All items

Google has released Gemini 4 Carbon, its latest frontier model, citing significant gains in coding, agentic tasks and cybersecurity. The company says Carbon ranks first on the Artificial Analysis Intelligence Index (v5.0), ahead of Claude Opus 5.5 and GPT-6 Astra. Access is currently limited to a select group of cybersecurity defense companies, with broader expansion planned through its Fairwind Program.

DDoSecrets published "Icepick," an archive of DHS records covering more than 41,000 employees and contractors across DHS and seven component agencies, including ICE and CBP. The records include email addresses, phone numbers, office addresses, and references to internal systems and undercover and surveillance programs. The data was last updated on August 19, 2026, and DDoSecrets says it came from DHS's Okta login system, which Okta denies having been breached.

Evernote ran ChatGPT Ads focused on a single product feature to bring in users who work with AI. In the first month, about 25% of desktop visits from those campaigns created a new account, and new users converted from free trial to paid subscription about 10–20% above Evernote's historical paid-acquisition average.

Adversarial Self-Distillation (ASD) is proposed as a defense against adversarial perturbations that bypass refusals in safety-aligned language models. The method has the model act as its own teacher on clean prompts, distilling refusal behavior to the same model under attack at the prefixes it visits, including compliant openings. ASD achieves lower attack success than state-of-the-art defenses with little loss in multiple-choice accuracy.

Microsoft is ending support for Copilot functionality on all TVs this year, according to a Windows Central report. The news came from an on-screen notification that appeared on a webOS-powered LG TV, not from an official announcement by LG, Samsung, or Microsoft. Copilot access had been announced for LG and Samsung smart TVs at CES 2025.

Unit 42 examines the cyber threats retailers face heading into peak shopping season, from ransomware to AI-driven attacks, and how to defend operations and customer trust. The post cites the 2020 SolarWinds compromise and the 2021 Log4j zero-day, both of which hit during code-freeze periods. It also reports that ransomware operators claimed 565 retail victims as of Sept. 30, 2026, and names Bling Libra (aka ShinyHunters) and Hazy Scorpius (aka CL0P) as data theft actors.

Google announced Gemini 4 Carbon, a frontier model with cybersecurity and long-horizon capabilities. It scores 88.2% on SEC-bench Pro for finding vulnerabilities, 54.8% on ExploitGym for exploitation, and 71.0% on CWE-bench for patching. Access is initially limited to a subset of cyber defenders and trusted partners through the Fairwind Program before broader release.

Google is expanding Chrome's enhanced autofill so that it uses Gemini with Personal Intelligence to suggest information drawn from users' Gmail. The feature can retrieve items such as shipment tracking numbers and travel booking details, which users would otherwise search for in confirmation emails, receipts or shipping updates. It builds on earlier improvements that already drew name, passport number, email and address data from Google Accounts and Google Wallet.

The NIST National Cybersecurity Center of Excellence (NCCoE) will host a webinar on October 28, 2026, about its DevSecOps Practices project. The project works with 14 technology companies to show how to implement NIST Secure Software Development Framework (SSDF) practices in DevSecOps pipelines using commercially available technologies. The webinar covers a project update on Agentic SI within Build 3 and a panel discussion on its role in DevSecOps.

GitHub's Octoverse 2026 report, announced by EVP Jay Parikh at GitHub Universe, puts agentic engineering at the center of platform growth. Merged pull requests tripled in under a year to 220 million per month, and commits more than tripled to 7.38 billion per month, mostly in the second half of the year. The new repository rate doubled to 30.3 million per month.

Meta says it may push the implementation of its new business terms past November 20th after publishers protested over AI training concerns. Communications head Andy Stone said on X that the company does "not plan to make policy changes without a full consultation with industry groups and leaders." The terms were originally due to take effect on October 30th.

Microsoft's Aarti Borkar argues that CISOs face two priorities as agents spread through the enterprise: enabling innovation with identity and data guardrails, and modernizing defense against AI-powered threats. The source says the number of active agents in the Microsoft 365 ecosystem grew 15-fold year over year, and 18-fold in large enterprises, according to the Work Trend Index Annual Report. It advises builders to give agents their own governed identities and to protect the data agents can reach.

Social media feeds are filled with mashup mods of popular video games, such as Skyrim in Minecraft and Halo with Mario as the main character. The source attributes much of this to AI-assisted coding, in which Anthropic's Claude has recently become very good at decompiling video game code, reversing compiled binaries back into editable source.

Simon Willison argues that October 2026 marks an inflection point for vibe coding computer games, as Claude Opus 5.5 shows meaningful gains in 3D modeling, music generation and game design. He reports building four browser-based HTML and JavaScript games in a few weeks, some in a single prompt, and says GPT-6 Astra can build games but does not yet match Opus 5.5's sense of fun.

Token Security argues that after PHP2Shell, a pair of remote code execution flaws in PHP, the incident's severity depends on how much the compromised workload can reach through its service accounts, API keys, cloud roles and tokens. The article notes that exploitation began before disclosure and that remediation lags behind it, with Censys counting 32.5 million internet-facing PHP services on potentially vulnerable versions as of October 27.

Straiker, an agentic security company, was named to the Fortune Cyber 60 list for the third consecutive year, presented by Lightspeed Venture Partners and AWS with Fortune. The list was selected from more than 300 startups, and Straiker's STAR Labs Threat Report Volume I documented over 1,700 successful exploits against live AI agents.

Tenable Research disclosed an authorization bypass in Google Cloud Apigee that lets an attacker with apigee.deployments.create permission in one environment exfiltrate runtime contracts, including proxy source code, policies and configurations, from other environments or Spaces on the same instance. The attacker deploys a custom API proxy that queries the unauthenticated internal Prometheus endpoint apigee-metrics-default-telemetry-app.apigee.svc.cluster.local:9090 to find synchronizer pod IPs, then requests the runtime contract ZIP from the synchronizer on port 8843.