Everything worth knowing 30

OpenAI announced it will no longer use live internet data when training its most advanced models, switching to a cached copy of the web. The change follows a recent security incident where a research model accessed the internet due to a configuration error, prompting a pause and a security overhaul. The company said the decision is based on the current state of alignment research and internet infrastructure security.

Why it matters: Developers must adapt to reduced real‑time data availability, affecting model capabilities and integration strategies.

TechCrunch + 2 moreSave

Moonshot AI released Kimi K3.1 Pro, a 3‑trillion‑parameter open‑weight model with a 1‑million‑token context window and a high‑speed variant that is 2‑3× faster. The model scores 55 on the Artificial Analysis Intelligence Index, an 11‑point gain that places it fourth behind three Anthropic and Meta models, and it nearly matches Claude Opus 5.5 on a coding test. Moonshot will publish the model’s weights by 4 November 2026 and has removed hacking‑related training data to limit misuse.

Why it matters: Developers can now run a top‑tier, open‑weight LLM locally and customize it, with full weights becoming available soon.

The Decoder + 4 moreSave

Two critical bugs were discovered in the PHP programming language, which powers the majority of internet sites, and they threatened to upend the internet. Experts say fixing the flaws is not as simple as clicking “Update” and advise assessing risk and taking protective steps.

Why it matters: PHP’s ubiquity means the vulnerabilities could impact a large portion of web applications and services.

TechCrunch + 1 moreSave

A UEFI bootkit called BlackX, observed in early 2026, leveraged the Baton Drop vulnerability to bypass Secure Boot and load a malicious driver that interferes with Kaspersky and Avast security solutions. The campaign targeted diplomatic organizations in Tajikistan, Uzbekistan and Turkmenistan and is attributed to the China-linked APT41 group.

Why it matters: It demonstrates that even patched Windows systems can be compromised via firmware attacks, highlighting the need for robust supply‑chain and firmware security measures.

BleepingComputer + 1 moreSave

Google's updated privacy policy states that enabling Personal Intelligence in Search or Gemini can let the company use data from Gmail, Photos and other services to serve targeted ads. Users cannot opt out by disabling Personal Intelligence, according to the policy details. The change applies to Android users and other Google service users.

Why it matters: Tech professionals need to understand new data usage rules that affect user privacy and ad monetization strategies.

Ars Technica + 2 moreSave

Elon Musk reportedly ordered SpaceX to throttle Ukraine's Starlink access. Ukraine has reported restrictions on Starshield, a version of Starlink, which is hampering its military operations against Russia.

Why it matters: Reduced satellite connectivity can impact defense communications and tech-dependent operations.

TechCrunch + 1 moreSave

Indie developers are creating a range of creative apps that exploit the iPhone Duo’s larger, hinge‑enabled display, including retro‑style cassette players, virtual notebooks, flight trackers and a digital toaster. The apps demonstrate how the foldable form factor can be used for both playful and functional experiences.

Why it matters: Tech professionals should watch the Duo ecosystem as it opens new design and development opportunities for foldable devices.

TechCrunch + 2 moreSave

Researchers remotely disabled the updater in the abandoned Time4Popcorn app, a Popcorn Time fork, closing a flaw that could have let attackers execute code with elevated privileges on millions of computers. Between November 2025 and March 2026 the Dutch firm Eye Security pushed more than 2 million updates to devices it did not own to switch off the background updater that could have been used to take over machines.

Why it matters: Unpatched updaters can become entry points for botnets, posing a large-scale security risk for any organization’s endpoints.

BleepingComputer + 1 moreSave

Researchers using AI identified significant security flaws in PHP, the scripting language that powers most websites. The language’s governing organization and the FBI’s cyber division issued a warning on Wednesday, prompting government agencies, corporations and other entities to assess exposure.

Why it matters: PHP vulnerabilities can affect any web‑based service, making immediate remediation critical for developers and security teams.

ET Tech + 1 moreSave

Microsoft Research released the Agensh harness as open source. The system operates without a central orchestrator, letting self‑organizing workers share a Git repository, chat, and a findings board. It can scale from a single agent to 1,024 agents on ProgramBench within a six‑hour budget.

Why it matters: It provides developers a ready‑to‑use framework for building large‑scale, decentralized multi‑agent applications.

MarkTechPostSave

Cognition released the Devin Vulnerability Fixes plugin, which includes three MIT‑licensed agent skills. The skills inventory, patch, and test PHP, Node.js, and self‑managed GitLab deployments affected by recent critical RCE flaws, and automatically open one pull request per repository. The plugin is offered as an open‑source agent plugin.

Why it matters: It lets security teams automate remediation of high‑severity vulnerabilities across common development stacks.

MarkTechPostSave

eSIM technology provides greater convenience compared to traditional physical SIM cards, but it does not represent a complete upgrade in all aspects. The pros and cons highlight that while eSIMs simplify activation and device design, they may still have limitations compared to physical SIMs.

Why it matters: Understanding eSIM limitations is crucial for device designers and service providers planning future hardware and connectivity solutions.

EngadgetSave

A Show HN post titled “Steal My Bitcoin” demonstrates a PHP remote code execution exploit the author built out of curiosity. The post has attracted 440 points and 264 comments on Hacker News.

Why it matters: It highlights ongoing PHP security vulnerabilities that developers need to address.

Hacker NewsSave

Apple’s Siri AI has experienced repeated delays, and OpenAI’s launch of a "super app" was described as messy and fell short of expectations. Both initiatives are listed among AI projects that have shut down or missed their goals.

Why it matters: Understanding these high‑profile setbacks helps tech professionals assess the risks and challenges of launching AI products.

TechCrunchSave

Pennsylvania Governor Josh Shapiro signed the Artificial Intelligence Deceptive Advertising Act into law, requiring any ad that has been significantly modified or generated by artificial intelligence to include a disclosure label. The label must appear in the same format as the ad, covering still images, video, audio, or text. The law takes effect after the governor’s signature on Thursday.

Why it matters: Tech professionals must ensure their ad content complies with new labeling requirements to avoid legal penalties.

The VergeSave

https://twitter.com/ID_AA_Carmack/status/2113704269274636568 Comments URL: https://news.ycombinator.com/item?id=50224100 Points: 304 # Comments: 186

Hacker NewsSave

Belkin introduced two semi‑solid‑state external batteries for iPhone: a 10,000 mAh model with a USB‑C port and a 5,000 mAh MagSafe model that supports 15 W Qi2 wireless charging. Both are lighter than typical power banks and feature premium aluminum builds that feel cold to the touch.

Why it matters: Lighter high‑capacity power solutions reduce bulk for mobile professionals who need reliable on‑the‑go charging.

9to5MacSave

Nicholas Thompson, CEO of The Atlantic, told Bloomberg This Weekend that artificial intelligence provides powerful capabilities for businesses but poses significant risks to media. He added that the broader economic impact of AI continues to lag behind its rapidly advancing capabilities.

Why it matters: Tech professionals need to balance AI adoption with potential media disruption and understand that economic benefits may not materialize as quickly as the technology evolves.

Bloomberg TechnologySave

New‑age tech stocks lost over $11 bn in combined market capitalisation this week. Swiggy led the decline with a 24.5% fall, driving the broader sell‑off.

Why it matters: The sharp drop highlights heightened volatility in the Indian tech sector, impacting investors and professionals tracking market health.

Inc42Save

Linx Dating founder Amy Andersen says newly wealthy AI creators are driving demand for premium matchmaking among busy professionals. The firm offers selective matchmaking packages that can exceed $500,000. Andersen discussed the service on Bloomberg This Weekend.

Why it matters: Tech professionals may become target customers for costly, curated relationship services.

Bloomberg TechnologySave

Wall Street is rotating out of AI stocks amid funding fears. The shift has boosted several defensive Club stocks. Portfolio adjustments are reflecting the change in sentiment toward AI investments.

Why it matters: Tech professionals should watch sector reallocations as funding sentiment impacts market dynamics.

CNBC TechnologySave

Advanced microchip production depends on a deeply interconnected global ecosystem of specialized companies, including ASML and TSMC, according to a Bloomberg Weekend discussion. The complexity of semiconductor supply chains makes them difficult to replicate or relocate, and rebuilding a comparable ecosystem in the United States is described as a generational project rather than a simple effort.

Why it matters: Tech professionals must understand supply‑chain dependencies because they shape product timelines, costs, and strategic planning.

Bloomberg TechnologySave

Technical colleges are expanding campuses and programs to accommodate more students as they anticipate a surge in demand for skilled workers driven by AI. They expect the growth to lift profits, though the payoff may take time.

Why it matters: A growing pool of AI‑trained talent will affect hiring and project staffing for tech professionals.

Bloomberg TechnologySave

GMO Internet Group Inc. requested that Japan’s government use its new active cyber defence powers to trace, block and neutralise the infrastructure of attackers who breached one of its services and demanded money. The request was made on Saturday in a stock‑exchange filing as the company works to contain the fallout.

Why it matters: Tech professionals need to understand how emerging government cyber‑defence tools may be invoked during major security incidents.

Bloomberg Technology + 1 moreSave

OpenAI fired safety researchers Tomek Korbak, Mikita Balesni and Jasmine Wang, who publicly contest the company's claim that they leaked confidential information. The trio says they were never provided in writing with details of the alleged mishandled data and link the accusations to their advocacy for more scrutinizable AI systems.

Why it matters: The dispute highlights challenges around transparency and accountability in AI safety teams, affecting how tech firms manage internal research and external scrutiny.

The DecoderSave

Prime Minister Benjamin Netanyahu suggested using cryptocurrency to circumvent potential financial sanctions on Israel. The Bank of Israel responded with a strongly-worded rebuke of the proposal.

Why it matters: Regulatory stance on crypto use for sanctions evasion signals risk and compliance considerations for fintech professionals.

Bloomberg TechnologySave

A three‑month field experiment with 133 patent attorneys found AI assistance improved immediate performance, especially for junior lawyers. When AI was withdrawn, only senior attorneys maintained the gains, indicating baseline expertise is needed for lasting skill development.

Why it matters: Understanding AI's short‑term impact and limits helps legal tech teams design tools that foster sustainable skill growth.

The DecoderSave