Top stories
Google Cloud Developer plugin released in Antigravity Marketplace
Google Cloud has released the Google Cloud Developer plugin in the Antigravity Marketplace. This plugin provides Antigravity with skills, safety guardrails, and live documentation grounding for building on Google Cloud. It addresses issues with coding agents using outdated information by offering live documentation access and enforcing least-privilege IAM patterns.
China details plan for crewed lunar landing before 2030
Chinese space officials publicly disclosed a detailed plan for a crewed lunar landing before 2030, involving a series of uncrewed and crewed missions. The plan outlines separate launches for crew and lander, docking in lunar orbit, similar to the Apollo program but without a single powerful rocket like the Saturn V.
Momentic (YC W24) Launches AI Agents for Automated Application Bug Detection
Momentic, a Y Combinator W24 startup, launched a platform that uses AI agents to test applications by simulating user flows and identifying bugs. The system allows developers to define user flows and assertions in plain English YAML, with agents executing these tests and proposing repairs for UI changes or failures.
Circle K reduces incident triage time to under 15 minutes using Amazon Bedrock
Circle K implemented an automated incident triage system using Amazon Bedrock, reducing their mean triage time from 45-60 minutes to under 15 minutes. This system uses an agentic AI architecture to autonomously investigate incidents and provide structured summaries to engineers via Slack, allowing for faster remediation.
JDK 28 Targets New Features, JDK 27 Release Candidate Delayed
Several Java Enhancement Proposals (JEPs) for JDK 28 have advanced, with JEP 539 (Strict Field Initialization), JEP 401 (Value Objects), and JEP 535 (Shenandoah GC: Generational Mode by Default) now targeted for the release. Concurrently, the initial release candidate for JDK 27 has been delayed by two weeks to August 20, 2026, to align with an upcoming Critical Patch Update.
42AI Exits Stealth with $62.5M Seed Funding for Behavioral World Model
Israeli startup 42AI has emerged from stealth with $62.5 million in seed funding to develop a "behavioral world model." This model aims to predict human behavior by identifying underlying psychological tendencies, rather than solely relying on past actions. The company is initially deploying its system with financial brokerages to predict individual trader responses to market volatility.
SpaceX Reduces Grok Bot Usage Limits Due to High Operating Costs
SpaceX CEO Elon Musk confirmed that Grok Bot usage limits were unexpectedly maxed out for some users over the Halloween weekend. Musk stated that the cost of serving Grok Bot was "unsustainably high relative to revenue," leading to these changes. This adjustment impacts users of Grok Bot, which SpaceX recently reported as contributing 52% of its company income.
Raspberry Pi 5 16GB Model Price Increases to $385 Due to Memory Costs
Raspberry Pi has increased the price of its 16GB Raspberry Pi 5 by $80 to $385, and the 16GB Raspberry Pi Compute Module 5 by $40, citing rising memory costs. This marks a significant increase from the original launch prices of these 16GB models, which were $120 and $135 respectively. The price adjustment reflects broader industry trends in memory component pricing and follows previous price hikes on other Raspberry Pi models.
New Data Shows Over 90% of Public Comments on Data Centers Are Negative
A new website, American Sentiment by Prophecy Gov, analyzed 10,202 public comments from 417 local government meetings, revealing that 90.5% of public feedback on data center proposals is negative. This data highlights growing public opposition to new data center construction across 48 US states, with concerns primarily focused on water usage, local quality of life, and transparency.
AT&T Data Breach Exposes 109 Million Customer Call Logs, Highlighting Carrier Data Retention
AT&T experienced a data breach in April 2024, exposing communication logs for 109 million current and former customers, including phone numbers, call/text counts, durations, and location data from 2022 and 2023. This incident underscores the extensive retention of call metadata by mobile carriers, which can reveal sensitive personal information despite not containing call content or Social Security numbers.
Omen AI acquires Aquatic Labs for $16M to enhance real-time data center cooling fluid monitoring
Omen AI acquired Aquatic Labs in a $16 million cash-and-stock deal to combine their real-time water sensing technologies. This acquisition aims to provide a more comprehensive analysis of cooling fluids in data centers, addressing the increasing water consumption and operational challenges associated with AI infrastructure.
Proton to Re-Interview Staff on AI Use, Potentially Affecting Employment
Proton, known for its privacy-focused products, announced it will re-interview employees about their AI usage, with potential implications for continued employment. This initiative follows CEO Andy Yen's push for increased AI integration across the company and into new products.
DarkBlinders Compromises Israeli Individual and Iraqi Kurdish Government Cloud
An Iran-aligned threat actor, DarkBlinders, compromised a high-profile individual in Israel and a government cloud environment in Iraqi Kurdistan between August and October 2026. The group uses spear-phishing to deliver trojanized utilities or direct downloads, leading to the deployment of SHELBYLOADER and SHELBYC2 backdoors.
Northwood Space Raises $375M Series C at $2B Valuation from a16z and DFJ Growth
Northwood Space, a space infrastructure company, secured $375 million in Series C funding, co-led by Andreessen Horowitz and DFJ Growth, bringing its valuation to $2 billion. The company develops antennas and software to improve satellite communication with Earth, and the new capital will support scaling operations, hiring, and fulfilling existing contracts.
Nvidia's Brev Cloud Platform Suffers Security Incident, SSH Keys Potentially Exposed
Nvidia's Brev cloud development platform experienced a security incident between October 4 and October 20, potentially exposing customer SSH keys. Nvidia replaced affected keys and updated customer machines, stating no evidence of improper use was found, but did not detail attacker access methods or whether customer data was accessed. This incident follows a trend of security breaches on AI development platforms in October.
Uber Develops MCP Gateway to Standardize AI Agent Access to 800+ Servers and 5,000+ Tools
Uber has created an MCP Gateway to standardize how its internal AI agents discover and invoke services, addressing fragmentation and inconsistent security across its growing AI agent ecosystem. This platform manages over 800 servers and 5,000 tools, providing a unified layer for discovery, protocol translation, authorization, and execution. The system uses an AutoCrawler for automated tool discovery and integrates with Uber's access control for security.
Google UK Signs Union Access Agreement Following New Employment Rights Legislation
Google UK has signed an agreement with the Prospect union, allowing it to organize among approximately 7,000 workers, excluding DeepMind. This follows new UK employment rights legislation granting unions greater access to workplaces, and a similar agreement between Prospect and Meta.
Hundreds of AI Apps with Hidden Deepfake Features Found on App Store and Google Play
An investigation found over 400 AI apps, linked to a single Chinese organization, that passed Apple and Google app reviews despite containing hidden sexual and violent deepfake generation features. These apps used bait-and-switch tactics to conceal their true functionality, activating explicit content under specific conditions, and were promoted via thousands of ads on Facebook and Instagram. Apple removed 19 apps after being notified, and Meta took action against over 10,000 ad accounts.
OpenAI Expands Presence in Abu Dhabi with New Deals Across Key Sectors
OpenAI has signed agreements in the energy, investment, and government sectors in the United Arab Emirates, including a deal with ADNOC and an initiative to translate government policies into machine-readable form. These collaborations are part of OpenAI's efforts to secure funding from regional investors, with the company currently seeking to raise $20 billion.
Military Explores Commercial 5G Networks for Drone Detection and Defense
NATO conducted experiments in Latvia using existing 5G masts for passive drone detection and tracking, while AT&T and Ericsson demonstrated similar capabilities in the U.S. These initiatives explore repurposing commercial 5G infrastructure to enhance national security and counter drone threats.
NHS Trusts Report Limited Use of Palantir AI Platform Despite Official Claims
Twenty-nine NHS hospital trusts listed by NHS England as "realising benefits" from Palantir's £330m federated data platform (FDP) are not fully utilizing the AI technology, with some reporting it is not live or they are not using its applications. This discrepancy between official claims and actual usage has led to calls for the contract to be axed and an investigation by the Office for Statistics Regulation.
WA Police Trial Facial Recognition, Scanning Over 1 Million Faces and Making 122 Arrests
Western Australia Police concluded a five-month trial of real-time facial recognition technology, scanning 1,380,882 faces across 43 locations. The trial resulted in 122 arrests, engagement with 146 registered sex offenders, and 10 welfare checks, with nine incorrect alerts recorded.
Linux System Call Website and API Updated with Expanded Architecture Support
A website and API providing Linux system call tables has been updated to include data for 27 architectures, up from 11. The update offers detailed historical information on system call additions and removals for each architecture, directly sourced from the Linux kernel.
Ryanair Considers Cost-Cutting Measures Amid Soaring Fuel Costs
Ryanair is evaluating cost-cutting measures, including potential pay freezes, reduced crew numbers, and increased AI use, to mitigate a projected €2 billion rise in jet fuel costs by March 2028. The airline anticipates European short-haul fares will increase significantly due to elevated fuel prices and expiring hedging deals, though this may not fully offset the increased fuel bill.
Shopify Develops Overexposed Scanner for GKE Ingress and Cloud Run Exposure Detection
Shopify introduced Overexposed, an internal scanner that identifies internet-accessible, unauthenticated Kubernetes Ingresses on GKE and Cloud Run services. The scanner was rebuilt to use GCP Cloud Asset Inventory and anonymous HTTP probes, reducing inconclusive verdicts by approximately 80%. This tool helps Shopify identify and manage publicly exposed services more accurately than its previous configuration-file-based approach.
China Implements Interim AI Export Registration, Proposes New Frontier AI Controls
China's Ministry of Commerce and Ministry of Science and Technology issued Announcement No. 48 of 2026, introducing an immediate pre-export registration requirement for certain technologies and proposing to add 23 AI technologies to its export restriction catalogue. These new draft restrictions target frontier model weights, agent architectures, and AI-enabled offensive cyber capabilities, marking China's first controls on advanced AI exports.
South Korea allocates record budget to develop sovereign AI model and semiconductor industry
South Korea announced its largest-ever budget, increasing total spending by 12.8% to 820.9 trillion won for 2027. This includes 21.3 trillion won for semiconductors, physical AI, and AI data centers, nearly doubling the 2026 allocation, and 4.7 trillion won specifically for developing a sovereign AI model. The investment aims to secure a leading position in AI technology and support economic growth driven by semiconductor exports.
AWS European Sovereign Cloud Demonstrates Independent Operation in EU-Only Exercise
AWS conducted an exercise on October 24, 2026, demonstrating that its European Sovereign Cloud can operate without relying on infrastructure outside the European Union. During the exercise, global network backbones and operational data transfer systems were disconnected, with traffic rerouted over the public internet, while customer workloads and data access remained unaffected. This exercise validates the cloud's independence and its commitment to digital sovereignty for EU customers.
Sam Altman Visits South Korea, Meets Samsung and SK Group Executives on AI Partnerships
OpenAI CEO Sam Altman made an unannounced visit to South Korea, meeting with executives from Samsung and SK Group. Discussions focused on AI developments, business opportunities, and potential cooperation on AI chips and data centers, building on existing partnerships under OpenAI's Stargate initiative.
Trigger.dev Reports Security Incident, Customer Environment Variables Exposed
Trigger.dev experienced a security incident where an attacker gained unauthorized access to customer environment variables for a subset of organizations. The exploit has been blocked, and affected account owners have been notified with mitigation steps.
Smart TVs Track Viewing Habits and Personal Data Using Automatic Content Recognition
Smart TVs utilize Automatic Content Recognition (ACR) to monitor user viewing habits across various inputs, collecting data like IP addresses and app usage. This data is then processed and sold to data brokers, contributing to a multi-billion dollar industry that personalizes advertising and raises privacy concerns.
John Deere Demonstrates Self-Repair Service for Tractors Amidst Right-to-Repair Scrutiny
John Deere showcased its Operations Center Pro Service, a self-repair software designed to assist owners in diagnosing and fixing issues on their agricultural machinery. This demonstration comes as the company faces criticism from the right-to-repair movement regarding its historical restrictions on product repairs.
Infostealer Logs Pose Evolving Operational Security Challenge for Organizations
Infostealer logs, containing compromised corporate credentials and session cookies, are increasingly challenging organizational security teams. These logs often originate from unmanaged personal devices, complicating incident response beyond simple password resets. The growing volume of these exposures necessitates advanced strategies for identifying active threats amidst numerous stale credentials.
Mandiant Details BREEZE COMET Threat Actor Targeting Brazilian Financial Services
Mandiant, part of Google Threat Intelligence Group, has identified BREEZE COMET (formerly UNC5669) as a financially motivated threat actor actively targeting Brazilian financial services, retail, and eCommerce organizations since early 2024. This group specializes in manipulating payment systems and banking software to conduct fraudulent transfers and is noted for using generative AI in malware development, potentially increasing the scale and sophistication of future operations.
Public Concern Over AI Growth and Impact Increases, Affecting Industry Perception
Public sentiment towards AI is increasingly negative, with growing concerns about its societal impact and a lack of perceived personal benefits. This shift is creating business challenges for tech companies, moving beyond just public relations issues.
Identity Verification Flaws in Onboarding and Account Recovery Pose Growing Security Risk
Organizations face increasing security risks from vulnerabilities in identity verification during new employee onboarding and account recovery processes, even with strong authentication methods like MFA. Attackers exploit these weaknesses through social engineering to gain unauthorized access, as seen with North Korean IT worker impersonations and groups like Scattered Spider.
Fake Remote Workers Exploit Hiring Processes to Infiltrate Corporate Networks
Security teams face a growing threat from fraudulent remote workers who exploit hiring processes to gain legitimate access to corporate networks. These individuals, sometimes linked to state-sponsored groups like those from North Korea, use various tactics to impersonate legitimate hires and exfiltrate sensitive data or conduct cybercriminal activities. This issue highlights a gap in identity verification during remote hiring, where traditional checks do not confirm the actual user of an account or device.
Git Worktrees Lack Isolation for AI Agents, Creating Security and Infrastructure Challenges
Git worktrees, often used for parallel execution of AI coding agents, do not provide true isolation, allowing agents to manipulate repository state or install malicious hooks outside their designated worktree. This lack of isolation poses security risks and creates bottlenecks in existing runtime infrastructure, as multiple agents generate changes in parallel, overwhelming shared resources like CI queues and staging environments.
Browser Security Gap Widens as Enterprise Work and AI Shift to Web Interfaces
Enterprise work increasingly occurs within web browsers, making them a primary target for cyberattacks. Traditional endpoint and network security architectures are insufficient for protecting browser sessions, especially with the rise of AI-assisted hacking and the use of third-party AI models.
National Grid to build UK's largest substation in Teesside for AI datacentre
National Grid purchased 29.5 hectares of land in Teesside to build Britain's largest electricity substation, which will supply power to a planned AI datacentre. This development aims to provide up to 3.2GW of capacity, enabling the UK to compete for AI infrastructure investments and store sensitive data domestically.