the Records of the Australian Museum. The pygmy long-fingered possum and a ring-tailed glider were identified during fieldwork conducted in 2026, marking the first confirmed sightings of these animals since the Pleistocene epoch.

The possum, weighing approximately 200 grams, exhibits a distinctive anatomical trait: an elongated fourth finger on each hand that is twice as long as the other digits. Researchers determined this adaptation aids in extracting wood-boring insect larvae from bark, which constitutes its primary diet. The glider, characterized by a prehensile tail capable of grasping branches, occupies hollows in tall trees within the same ecosystem.

Rediscovery occurred through collaborative research involving fossil analysis, historical photographs, and examination of archived specimens. Field teams later verified living populations in the Tambrauw and Maybrat regencies, working alongside local communities whose traditional knowledge contributed to the identification process. Some residents of these indigenous groups have maintained cultural connections to these animals for generations, with certain communities regarding the glider as a sacred species that is not hunted or named aloud.

The findings represent a rare instance of a "lazarus taxon" — a species presumed extinct but later rediscovered — with two such taxa identified simultaneously. Conservationists note that the glider's habitat faces ongoing threats from commercial logging activities in the region. In response, scientists and environmental organizations are pursuing initiatives to secure legal protection for these forests through recognition of indigenous land rights, aiming to prevent unconsented extraction projects.

The discovery underscores the ecological significance of West Papua's rainforests, which harbor numerous undocumented species. It also highlights the importance of integrating traditional ecological knowledge with modern scientific methods in biodiversity research and conservation planning.

TECHNOLOGY

Verge staff writer launches recurring giveaway series

7h ago · Source: theverge

Verge staff writer Sean Hollister announced the launch of a recurring weekly giveaway series on Wednesday, October 21, 2026. Each giveaway runs for one week and closes at 9:00 a.m. Eastern Time on the following Wednesday. Participants may enter each week’s contest as long as submissions are received before the deadline. The series began with Giveaway #17, and Hollister confirmed that two prize packages were dispatched via FedEx on the same day as the announcement. The initiative invites participants to share the opportunity with others. The program operates independently of any third-party promotions or sponsored content.

TECHNOLOGY

Arrowhead replaces GameGuard with Easy Anti-Cheat in Helldivers 2, affecting mod functionality

7h ago · Source: kitguru

Arrowhead Game Studios announced it will replace the GameGuard anti-cheat system in Helldivers 2 with Easy Anti-Cheat (EAC) for the PC version. The change is scheduled to take effect in an upcoming update. The studio cited a rise in the use of cheat-related mods that extend beyond private matches and disrupt public gameplay as the primary motivation. While most prior mods were limited to cosmetic adjustments that did not affect core mechanics, recent trends showed an increase in modifications that alter gameplay dynamics. EAC, a widely adopted solution across the industry, will serve as the new foundation for anti-cheat enforcement. The transition is expected to render many existing mods incompatible, particularly those that interact with game systems at a functional level. Arrowhead clarified that the shift does not eliminate cheating entirely but aims to improve detection and response capabilities. The update reflects a broader effort to balance community creativity with the integrity of shared multiplayer experiences.

TECHNOLOGY

Judge dismisses sexual abuse lawsuit filed by Sam Altman's sister

7h ago · Source: guardian

A federal judge in St Louis dismissed a lawsuit filed by Ann Altman, the sister of OpenAI chief executive Sam Altman, on Tuesday. Ann Altman had accused her brother of sexually abusing her from 1997 to 2006, beginning when she was three and he was twelve, and of raping her repeatedly until she was a teenager. The complaint alleged that the abuse occurred at their family home in suburban Clayton, Missouri, and that the last incidents took place when Sam Altman was an adult. Sam Altman has denied the allegations.

The dismissal came after the judge warned that Ann Altman’s refusal to submit to an independent medical examination would lead to dismissal of the case. Her legal team had previously indicated that she would not undergo the exam, citing concerns about privacy and trauma. The court record shows that the judge entered the order dismissing the complaint without prejudice, meaning the plaintiff could potentially refile if she later complies with the procedural requirement.

Laura Politi, an attorney representing Ann Altman, did not immediately respond to a request for comment. Another attorney, Santos Perez, who had previously represented her but withdrew from the case earlier this month, issued a brief statement saying he was no longer authorized to discuss the matter but continued to support her.

OpenAI and Sam Altman’s legal representatives have not yet issued a public response to the dismissal. The Altman family has previously noted that Ann Altman has faced mental‑health challenges and has received financial assistance from relatives. The case remains under judicial review, and any future filings will need to address the procedural issue that led to the dismissal.

TECHNOLOGY

Enterprises spend 28% of software budgets on upgrades IT deems harmful, survey finds

7h ago · Source: arstechnica

A survey commissioned by maintenance provider Origina found that large enterprises allocate roughly 28% of their software budgets to upgrades, migrations, or licensing changes that their own IT leaders consider detrimental. The study, conducted by third-party research firm Censuswide, gathered responses from 2,018 chief information officers and senior IT decision-makers at companies with at least 10,000 employees and annual revenues of $1 billion or more. About half of the participants were based in the United States, with the remainder in the United Kingdom.

Ninety-five percent of respondents reported paying for a vendor-driven upgrade, migration, or licensing change within the past three years that they believed at the time would reduce performance, reliability, or business value. Fifty-three percent said they had done so more than once. The report noted that 76% of participants felt their organization had little leverage in negotiations, and 80% said switching away from major vendors would cause significant disruption.

Tomás O’Leary, Origina’s CEO and one of the report’s authors, stated that market dynamics often force experienced technology leaders to accept unwanted upgrades, with consequences visible in budget allocations, engineering resources, and stalled innovation. The findings highlight the limited negotiating power large organizations face when dealing with major software vendors.

TECHNOLOGY

Wikimedia volunteers focus on improving Wikipedia coverage of arms industry

7h ago · Source: guardian

A small group of Wikipedia volunteers gathered in a London classroom last week to expand and refine articles related to the global arms trade. The event, called a wikithon, brought together roughly two dozen participants ranging from seasoned editors in their 70s to students with no prior editing experience. They worked on entries including Palantir, Project Maven and Nitro-Chem, aiming to improve the quality and organization of information on Wikipedia about weapons manufacturers and related technologies.

The initiative was led by Agnes Cameron, co-founder of the effort and a technician with the n-Space programme at Somerset House Studios. She emphasized that the goal was not advocacy but the systematic collection of publicly available information into well-sourced, neutral Wikipedia entries. "This is not an anti-arms industry campaigning event," Cameron said. "It’s about factual information on Wikipedia."

Wikipedia’s editing framework requires contributions to be based on reliable sources and prohibits original research. Volunteers were trained to follow these standards carefully, particularly when addressing topics that may involve conflicts of interest. Hannah Cobb, another organizer, noted that the demographic of Wikipedia editors is often narrowly defined, and events like this wikithon help diversify participation across age, gender and background.

Previous sessions in Manchester and London have drawn over 60 participants, including journalists, activists and members of religious communities. Organizers say the experience can be empowering, as contributors see their edits appear instantly on one of the world’s most accessed reference sites. However, concerns remain about how Wikipedia’s broader community may respond to structured efforts focused on politically sensitive subjects.

Past incidents highlight the platform’s vulnerability to bias and manipulation. In 2021, the Croatian-language Wikipedia was found to have been influenced by nationalist editors making ideologically driven changes. Similarly, Ksenia Coffman, a veteran editor, previously removed entries she deemed overly sympathetic toward Nazi officials. These cases underscore the challenges of maintaining neutrality in contested topics.

Cameron expressed hope that the group could eventually formalize its work through a WikiProject, possibly with guidance from the active WikiProject Military History. She described Wikipedia as "fundamentally anti-fascist," reflecting a long-term commitment to open, evidence-based knowledge despite structural and cultural obstacles.

A follow-up wikithon is scheduled for winter, continuing efforts to improve coverage of the arms industry with an emphasis on transparency, sourcing and editorial integrity.

TECHNOLOGY

Elon Musk Outlines Robotics School and Terafab Production Plans During Tesla Earnings Call

7h ago · Source: wccftech

During Tesla's third-quarter earnings call, Elon Musk detailed plans to establish a dedicated training facility for Optimus robots, aiming to generate the data required for artificial intelligence development. The proposed school would support the company's broader goal of mass-producing humanoid robots, with Musk emphasizing that creating sufficient training data necessitates building tens of thousands of prototype units for iterative learning cycles.

Musk indicated that Terafab, Tesla's semiconductor manufacturing initiative, would enter early volume production in the second quarter of 2028, with machinery commissioning scheduled for the first half of 2027. The facility, located in Austin, is intended to produce chips for Tesla's AI5 processors, which will power Optimus units. Initial production targets include 100,000 wafers per month, scaling toward one million wafers monthly as capabilities mature. Musk stated the project's economic impact could rank among the top 20 global economies, though specific metrics were not provided.

Intel has confirmed collaboration with Terafab on the 14A manufacturing process, Intel's next-generation semiconductor node, with volume production set to begin in the first quarter of 2028. The partnership was noted during Tesla's earnings discussion, though Musk did not elaborate on how 14A technology would integrate into Terafab's output strategy.

Optimus production targets include one million units annually, with current manufacturing concentrated at Tesla's Fremont facility. Musk projected that reaching sustained production rates of 20,000 units per week would require at least one year, potentially longer, depending on system-wide reliability. Earlier timelines had anticipated 50,000 to 10,000 units produced in 2025, followed by a tenfold increase in subsequent years.

Beyond hardware development, Musk highlighted challenges in securing reliable, large-scale computing resources. During the call, he responded to commentary about neocloud providers' ability to meet hyperscaler demand by stating that online reliability at scale remains a significant technical hurdle, a constraint that affects both semiconductor deployment and AI training infrastructure.

Reports from Taiwan indicate Tesla is engaging suppliers such as Mirle Automation and Asia Optical to develop components for Optimus, including harmonic transducers, joint modules, and actuators. These efforts align with broader supply chain initiatives to support mass production. Musk described the robotics program as requiring the resolution of ten thousand interdependent technical factors, with production velocity limited by the slowest component.

The planned robotics academy would enable Optimus units to practice diverse tasks in controlled environments, generating data to refine AI models through iterative improvement cycles. Musk characterized this process as essential for advancing capabilities beyond current limitations in artificial intelligence architecture and autonomous decision-making.

TECHNOLOGY

EA shuts BioWare, ending development of next Mass Effect title

7h ago · Source: washingtonpost

Electronic Arts announced Wednesday that it would close BioWare, the studio behind the Mass Effect, Baldur’s Gate and Dragon Age franchises, and discontinue work on the upcoming Mass Effect installment that was first revealed in 2020. The company said the move is part of a broader shift toward fewer, larger-scale projects amid a wider contraction of big-budget video‑game development.

BioWare was founded in 1995 by three physicians who set out to create role‑playing games that emphasized expansive storytelling and player‑driven choices. Its titles, such as 2003’s Star Wars: Knights of the Old Republic, made dialogue, moral decisions and romance central mechanics. The studio’s design of romantic subplots and character customization attracted a broader audience than the traditionally male‑dominated RPG market. A 2017 analysis by Quantic Foundry reported that women made up 48 percent of respondents who identified as fans of Dragon Age: Inquisition, compared with a 26 percent average for Western RPGs surveyed.

The studio’s commercial peak came in 2014 with Dragon Age: Inquisition, which sold over 12 million copies and earned multiple awards. Subsequent releases faltered: the multiplayer‑focused Anthem received poor reviews, and 2024’s Dragon Age: The Veilguard failed to meet sales expectations. The Mass Effect series, launched in 2007, combined deep dialogue trees with action‑oriented gameplay, a formula that many developers have attempted to emulate but few have matched in scope.

Michal Nowakowski, co‑CEO of CD Projekt Red, the company behind The Witcher and Cyberpunk franchises, posted on social media that “BioWare has been a massive part of CDPR history. … Not a great day in the games industry.”

TECHNOLOGY

Global Web Services Disrupted by Critical PHP and Node.js Vulnerabilities

7h ago · Source: techcrunch

Government websites worldwide experienced outages on Wednesday following the discovery of critical security flaws in the PHP programming language, according to reporting by Reuters. The U.S. National Security Agency issued an advisory urging organizations relying on PHP to either apply patches immediately or temporarily disconnect affected systems until remediation was possible.

The same day, developers behind the Node.js JavaScript runtime environment disclosed four newly patched high-severity vulnerabilities. One flaw permitted remote code execution, while two others enabled bypass of Transport Layer Security validation checks, potentially allowing attackers to impersonate servers. Node.js confirmed the updates addressed these issues in its latest release.

Separately, LiteLLM, an open-source proxy service used to route requests across multiple large language model providers, revealed that malicious code had been injected into its official releases on PyPI, Docker Hub, and GitHub Container Registry. The compromised packages contained an information-stealing module targeting cloud credentials, passwords, and AI service access keys, alongside a remote access trojan capable of executing arbitrary commands. LiteLLM stated it had removed the affected versions and images, and published guidance for users to purge and replace compromised installations.

Additionally, eMudhra, an Indian certificate authority, confirmed that its private cryptographic keys had been compromised. Security researchers warned the breach could enable the creation of fraudulent digital certificates, facilitating impersonation of legitimate websites. Experts described the incident as potentially more impactful than the 2014 Heartbleed vulnerability, which similarly exposed widespread weaknesses in encrypted communications.

These incidents follow a series of recent cybersecurity events, including a breach of the cloud database service TiDB Cloud and exploitation of unpatched flaws in Plex Media Server, collectively dubbed Plex2Shell. BeyondTrust also alerted customers to a zero-day vulnerability in its remote support tool that had been actively exploited since August.

While the incidents stemmed from distinct sources, their convergence underscores growing challenges for cybersecurity teams. Analysts noted that advances in artificial intelligence may accelerate the speed and precision with which attackers identify and exploit such vulnerabilities. The coordinated nature of these failures highlights the increasing complexity of maintaining digital trust across interconnected infrastructure.

Sarah Perez has reported for TechCrunch since August 2011, previously contributing to ReadWriteWeb. Before her journalism career, she worked in information technology across banking, retail, and software sectors. She can be reached at [email protected] or via Signal at sarahperez.01.

This article contains affiliate links; purchases made through such links may generate a small commission, though this does not influence editorial content.

Perez’s professional background includes roles in both technical and journalistic domains, reflecting a trajectory shaped by sustained engagement with evolving digital ecosystems.

The sequence of disclosures illustrates how rapidly vulnerabilities can cascade across widely adopted platforms, demanding coordinated responses from developers, administrators, and security professionals alike.

TECHNOLOGY

Compromised LiteLLM package exposed cloud credentials and AI secrets

7h ago · Source: theregister

A malicious version of the open-source AI gateway LiteLLM was distributed through PyPI and Docker registries on Wednesday, potentially exposing cloud credentials and AI secrets to attackers. The compromised release, version 1.107.0, was identified by security researchers after it was uploaded to the Python Package Index and Docker Hub. The package, widely used to connect applications to large language models from providers including OpenAI, Anthropic, and Google Gemini, receives approximately 23 million weekly downloads.

The malicious package contained three files designed to steal sensitive data and maintain persistence. One file, cook.pth, triggered the execution of cook.py upon Python startup, which in turn deployed a remote access trojan (RAT) called sitecustomize.py. This RAT established communication with an attacker-controlled server at http://www.litellm.dev/healthcheck to exfiltrate stolen information.

According to researchers at Aikido Security, Google’s Wiz, and supply-chain security firm Socket, the malware harvested credentials from browsers such as Chrome, Firefox, Edge, and Safari, as well as cloud credentials from AWS, Google Cloud Platform, and Microsoft Azure. It also collected API keys for major AI providers, SSH keys, and shell history files. The stolen data was encrypted using AES-256-CBC and transmitted via HTTP POST.

The malicious version was available for approximately six hours before being quarantined by PyPI maintainers. The Docker image litellm/litellm:1.107.0 was subsequently removed from Docker Hub and GitHub Container Registry. Researchers advise users who may have installed the compromised version to immediately cease its use and scan environments for indicators of compromise, including the presence of files such as /tmp/.pc_once_* and /tmp/remote_code_loader.lock.

The incident marks the latest in a series of supply-chain attacks targeting AI infrastructure. A prior compromise in March affected over 2,500 organizations and potentially exposed 434,000 CI/CD pipelines, according to CloudSEK. While the full scope of this latest breach remains unclear, security teams are urged to review mitigation guidance from the affected firms.

BerriAI, the developer of LiteLLM, has not responded to inquiries. The event underscores growing risks in open-source software supply chains, particularly in tools central to AI development.

TECHNOLOGY

Critical PHP flaws trigger global security alerts

7h ago · Source: wccftech

The PHP development team announced emergency patches today for two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on the CVSS v4.0 scale. The fixes will be released at 14:00 UTC. These flaws affect a language that powers an estimated 77% of all websites, including major content management systems like WordPress, Drupal, Joomla and Magento, as well as e-commerce platforms and hosting control panels. The vulnerabilities could allow unauthenticated remote code execution, enabling attackers to run arbitrary commands on affected servers without needing credentials. Such access might lead to data theft, website defacement or broader system compromise. The EU's Computer Emergency Response Team issued an advisory warning that sites running potentially vulnerable PHP versions might need to be temporarily taken offline until patches are applied. Cloudflare CTO Dane Knecht confirmed the company is observing early exploitation attempts and deploying updated Web Application Firewall rules to mitigate known attack vectors. Security firm Patchstack also reported accounts of active exploitation from multiple hosting providers. Wordfence noted that updating WordPress alone does not resolve underlying PHP weaknesses; hosting providers or server administrators must apply the specific PHP patches. The PHP security team urged immediate upgrade once updates become available. Organizations using older, unsupported PHP versions face additional challenges, as these installations may no longer receive official security patches. The priority for affected entities is to identify vulnerable PHP installations, apply emergency updates promptly and isolate systems when immediate patching is not possible.

TECHNOLOGY

DuckDB 2.0 LTS Launches with Async I/O, Variant Type and Server Enhancements

7h ago · Source: Hacker News

The DuckDB development team announced the release of version 2.0.0 LTS, codenamed "Cinnamon Teal", marking the first long-term support iteration of the open-source analytical database. This release represents the most substantial feature update since the 1.5 series, comprising nearly 20,000 commits focused on performance, extensibility, and production readiness.

The new version introduces asynchronous input/output for Parquet, CSV, and DuckDB's native storage formats, enabling background read operations and improved parallelism for cloud storage like Amazon S3. Benchmarks indicate significantly higher network utilization and reduced query latency compared to previous implementations. Concurrently, the VARIANT data type graduates from experimental status to a first-class citizen, allowing schema-flexible storage of semi-structured data with columnar performance advantages over traditional JSON handling.

A redesigned SQL parser, now the default engine, replaces the legacy YACC/Bison-derived system. This PEG-based parser offers greater extensibility for third-party extensions and provides more precise error reporting. Users retain the ability to revert to the previous parser via the legacy_parser extension setting.

Server functionality receives notable upgrades, including a production-stable Quack protocol implementation with enhanced stability and performance. The new CONNECT statement streamlines remote database access, supporting connections to PostgreSQL and MySQL with query pushdown optimization that reduces data transfer overhead. Command-line interface tools now feature dedicated -serve and -connect flags for simplified server/client workflows.

Agent mode debuts as a response to growing adoption by AI coding assistants like Claude Code and Codex. This mode optimizes output formatting for programmatic consumption, providing truncated result indicators, early query interruption, and cost estimation for long-running operations. Performance testing on TPC-H datasets showed a 59% reduction in output volume requiring model analysis.

Extension ecosystem developments include a revamped C API v2 for deeper system integration and the introduction of repository hosting capabilities. Organizations can now establish trusted extension repositories with cryptographic signing, enabling controlled deployment of custom functionality through standardized installation commands.

Migration guidance cautions users about storage format incompatibilities, as databases created with DuckDB 2.0 cannot be read by pre-2.0 versions. The development team recommends shadow system testing and suggests waiting for the initial patch release scheduled for November for mission-critical environments. Compiler requirements increase to C++17, and the deprecated amalgamation build approach is retired in favor of modern build systems.

The release maintains backward compatibility for reading existing database files while introducing new features across the stack. Documentation receives dedicated navigation for 2.0-specific content, with plans for follow-up technical deep dives on implementation details. Community contributors receive acknowledgment for their role in the 20,000-commit milestone since the 1.5 series.

Support timelines establish October 2027 as the endpoint for 2.0 LTS maintenance, with extended support for DuckDB 1.5 through March 2027. Platform support begins phasing out macOS x86_64, though current builds remain functional with reduced extension compatibility.

TECHNOLOGY

PingCAP TiDB Cloud breach exposes 10.6 TB of customer data

7h ago · Source: Hacker News

A security researcher known as FULCRUMSEC has released a trove of internal data from PingCAP, the company behind the distributed database TiDB Cloud. The leak comprises approximately 10.6 terabytes of information, including tenant records, SQL statements, API keys, billing details, source code and connection logs. The data was obtained through a series of cloud‑service exfiltrations that went undetected for months.

The researcher described how the breach began with the extraction of 8 terabytes of data, followed by additional transfers that pushed the total beyond 10 terabytes. Over 88 consecutive six‑hourly exports were made from the production control plane without triggering any alerts. The researcher noted that the exfiltration used credentials that had been committed to public repositories, allowing the data to be routed through the provider’s own infrastructure.

The released material contains several categories of sensitive information. Tenant records include identifiers for more than 180,000 organisations, 292,000 user accounts and 403,000 email addresses. Some of these accounts held active API keys, and a small number of newly created keys were observed just hours before the final export. The researcher also extracted 20 million raw SQL statements that reveal the schemas and business logic of numerous customer databases, including tables that store medical professional data and patient rosters.

Billing and financial data amount to roughly 92 gigabytes of AWS cost records, showing monthly expenditures, discounts and cross‑region transfer fees for individual customers. The dataset also includes revenue figures for major clients such as HubSpot, Stripe and various Chinese firms, as well as details on pricing contracts and subscription renewals.

Source code repositories — 413 private GitHub repositories — were part of the leak. The code includes components that manage billing, identity verification and encryption. Notably, the encryption library uses a static initialization vector derived from a single server‑wide secret, which could allow decryption of customer data if the secret were compromised.

Connection logs provide a detailed map of how customers interact with TiDB Cloud. The logs list over 100,000 distinct client IP addresses, the software used to connect (including versions of Rails, ProxySQL and MySQL Workbench) and the frequency of connections across 846,000 clusters. This information could aid attackers in targeting specific customers.

The breach also exposed credentials that were inadvertently shared in support tickets. Examples include AWS access keys, GitHub personal access tokens and database connection strings that embed usernames and passwords. Some of these credentials grant access to additional cloud resources belonging to the affected customers.

PingCAP’s own internal security tracker had flagged a critical issue in 2022: the ability to reset the root password of any cluster unconditionally, a flaw that could allow full takeover of a tenant’s database environment. The researcher noted that this vulnerability remained unaddressed for several years, even as the breach unfolded.

The researcher has published the data in a series of torrent files, making it widely downloadable. Contact information for further inquiries is provided in the release notes.

The incident raises questions about the security practices of managed database services that host multiple tenants on shared infrastructure. It also underscores the risks associated with inadequate monitoring of cloud‑resource usage and the mishandling of privileged credentials within support workflows.

TECHNOLOGY

Micron Announces DDR6 Doubling Bandwidth and LPDDR6 Improving Power Efficiency on 1δ Node

7h ago · Source: wccftech

Micron Technology outlined its upcoming memory technologies on Tuesday, emphasizing DDR6, LPDDR6 and next-generation HBM designs built on the 1δ DRAM node. The company said DDR6 will deliver twice the bandwidth of DDR5, while LPDDR6 achieves 35 percent better power efficiency than its predecessor. Both products are slated for production in the second half of 2027, according to internal roadmaps. Micron also previewed vHBM, a vertical stacking approach that places memory directly on compute dies to shorten the memory-to-processor path and improve energy efficiency for AI workloads. In parallel, the company is advancing G11 NAND, which will exceed 400 layers through wafer‑on‑wafer bonding and target a two‑fold increase in bit density over current G9 parts. Executives noted that demand for memory has risen sharply with each AI generation, citing a 30‑fold jump in memory usage for agentic AI and a projected tenfold growth for physical AI applications. Micron’s roadmap includes hybrid bonding, high‑NA EUV lithography and new materials such as high‑mobility semiconductors to push scaling beyond planar limits. The company is collaborating with customers like Meta on LPDDR6 adoption for data‑center deployments, aiming to support higher bandwidth and lower power consumption across edge and cloud environments. Analysts said the announcements reflect Micron’s continued investment in R&D and its strategy to maintain a leadership position in DRAM, HBM and NAND markets through 2030.

TECHNOLOGY

Open-source plugin adds 28-sensor WireView Pro II monitoring to MSI Afterburner overlay

7h ago · Source: wccftech

A developer has released an open-source MSI Afterburner plugin that integrates 28 individual WireView Pro II sensor readings into the graphics card monitoring overlay, offering users a consolidated view of power delivery metrics without needing separate software.

The plugin, created by Reddit user VolterMort, connects directly to Thermal Grizzly's WireView Pro II hardware via USB, bypassing the need for Thermal Grizzly's proprietary application. It exposes detailed measurements including total connector power consumption, current draw, and average voltage across the 16-pin power interface, as well as per-pin voltage, current, and power data for all six 12V connections. Additional tracked parameters include internal and external temperature readings, fan duty cycle, cable power rating, and connection status.

This development arrives amid ongoing reports of melting issues with the 16-pin 12V-2x6 power connectors used in NVIDIA GeForce RTX 40 and RTX 50 Series GPUs. Despite the revised connector standard intended to resolve problems with the original 12VHPWR design that affected RTX 4090 cards, melting incidents continue to be documented across multiple manufacturers' products. The issue has also extended beyond NVIDIA, with recent cases reported on ASRock and Sapphire Radeon RX 9070 XT models featuring similar power connectors.

Thermal Grizzly designed the WireView Pro II specifically to help users identify electrical irregularities, particularly uneven current distribution across power pins that could contribute to connector failures. The new plugin enhances accessibility to these monitoring capabilities during gaming sessions and stress testing by polling the hardware approximately once per second. It includes a Pause/Resume USB functionality that allows seamless switching between the plugin and Thermal Grizzly's official software without restarting MSI Afterburner.

The plugin operates strictly as a monitoring tool; it does not provide automatic protection against connector melting, nor does it adjust GPU power limits or modify WireView's safety thresholds. Thermal protection remains handled independently by the WireView Pro II hardware itself. Testing has confirmed functionality on Windows 11 Pro with MSI Afterburner 4.6.7 Beta 2 and a WireView Pro II Black Reversed running firmware v05, though compatibility with other configurations has not been verified.

Available under the MIT license, the plugin's source code and compiled DLL are hosted on GitHub. Installation requires placing the DLL file in MSI Afterburner's monitoring plugins directory and enabling desired sensors through the application's Monitoring settings interface. The release was first reported in the r/nvidia community forum.

TECHNOLOGY

PHP vulnerability lacks practical exploit despite widespread PoC claims

7h ago · Source: Hacker News

A newly publicized PHP vulnerability has sparked significant discussion within cybersecurity circles, though experts note it does not currently pose an immediate, widespread threat. The flaw, which requires specific conditions to exploit, has generated thousands of purported proof-of-concept (PoC) scripts online, but technical analysis reveals these do not function against standard PHP installations.

The vulnerability, tied to a flaw in PHP's handling of certain input parameters, was initially described as potentially severe. However, researchers and independent analysts have consistently demonstrated that exploiting it demands pre-existing weaknesses, such as the ability to execute local file inclusion (LFI) attacks. This prerequisite significantly limits its practical applicability, as compromising a system would already require prior access or misconfiguration.

Online claims of ready-to-use exploits have proliferated, often promoted through social media and AI-generated content. Yet, when tested against unmodified PHP environments, these scripts fail to deliver functional results. Analysts emphasize that successful exploitation would necessitate complex, multi-step attack chains that are not trivial to construct, even with advanced tools.

The situation reflects broader concerns about how artificial intelligence influences cybersecurity discourse. Many early analyses relied on AI-generated guidance, which sometimes conflated theoretical possibilities with actionable exploits. This has led to confusion, as some users mistakenly interpreted AI outputs as validated attack methods without verifying their efficacy in real-world scenarios.

Historical context shows that similar vulnerabilities, such as those in Log4j or Shellshock, prompted rapid exploitation attempts shortly after disclosure. In contrast, this PHP flaw has not seen comparable activity, with no evidence of active exploitation in the wild. Experts caution against overestimating the risk while stressing the importance of patching systems where applicable.

The debate underscores the need for critical evaluation of technical claims, particularly in an era where AI tools can generate persuasive but unverified content at scale. While the vulnerability warrants attention, its current impact appears limited by technical barriers that require specialized conditions to exploit.

TECHNOLOGY

AI data center projects expand across US amid local opposition

7h ago · Source: theverge

AI data center projects are proliferating across the United States, drawing increasing scrutiny from communities concerned about environmental and operational impacts. Developers have announced multiple facilities in recent months, with several proposals advancing through local planning processes despite vocal resistance from residents and advocacy groups. Opposition has centered on water consumption, energy demands, and land use, particularly in regions experiencing drought or grid strain. In Virginia, a consortium of tech firms proposed a 500-megawatt facility near a major aquifer, prompting a public hearing that drew over 300 attendees. Similar debates have unfolded in Arizona and Texas, where water rights and electricity reliability have become contentious issues. Proponents argue these installations are essential to meet growing computational needs for artificial intelligence workloads, citing efficiency gains in cooling and renewable integration. Critics counter that cumulative impacts remain understudied, with some municipalities calling for moratoriums until comprehensive impact assessments are completed. The Verge reported on October 21, 2026, that at least 17 major data center projects had entered permitting phases nationwide in the preceding quarter, though none had secured final approvals as of the report's publication. Environmental review timelines and zoning variances continue to delay progress, with some jurisdictions demanding mitigation plans for heat output and electronic waste. Meanwhile, industry representatives maintain that data centers represent a net economic benefit through job creation and infrastructure investment, though these claims are subject to ongoing analysis by independent researchers.

TECHNOLOGY

Railway halts deployments after unauthorized access to environment variables

7h ago · Source: Hacker News

Railway detected anomalous activity involving systems that store customer environment variables earlier this morning. Investigation revealed that an unauthorized third party may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents. Environment variables can contain secrets such as API keys, database credentials, and registry credentials.

The company believes the incident is part of a broader series of attacks targeting platform providers that host AI inference services. Railway notified affected upstream providers, prompting them to revoke keys proactively. The firm emphasized that such events are taken extremely seriously.

Initial analysis suggests the impact may be limited to a subset of users, but Railway recommends that all customers immediately rotate all environment variables stored on the platform, including API keys and private registry credentials, and review service logs for unusual activity as a precaution while the investigation proceeds.

All deployments on Railway have been paused during the investigation. Until builds resume, users cannot deploy new versions. The company issued an apology for the inconvenience and said it will notify affected customers directly by email as it confirms which accounts were compromised. Updates will be posted on the incident page and on status.railway.com as the scope of impact is narrowed.

TECHNOLOGY

Tesla's Q3 2026 profit declines 43 percent amid rising costs

7h ago · Source: arstechnica

Tesla reported its third-quarter 2026 financial results on Thursday, revealing a 43 percent drop in net profit compared with the same period in 2025. The company generated $28 billion in revenue, nearly matching the prior year's total, but profitability weakened as expenses climbed. Automotive sales contributed $20.6 billion, a 3 percent decline year over year. Revenue from solar panels and energy storage fell 16 percent to $2.9 billion, reversing a growth trend observed in earlier quarters. In contrast, services and other offerings, including parts sales and Supercharger usage, increased by one-third to $4.6 billion. Operating expenses rose 39 percent to $4.8 billion, reducing the operating margin to 2.6 percent from 5.8 percent recorded in Q3 2025. Net income settled at $787 million, while capital expenditures jumped 110 percent to $4.7 billion. Free cash flow declined 62 percent to $1.5 billion. The financial snapshot reflects a period of cost pressure for the company despite stable top-line revenue.

TECHNOLOGY

Meta reports Muse AI reaches 10 million users with shopping as leading activity

7h ago · Source: techcrunch

Meta disclosed during its third-quarter earnings call on Wednesday that its AI application Muse has surpassed 10 million users, aligning with earlier projections from market intelligence firm Sensor Tower.

CEO Mark Zuckerberg highlighted usage patterns that emerged during the quarter, noting that approximately 25% of users who installed Muse now engage with it on a daily basis, contributing to improved user retention.

The company also revealed that more than one-quarter of active users who conducted transactions through Muse’s shopping functionality recorded average purchase values exceeding $200, a figure that surprised industry analysts.

“Plaid shared with us that they hadn’t observed activity of this magnitude on any other platform,” Zuckerberg said, referencing the financial technology provider that powers payment integrations for the AI agent. Muse leverages Plaid’s infrastructure to facilitate direct purchasing through conversational interfaces.

Beyond commerce, Zuckerberg indicated growing adoption of Muse for personal productivity tasks, including synchronization with email and calendar systems. He emphasized that this trend reflects user confidence in the platform’s security architecture, which incorporates a feature named “Muse Secure VM” to safeguard data.

Meta is also preparing to launch “Muse Confidential VM,” a forthcoming capability designed to prevent even internal Meta systems from accessing user content.

With product-market fit now established, the company outlined plans to scale infrastructure, enhance revenue generation, and reduce computational costs. Current projections estimate that revenue per Muse user could eventually exceed lifetime value metrics observed across Meta’s core social platforms—Facebook, Instagram, WhatsApp, and Messenger. At present, average annual spending per user on those platforms stands at several hundred dollars.

Monetization strategies will prioritize broad accessibility, with commerce transactions generating revenue share while advanced AI capabilities remain reserved for paying subscribers. Meta projects profitability will follow once scale is achieved.

During the earnings discussion, Zuckerberg noted ongoing investments in computational capacity to support over a billion users in the coming years. He stated that cost efficiency improvements exceeding 10-fold are anticipated within 12 months, enabling economic sustainability at scale.

The AI agent is positioned as a strategic component of Meta’s broader hardware ambitions, particularly its smart glasses initiative. Reality Labs, the division overseeing wearable technology and immersive environments, continues to operate at a significant loss, though projected deficits have narrowed from $19.1 billion in 2025 to an estimated $15 billion for the current fiscal year.

Zuckerberg described an upcoming evolution of the service as the “Muse network,” wherein individual agents could collaborate across user ecosystems, including with contacts and family members. He suggested this would enable more complex interactions, such as negotiating purchases through third-party merchant agents rather than directing users to external websites.

The announcement was accompanied by standard editorial disclosures regarding affiliate links and contributor information. Sarah, a reporter with TechCrunch since August 2011, previously contributed to ReadWriteWeb and held technical roles across banking, retail, and software sectors.

Contact can be made via [email protected] or through encrypted messaging on Signal at sarahperez.01.

TECHNOLOGY

Recursive launches Flint, a laptop coding model built with AI assistance

7h ago · Source: techcrunch

Recursive, an artificial intelligence startup founded in 2023, introduced Flint, a free coding model designed to operate on standard laptops. The company described Flint as an early demonstration of recursive self-improvement, where AI systems help develop more capable AI tools. Unlike many AI models that require cloud infrastructure, Flint runs locally, allowing developers to work offline and maintain code privacy without incurring API fees.

The model was developed using Recursive’s automated research system, internally referred to as the Eureka Machine. According to the company, this system contributed to nearly all stages of Flint’s creation, enabling a small team to complete the project in under four months. Flint contains 40 billion parameters but activates only 2.5 billion during any given task, a design choice that reduces computational demands and makes it suitable for consumer-grade hardware.

In benchmark testing, Flint processed approximately 131 tokens per second on a MacBook Pro equipped with Apple’s M4 Pro chip, outperforming comparable models such as Google’s Gemma 4 and Nvidia’s Nemotron 3.5 Lightning, which averaged between 58 and 69 tokens per second on the same hardware. On Nvidia’s RTX Spark platform, Flint achieved over 150 tokens per second. It also ranked among top-performing models under 50 billion parameters on SWE-Bench Verified, a test measuring software bug resolution capabilities, trailing only Alibaba’s Qwen3.8 27B in Recursive’s internal evaluations.

Flint is distributed under the Apache 2.0 license via Hugging Face, permitting free use and modification. Its efficiency and open availability distinguish it from larger models like Meta’s Muse Spark Open, which requires at least a terabyte of memory and is not designed for typical laptops. Early user testing reported by Wired’s Will Knight demonstrated Flint’s ability to generate functional code for tasks such as building a to-do list application and a web research tool, though it occasionally required task segmentation for complex projects.

Recursive’s research process relies heavily on AI-driven iteration, with the Eureka Machine proposing structural changes, optimizing training methods, and generating specialized code to accelerate computations. The company noted that such systems are increasingly integral to AI development, citing internal data indicating that AI agents had logged 3.1 workdays for every one worked by human researchers by mid-August of the previous year.

Looking ahead, Recursive aims to refine Flint through iterative cycles of AI-assisted development, with the long-term objective of achieving full recursive self-improvement under human oversight. CEO Richard Socher, formerly chief scientist at Salesforce, emphasized that future models should operate with increasing autonomy while remaining accountable to human control mechanisms. The company has not disclosed the extent of time saved by researchers through AI collaboration, but affirmed that its $410 million agreement with Amazon Web Services supports not headcount growth but expanded agent-based research capacity.

Flint’s release marks a notable development in accessible AI development tools, particularly for developers prioritizing privacy, offline functionality, and cost efficiency. Its performance relative to larger, resource-intensive models continues to fuel discussion around the scalability and control of self-improving AI systems.

TECHNOLOGY

Bose acquires Skullcandy in strategic move to broaden consumer audio reach

7h ago · Source: theverge

Bose completed the purchase of Skullcandy, a Utah-based consumer audio brand, as part of a strategy to extend its technological reach into new market segments. The transaction, finalized without disclosed financial terms, positions Skullcandy as an independent subsidiary under Bose’s premium consumer audio division. Founded in 2003, Skullcandy maintains its headquarters in Park City, Utah, and continues operations under its established brand identity. The acquisition integrates Skullcandy’s design language and athlete partnerships with Bose’s engineering portfolio, including head-tracking spatial audio and advanced active noise cancellation systems. Bose CEO Lila Snyder stated the move aligns with a six-decade commitment to expanding audio accessibility, emphasizing technology sharing between the companies rather than brand consolidation. Skullcandy products will retain their distinct market positioning while leveraging Bose’s technical resources to enhance features such as noise suppression in upcoming releases. Industry analysts note the deal addresses Bose’s historical concentration in professional and traveler markets, with Skullcandy’s youth-oriented branding offering pathways to younger demographics. The partnership reflects a broader industry trend of legacy audio firms acquiring niche brands to diversify consumer engagement channels.

TECHNOLOGY

NVIDIA Adds Advanced Shader Delivery and DLSS 4.5 to New Titles

7h ago · Source: wccftech

NVIDIA released a new Game Ready driver that introduces Microsoft's Advanced Shader Delivery feature alongside an update to Cyberpunk 2077's DLSS implementation. The driver, version 621.01, targets RTX GPUs and aims to reduce shader compilation delays in select games.

The update arrives ahead of several major releases. Call of Duty: Modern Warfare 4, which entered early access on October 16 and will launch globally on October 23, will support Advanced Shader Delivery and receive DLSS 4.5 integration. On RTX 50 series hardware, the game can use Dynamic Multi Frame Generation, potentially multiplying frame rates up to six times. The game also supports NVIDIA Reflex to reduce system latency.

Gears of War: E-Day, launching October 30, will also gain Advanced Shader Delivery support. This technology pre-downloads shaders optimized for a player's specific hardware and driver configuration, eliminating initial compilation waits that can cause stuttering.

Cyberpunk 2077's October 22 update upgrades its entire DLSS suite to version 4.5, adding Dynamic Multi Frame Generation. The update applies to both standard DLSS and the newer Multi Frame Generation mode, which can increase frame rates by up to 1.4 times on RTX 50 series systems. Earlier this month, NBA 2K27 received a similar DLSS 5 update that improved texture detail and character rendering.

Other titles receiving DLSS enhancements include Planet Zoo 2, which added Dynamic Multi Frame Generation and Super Resolution in a post-launch update, and The Finals, which now supports DLSS 4.5's ray-traced effects through hardware-accelerated global illumination.

NVIDIA also addressed several bugs in the driver update. Reports noted crashes in Wuthering Waves when using Freestyle filters with DLSS Frame Generation, stability issues in Star Citizen with the Vulkan API, and intermittent screen dimming on certain ASUS laptops after driver updates. Additional fixes targeted high-refresh-rate monitor behavior and USB connectivity problems with Meta Horizon Link.

Advanced Shader Delivery and DLSS 4.5 represent incremental improvements rather than revolutionary changes. The technologies focus on reducing technical bottlenecks — shader compilation delays and frame generation latency — that have long affected PC gaming performance. Their effectiveness depends on specific hardware configurations and game implementations.

The updates reflect NVIDIA's ongoing effort to integrate AI-driven rendering techniques into mainstream titles. While the performance gains vary by title and system, the company emphasizes measurable improvements in frame rates and visual fidelity across its RTX ecosystem.

TECHNOLOGY

Legal AI startup Legora raises $550 million Series E at $8.8 billion valuation

7h ago · Source: techcrunch

Legora disclosed on Wednesday that it had secured $550 million in a Series E financing round, pushing its valuation to $8.8 billion. The company develops software that automates and supports workflow tasks for legal professionals, reflecting a broader shift in the legal sector toward AI-driven services that handle routine work.

The announcement follows a similar funding milestone for Harvey, Legora’s primary competitor, which raised $550 million a month earlier at a $15.5 billion valuation and reported annual recurring revenue exceeding $200 million. Legora’s current round builds on an earlier $50 million extension to its $550 million Series D in April, which had valued the firm at $5.6 billion and reported $100 million in ARR. The company now reports ARR above $200 million.

Investors participating in the new round include Atreides Management, which led the financing, alongside Baron Capital, Bessemer Venture Partners, General Catalyst, Menlo, and other firms. Legora said the capital will be directed toward expanding its presence across North America.

The company’s growth underscores accelerating investment in legal technology, as firms seek tools that move beyond simple AI assistants to more comprehensive services that integrate into daily legal practice.

TECHNOLOGY

Forrester predicts AI will consume 20 percent of tech budgets by 2027

7h ago · Source: theregister

Forrester's latest State of AI Survey 2026 indicates that more than half of chief information officers are expected to miss their AI-related return on investment targets in the coming year. The analyst firm found that 45 percent of AI decision-makers require a positive return on investment within twelve months to deem their investments successful. While some technology leaders are improving their ability to link AI expenditures to planned outcomes, Forrester anticipates that success will remain limited to isolated use cases rather than comprehensive programs, which it considers insufficient for broad organizational impact.

The report emphasizes that achieving measurable, firmwide results with AI requires changes to organizational structures, processes, and ways of working. Only 22 percent of AI decision-makers reported a positive impact of AI on earnings before interest, taxes, depreciation, and amortization (EBITDA) over the past twelve months. This gap between technology investment and organizational adaptation, according to the report, will delay the realization of improved ROI targets. Despite these challenges, Forrester projects that AI will account for 20 percent of all business technology spending in the upcoming year.

Sharyn Leaver, chief research officer at Forrester, stated that this trend will increase pressure on leaders to demonstrate AI's value while maintaining control over costs, infrastructure, and risk. She noted that emerging technologies, geopolitical pressures, and the expanding use of AI across technology operations will introduce new complexities and potential points of failure.

To maximize returns on AI investments, technology teams are expected to focus on open-weight generative AI models, which can achieve performance comparable to leading proprietary systems at a significantly lower cost. Forrester predicts that open-weight models will represent half of all AI tokens processed but will receive only five percent of enterprise spending. These models, including examples such as Gemma, Llama, and Qwen, are deemed suitable for enterprise workloads that generate high token volumes, such as document processing, customer support interactions, internal knowledge searches, and routine tasks within agentic workflows.

In contrast, frontier models from companies like Anthropic, OpenAI, and Google are expected to be reserved for specialized applications involving deep knowledge and critical task automation where errors carry high costs. Forrester indicated that these advanced models will account for a smaller portion of token usage, as their deployment is limited to use cases where precision justifies the investment.

TECHNOLOGY

Microsoft trims AI features from Windows 11 file explorer context menu

7h ago · Source: wccftech

Microsoft confirmed it will retire eight Copilot-powered actions from the File Explorer right-click menu, marking the latest reduction of AI integrations in Windows 11. The changes, detailed in a Microsoft 365 Message Center notice and first reported by Windows Latest, aim to streamline Copilot's interaction with OneDrive files. The eight features being removed are Summarize, Create FAQ, Compare Files, Ask a question, Explain image, Explain images, Compare images, and Extract text. These options previously appeared when users right-clicked eligible OneDrive files, offering AI-assisted tasks without opening Copilot manually. Microsoft clarified that the capabilities are not disappearing entirely; they remain accessible through the "Ask Copilot" entry, the Copilot icon in File Explorer Home, or the OneDrive activity center. The rollout will begin in mid-November 2026, with completion expected by early December 2026. This follows earlier adjustments, including the removal of Ask Copilot buttons from Snipping Tool and Photos and the renaming of Copilot in Notepad to "Writing Tools" in March. The move comes as Microsoft faces growing criticism for overloading Windows 11 with AI features, a trend some users have labeled "Microslop." While the company has not publicly linked the changes to that backlash, the adjustments reflect a broader willingness to respond to user feedback. Microsoft emphasized that the broader AI strategy remains intact, but acknowledged that not every Windows component requires a dedicated Copilot button. For users seeking a less intrusive operating system, the reduction may improve the overall experience.

TECHNOLOGY

Nvidia unveils AI-powered robotics and containerized infrastructure at Berlin keynote

7h ago · Source: theregister

Nvidia chief executive Jensen Huang presented a vision for AI integration across industries during a Berlin keynote that was briefly disrupted by environmental protesters. Attendees held signs questioning the company's environmental impact as Huang addressed the interruption with a lighthearted remark before continuing his presentation.

The event showcased several hardware and software initiatives, including the DSX POD reference design for containerized AI data centers. This system combines seven liquid-cooled compute racks based on Nvidia's Vera Rubin architecture and Spectrum-X networking. Partners will assemble and test modular units before delivery, with deployment timelines potentially reduced from six months to 14 days at prepared sites. Nvidia stated the design uses closed-loop liquid cooling capable of operating at coolant temperatures up to 45°C, with outdoor dry coolers releasing heat without water evaporation. Huang claimed such systems could conserve approximately 54 million liters of water daily.

A key focus was on physical AI applications, particularly robotics. Nvidia introduced the Microducks from Pollen Robotics—small bipedal robots with facial cameras that responded to voice commands during the demonstration. These robots illustrated a workflow where AI models are trained in the cloud, tested on Nvidia RTX Spark systems, and deployed to robotic platforms. Additionally, the company unveiled Agile ONE SN, a humanoid robot reference platform from Agile Robots, built around Nvidia's Isaac GR00T technology and Jetson Thor modules, scheduled for release in early 2027.

Huang also highlighted Nvidia's expansion into automotive and telecommunications sectors. He noted increasing adoption of the Hyperion automotive computing platform across vehicle fleets and mentioned Nvidia-powered computing deployments in European telecom networks for AI-RAN services. The company cited a milestone involving a commercial phone call routed through Nvidia infrastructure on the T-Mobile network with Nokia.

During the presentation, Huang emphasized Europe's role in Nvidia's global strategy, referencing approximately $10 billion in investments and 14 European startup acquisitions during his current trip. Analyst Paul Miller of Forrester observed that while these investments support European technology initiatives, Nvidia remains a U.S.-based company, raising questions about the sovereignty of infrastructure reliant on external vendors.

The keynote concluded with a CGI animation featuring robots performing a musical recital in a style reminiscent of the Eurovision Song Contest. Environmental groups and technology analysts have previously raised concerns about the energy demands and resource consumption associated with large-scale AI infrastructure, though Nvidia has emphasized efficiency improvements in its cooling technologies.

TECHNOLOGY

OpenAI models to join Google Cloud marketplace

7h ago · Source: Hacker News

OpenAI and Google Cloud announced a partnership that will place OpenAI’s frontier models and Codex agentic workflow tools into Google Cloud’s Model Garden. The collaboration grants Google Cloud customers direct access to these models within the platform where they already run AI workloads, enabling enterprises to integrate advanced AI capabilities into their development pipelines.

Google Cloud has long positioned itself as a hub for machine learning and AI, attracting developers and data scientists who rely on its infrastructure for large-scale workloads. By adding OpenAI models to its catalog, the companies aim to let organizations use frontier AI within the same environment they already use for data processing and model training.

For businesses handling regulated data, the integration combines OpenAI’s models with Google Cloud’s access controls, centralized governance and high‑performance infrastructure. This pairing is intended to meet the strict compliance requirements of industries such as finance, healthcare and government.

Customers will be able to acquire OpenAI frontier models through the Google Cloud Marketplace, with enterprises that have existing Google Cloud spend commitments able to allocate those resources toward the new services. In addition, OpenAI models are slated to appear in Google Antigravity and the Gemini Agent, giving users flexibility to select the most appropriate model for each task.

General availability is expected in the coming weeks. Access requests can be submitted via a dedicated form. The partnership does not alter Microsoft’s role as OpenAI’s primary cloud provider.

TECHNOLOGY

Pinball Expo 2026 showcases resurgence of physical gaming amid modular and homebrew innovations

7h ago · Source: arstechnica

Pinball Expo 2026 drew industry professionals and enthusiasts to the Schaumburg, Illinois convention center in October, highlighting a renewed presence for physical pinball machines after years of decline. Attendees gathered at Stern Pinball's Elk Grove Village facility for factory tours, where company leadership and designer George Gomez outlined the manufacturer's continued dominance, with Gary Stern noting that Stern controls approximately 90 percent of the current pinball market. The expo floor featured new releases including Stern's Fallout machine, alongside offerings from Jersey Jack, Barrels of Fun, and Spooky Pinball. A growing segment of the market demonstrated modular design approaches, most notably Multimorphic's P3 system, which uses interchangeable playfields and a reactive display that can reconfigure game layouts. Co-creative director Stephen Silver described the platform as allowing seven distinct book-based game modes that can be played in any order, with plans for future expansions. The system also provides a free software development kit enabling third-party creators to design and distribute original games for the P3 hardware. Another emerging trend involved homebrew development, exemplified by Johnny Zen's Pinball Construction Set, a browser-based tool allowing users to design tables through drag-and-drop interfaces. Zen also plans to establish a marketplace for commissioning artwork. Additionally, projects like Shaolin Flow demonstrated novel control schemes, using fist-sensing technology to operate flippers. The event also included charitable initiatives such as Project Pinball, which places machines in children's hospitals. While newer companies like Barrels of Fun and Dutch Pinball are challenging traditional manufacturing hubs, the industry continues to evolve through greater accessibility of development tools and expanding community participation.

TECHNOLOGY

Meta's Muse AI reaches 10 million US downloads

7h ago · Source: theverge

Meta's AI assistant, called Muse, has been downloaded 10 million times in the United States, according to market intelligence firm Sensor Tower. The milestone was reached within 40 days of its September launch, making it only the 12th app to achieve that level of adoption so quickly. Sensor Tower attributes part of the rapid uptake to a substantial advertising campaign launched by Meta. The app is designed to assist users with tasks such as answering questions, generating text, and providing recommendations, and it integrates with Meta's broader ecosystem of platforms.

TECHNOLOGY

Windows 11 retains Windows 95 memory management code for legacy application compatibility

7h ago · Source: Hacker News

A compatibility shim known as EmulateHeap continues to provide Windows 95's memory manager within Windows 11, enabling certain older applications to function as they did under the earlier operating system. This component remains present in Windows 11 version 26H2 and can be observed through Microsoft's Compatibility Administrator tool.

The persistence of this legacy code traces back to issues encountered with SimCity 2000 during the Windows 95 development cycle. According to historical accounts, the game contained a bug that accessed memory after it had been freed, creating a use-after-free condition. Rather than requiring the game's developers to patch the software, Microsoft engineers implemented a targeted fix within the operating system itself.

Raymond Chen, a long-time Microsoft engineer, detailed this approach in his Windows Confidential column, explaining that some applications relied on specific behaviors of Windows 95's memory allocation system. When these applications were run on later Windows versions that managed memory differently, they would fail unexpectedly.

To address this, Microsoft developed EmulateHeap as part of its application compatibility infrastructure. The shim functions by intercepting memory allocation calls from legacy applications and redirecting them through a reconstructed version of the Windows 95 heap manager. This implementation draws from the original Windows 95 kernel source code, which is recompiled and integrated into the compatibility framework. The code only activates when explicitly configured for a specific application, minimizing performance impact during normal operation.

Compatibility Administrator, a tool included in the Windows Assessment and Deployment Kit, allows administrators to inspect and configure such compatibility fixes. EmulateHeap appears in the list of available shims, though its presence does not guarantee activation without proper configuration.

Microsoft's continued support for this compatibility layer reflects a broader pattern of maintaining backward compatibility for critical business and legacy software. However, the company has not extended similar support to all older applications; for instance, 3D Pinball for Windows was excluded due to unresolved 64-bit compatibility issues.

Recent updates have demonstrated that compatibility shims can introduce unforeseen issues. Following the Windows 11 22H2 update, users reported audio problems in games like GTA Vice City and crashes in Need for Speed: Most Wanted when EmulateHeap was enabled. These incidents underscore the delicate balance between preserving legacy functionality and introducing new system behaviors.

While modern development practices increasingly favor rewriting software to meet current standards, Microsoft's approach illustrates a pragmatic strategy for sustaining operation of essential older applications without requiring code modifications from third-party developers.

TECHNOLOGY

Humble Bundle offers eight sci-fi shooters for $25

7h ago · Source: theverge

Humble Bundle is selling a collection of eight science fiction first-person shooters for $25. The package, called the Sci-Fi Exposure bundle, includes Bungie’s upcoming reboot of Marathon, the three remastered versions of Crysis, RoboCop: Rogue City, and both Ghostrunner titles. The offer is available through Humble’s website, with the payment split among Humble, the game publishers, and the charity water nonprofit organization. The bundle was announced on October 21, 2026, and remains active while supplies last.

TECHNOLOGY

Accessories for iPhone Duo Arrive as Pre-Orders Begin

7h ago · Source: macrumors

Apple's iPhone Duo is set to begin arriving for pre-order customers this Friday, prompting a wave of accessory releases from multiple vendors. Retailers including OtterBox, ZAGG, Speck, and ESR have introduced cases and screen protectors designed for the device, with some offering promotional pricing.

ZAGG is providing a 20 percent discount when customers purchase any two items from its store, which can include iPhone Duo cases and screen protectors. Amazon is selling TechWoven dupe cases for $29.69, a price $50 lower than Apple's official iPhone Duo cases. Other retailers such as Best Buy, AT&T, Target, and Burton Goods are also listing iPhone Duo accessories from brands like Spigen, Dbrand, and Kate Spade.

Pre-orders for the iPhone Duo are currently open, though the device itself is scheduled to launch in November or later. Some vendors are shipping cases immediately, while others are awaiting the product's release. Nomad and OtterBox have introduced leather folio options, while ESR offers a silicone leather case with a built-in stand.

MacRumors, which is affiliated with some of these vendors, reports that most retailers have not yet applied direct discounts to iPhone Duo accessories, though promotional offers like ZAGG's 20 percent deal are available. The site also notes ongoing Apple-related deals elsewhere, including price reductions on MacBook Pro models and AirPods through Amazon's Prime Day promotions.

Customers seeking accessories can find listings across major retailers, with options ranging from budget-friendly cases to premium leather designs. Availability and pricing may vary by vendor and region.

TECHNOLOGY

Tesla sets 2027 deadline for customer vehicles to join robotaxi fleet

7h ago · Source: theverge

Tesla has announced that, beginning in the second quarter of 2027, owners of its vehicles will be able to add their cars to the company’s robotaxi network. The timeline was disclosed during the automaker’s third‑quarter earnings call by Ashok Elluswamy, vice president of autonomous driving. In his remarks, Elluswamy said the same software stack used for Cybercabs and Model Y will soon be released to customers as part of the V15 update, and that the only remaining condition is ensuring that a customer’s Model Y complies with Tesla’s geofencing and fleet‑management requirements. He added that the company expects to enable the first customer‑owned vehicles in the robotaxi fleet around Q2 of next year.

The announcement marks the first concrete deadline Tesla has set for opening its autonomous ride‑hailing service to privately owned cars. The company has previously promised similar capabilities since 2019, when Elon Musk first described a “Tesla Network” that would let owners earn income by allowing their vehicles to operate as driverless taxis. That vision has not yet materialized; only a few hundred robotaxis have been deployed in Texas and Florida, and a few dozen fully driverless Cybercabs operate in Austin, many still supervised by human monitors.

Tesla also reported a surge in adoption of its Full Self‑Driving (Supervised) feature, with more than 75 percent of new North American buyers opting for the package this quarter — a nearly 20‑percentage‑point increase from the prior quarter. Despite the growth in FSD uptake, overall vehicle sales declined, revenue remained flat, and profits dipped.

In addition, Tesla unveiled a new safety website noting that its autonomous systems have now logged 3.3 million miles driven without human intervention, up from 380,000 miles reported in July. However, expanding the robotaxi fleet to include customer vehicles will require regulatory approval in each jurisdiction where the service operates, and insurance and liability frameworks for driverless passenger rides remain under development. Moreover, only newer models equipped with the latest hardware and compute architecture are currently capable of supporting fully driverless operation; older Model 3 and Model Y vehicles lack the necessary sensors and processing power.

Given Tesla’s history of postponing ambitious autonomous‑driving milestones, the 2027 target may yet slip. The company has previously set short‑term deadlines that have not been met, and regulatory or technical obstacles could further delay the rollout. Nonetheless, the new timeline provides a clear reference point for when Tesla intends to begin integrating privately owned cars into its autonomous ride‑hailing service.

TECHNOLOGY

OpenBSD 8.0 expands virtual machine capabilities and introduces Wine support

7h ago · Source: theregister

OpenBSD 8.0 expands virtual machine capabilities and introduces Wine support for running Windows applications. The release, the 61st version of the operating system, was announced by developer Bryan Steele on Mastodon. The update enhances the VMM/VMD hypervisor to support virtual machines with up to 64 virtual CPUs per guest. Memory addressing on x86-64 systems now reaches 512 GB, enabling use of graphics cards with large video memory. On Arm64 platforms, the system adds hibernation support and leverages CPU AES instructions for faster encrypted swap operations.

Component updates include OpenSSH 10.6, LibreSSL 4.4.0, and a graphics stack based on Linux 6.18. The default compiler transitioned to Clang/LLVM 22 across all architectures, though this change removed support for the Loongson architecture. The release contains only four documented fixes, reflecting its status as a recent update.

A notable security development involved a long-standing shared memory vulnerability. Calif's "Big Fish" research team detailed a flaw present in code inherited from the original BSD project, which had persisted for decades. Both OpenBSD and NetBSD addressed the issue in version 7.9 through separate errata updates. OpenBSD project leader Theo de Raadt founded the operating system in 1995 after forking from NetBSD. The 8.0 release marks a milestone near the project's 30th anniversary, though it does not formally commemorate the occasion.

The project continues to emphasize its longstanding security record, maintaining its slogan about having only two remote vulnerabilities in default installations. OpenBSD explicitly rejects code generated by artificial intelligence tools, citing licensing concerns rather than ethical objections. This stance aligns with broader project principles, though it differs from NetBSD's more direct opposition to AI-generated content.

The release theme incorporates references to The Simpsons, particularly the character Blinky the mutant fish. The mascot Puffy appears with an additional eye in promotional materials, and the release theme song parodies both the show and AI usage. Some observers have noted similarities between OpenBSD's approach and Butlerian Jihad philosophy, though the project itself focuses on technical simplicity and security.

A new Wine port has been proposed for OpenBSD, enabling execution of 64-bit Windows applications. The implementation requires emulating the %gs segment override instruction, which is not permitted in OpenBSD's security model. This limitation means the port only supports 64-bit Windows binaries and does not integrate with upstream Wine. Early testing shows compatibility with several modern titles, though screenshots from community testing indicate potential instability.

Wine does not provide sandboxing capabilities, meaning its use could expose OpenBSD systems to Windows malware. The project maintains its reputation for technical minimalism, though it lacks features common in other BSD variants, such as Bluetooth support for Apple devices, journaling filesystems, and logical volume management. Installation remains straightforward compared to NetBSD or FreeBSD, with the Fvwm window manager included by default.

OpenBSD prioritizes security and code simplicity over extensive functionality. Its community is known for technical expertise rather than social engagement, which may affect support accessibility for new users. The operating system remains distinct from Linux through its absence of systemd and focus on code auditing. While not designed for broad adoption, OpenBSD 8.0 offers a specialized environment for users seeking a streamlined, secure platform with experimental support for running Windows software.

TECHNOLOGY

iOS 27.2 introduces new capabilities across six Apple apps

7h ago · Source: 9to5mac

Apple will roll out iOS 27.2 next week, delivering updates to six of its core applications for iPhone users. The release includes refinements to Messages, Apple TV, FaceTime, Home, Apple Podcasts, and Games.

Messages will receive Suggested Actions, a feature that offers contextual shortcuts beneath conversation threads. When a message relates to an event, reminder, or note, the system may propose creating a calendar entry, setting a task, or adding content to a note. Users can customize which suggestion types appear. The functionality, initially tested during the iOS 27 beta earlier this year, returns with expanded options for personalization.

Apple TV gains a profiles system on iPhone and iPad alongside iOS 27.2 and iPadOS 27.2. The feature enables distinct viewing histories and recommendation profiles within a shared account, mirroring functionality previously limited to tvOS. Profile selection appears upon launching the TV app, with the option to disable the interface if desired. This addition aims to support households where devices are shared, particularly with children.

FaceTime’s Dual Capture receives an update in iOS 27.2, extending the ability to broadcast both front and rear camera feeds during group calls. The feature, available on compatible iPhone models including the iPhone 17 series and newer, allows participants to maintain dual-camera views without additional configuration. Activation follows standard camera switching gestures.

The Home app introduces two automation enhancements for smart lock users. Lock After Closing permits setting a delay period after a door closes before it automatically secures, offering more precise control than prior time-based triggers tied to unlock events. Door Left Open addresses prolonged door exposure by notifying users when an entry remains open beyond a specified duration, provided compatible hardware is installed.

Apple Podcasts gains structural changes to its Up Next queue. The section now separates into New Episodes and Continue Playing, distinguishing between unplayed content from followed shows and paused recordings from partially consumed episodes. This reorganization seeks to clarify user progress tracking within the Home tab interface.

Games receives minor interface updates, including visibility of recently downloaded but unplayed titles on the Home tab. Achievement milestones and leaderboard metrics are also updated for improved accessibility. The changes reflect incremental refinements rather than transformative overhauls across the updated applications.

The rollout coincides with Apple’s broader push toward enhanced smart home integration and content personalization. While specific release timing remains unspecified beyond the upcoming week, the update underscores ongoing investments in ecosystem cohesion across communication, media, and home automation tools.