Industry news

Heimstaden, a European residential real estate operator, chose OpenAI in June 2025 to apply AI to its property management, including ChatGPT Enterprise and Codex. The company says AI now supports pricing, advertising, listing review and market feedback in its letting process. In the Netherlands, the cost of a virtually staged property image fell from approximately €50 to under €0.10, a reduction of more than 99%.

CrowdStrike announced its intent to acquire Dreadnode, which will bring automated AI security testing to the Falcon platform. Dreadnode runs more than 50 attack techniques, including jailbreaks, prompt injection and agent-specific attacks, against AI systems, models, applications, agents and MCP servers before production, then ranks findings and maps them to OWASP, MITRE ATLAS and NIST AI RMF. Dreadnode will be generally available in Q4 FY27.

Cisco is combining its network telemetry with OpenAI models to correlate security signals and speed up vulnerability patching, investigation and response. Cisco and OpenAI are also exploring the Daybreak Defense Network to help security teams triage exposure faster and enforce controls in Cisco Cloud Control.

CrowdStrike announced that it is bringing its Falcon Guardian protection natively into Anthropic's Claude Cowork, built in partnership with Anthropic. The Falcon sensor runs inside the Cowork virtual machine on macOS and Windows to give runtime visibility and detection of agent process, package and network activity, which is otherwise invisible to the host's endpoint sensor. The integration is available in beta on macOS, with Windows support expected later in November.

CrowdStrike announced advances in AI detection and response (AIDR) at Fal.Con Europe 2026, spanning architecture, coverage and controls for its Falcon Guardian product. The release adds an AI kill switch that cuts off AI model access at AI gateways when agents become dangerous, and general availability of Falcon Complete for Guardian, which extends 24/7 managed detection and response to AI security.

The author sent the October edition of a sponsors-only monthly newsletter, available to sponsors through a link. The issue covers vibe game development, vulnerabilities, LLM releases, and the author's current tools.

Composer 2.11 adds dependency cooldowns, letting PHP developers delay newly published package versions through the config.policy.cooldown setting, which takes waiting periods in hours, days or weeks. The feature is disabled by default, and Composer 2.11 uses Packagist's new published-time field rather than publisher-supplied dates to prevent backdating bypasses.

Endor Labs describes agentic development security as the practice of securing the software development process when AI coding agents generate, select, and ship code on their own. The article covers the tools agents use, the actions they take, and the code and dependencies they produce. It cites Forrester analyst Janet Worthington's April 2026 report naming this shift.

OpenAI has hired former U.S. Army Secretary Dan Driscoll as senior counselor for national security modernization, a newly created role. He will focus on how AI can strengthen U.S. national security and cybersecurity, and on helping U.S. allies adopt advanced AI responsibly.

A trojanized copy of the Claude Code extension was served from Cursor's own extension marketplace for about 11 hours in October 2026, and the incident has no CVE. Ten documented Cursor attacks between August 2025 and October 2026 are listed, and three high severity issues remain unfixed. The source argues that a risk register built only from CVE data misses the attacks that caused confirmed harm.

OpenAI has appointed Jill Hazelbaker as its Chief Corporate Affairs Officer, leading global communications and corporate positioning. She joins from Uber, where she was President and Chief Corporate Affairs Officer, and previously held roles at Snap and Google.

Simon Willison released llm 0.37, his CLI tool and Python library for LLMs, covering about two months of features and fixes. The release adds gpt-6.1-sol and gpt-6.1-terra models, a new llm openai endpoint add command for OpenAI-compatible endpoints, and changes the default model to gpt-6-luna, which costs half the previous default gpt-5.6-luna. It also lets embeddings accept different content types for binary content, needed for models such as Gemini Embedding 2, and it includes fixes from 12 authors, mostly AI-assisted.

Anthropic has updated Claude Code's system prompt so the tool will not re-create existing video games, according to Tom's Hardware. The change follows a user's X post showing two added sentences that permit original games, genre games and games built from the user's own designs and assets, while barring recreations of a specific existing game.

OpenAI announced it will pilot a "Grid Protectors Program" at an upcoming data center in Effingham County, Georgia. The company says the site could free up to 1,000 megawatts of power during extreme weather or emergencies, enough for air conditioners in about 700,000 homes. The announcement comes amid growing local opposition to data centers across the US.

OpenAI is raising rewards in its Security Bug Bounty program and adding report quality, loyalty and priority campaign bonuses for independent researchers. A critical vulnerability in a core product such as ChatGPT, Codex or the API Platform now earns up to $30,000, with exceptional critical findings eligible for up to $172,000 with bonuses. Retroactive payments apply to reports awarded in the 30 days before the announcement.

OpenAI is planning an internal security sprint with Cathedral, whose researchers will use OpenAI's models alongside OpenAI teams to challenge its defenses. The company is also raising Security Bug Bounty rewards, more than quadrupling payouts for critical findings. Its previous sprint dedicated 25% of product engineers to finding and fixing weaknesses, using Codex to reproduce vulnerabilities in isolated environments and prepare patches for review.

Anthropic filed an amended Form S-1 with the SEC, reporting $33.24 billion in revenue for the nine months ended Sept. 30, up roughly 1,200% year over year, and a net loss of $104 billion, mostly from changes in the fair value of convertible notes and derivative liabilities. The filing also discloses purchase commitments and lease agreements of about $895.4 billion, substantially all related to compute and infrastructure.

An MIT Technology Review Insights report finds that agent-generated analytics insights often fail to help businesses. On average, 48% of insights from analytics agents at the surveyed companies led to actions that improved the business, up from 37% a year earlier. The main causes cited are a lack of business context (55%) and fragmented or inaccessible data (45%).

OpenAI built Pando, a new backend for Git repositories, to handle the growing concurrency of its monorepo driven by Codex. Pando coordinates branch updates independently so pushes to unrelated branches run in parallel, and it reuses packfiles across fetches so many clients can be served from caches. In production, Pando cut median push latency by nearly 5x and delivers nearly a petabyte of Git data per day.

SecurityWeek tracked 37 cybersecurity M&A deals announced in October 2026. Notable deals include Absolute Security's acquisition of FirmGuard, Proofpoint's agreed acquisition of Varonis for roughly $6.3 billion in cash, and IonQ's agreed acquisition of Elisity in an all-stock deal worth up to $1.3 billion.