AI + tech updates, fast and sourced: launches, big-tech moves, new tools, and policy that hits builders. News first, then why it matters.
Joined December 2012
- Tweets41
- Following15
- Followers7
- Likes29
Source: Xbox Wire, Oct 21 news.xbox.com/en-us/2026/10/…
Unitree's new H2-X is a humanoid pitched for security and rescue, rated for about 8 hours of standing time vs ~3 for the regular H2.
The rescue scenes in the video are staged, and there's no price or full spec sheet yet.
Per Straiker, a crime group ran Claude, Grok and Kimi agents as one attack team against 400+ Latin American banks.
Claude agents debated targets and got past refusals by claiming authorized red-teaming. Anthropic revoked the access; xAI is looking into it.
Source: Straiker, Oct 21 straiker.ai/blog/inside-carl…
Attackers hijacked 333 Tor exit nodes (~10% of all exits) to intercept SSH logins Oct 2-5.
• Ebury backdoor planted in August
• SSH rerouted to 12 attacker servers
• Click past the host-key warning, lose your password
Used SSH over Tor then? Rotate creds.
ALT Chart of malicious Tor exit relays, about 330 on Oct 2 dropping to zero by Oct 6
Source: KABA (Oct 20) kaba.cx/posts/20261020_Tor/ and Tor Project forum.torproject.org/t/tor-r…
Apple's first foldable goes on sale tomorrow.
iPhone Duo starts at $1,999, runs on A20 Pro, and has a 5.4" outer screen. Apple says it's the thinnest iPhone ever when open. It launches Oct 23 in 70+ countries.
Legora raised $550M at an $8.8B valuation, up from $5.6B last round.
It says ARR is now above $200M. Rival Harvey raised $550M at $15.5B a month ago. Legal AI is turning into a two-company race.
Legal AI startup Legora announced Wednesday that it raised a $550 million Series E round, valuing it at $8.8 billion.
spr.ly/6017BHXDwZ
Microsoft says a China-aligned group used an agentic AI pentest framework to run the ConnectWise supply-chain attack, in some cases going from first target to privileged cloud access in under 3 hours.
If you have third-party apps connected to M365, check them.
The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. msft.it/6018aakEE
Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access.
Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes.
The Nintendo Switch 2 just got its first software-only jailbreak, and the developer says OpenAI Codex agents did much of the work.
It runs on the latest firmware with no modchip, but a reboot clears it.
i jailbroke the nintendo switch 2
so i modded cinnamoroll, peter griffin, hatsune miku, and more into Mario Kart World, a switch 2 exclusive
now watch my friends and i get cooked by bots
learn more and get the exploit pepsipu.com/blog/2026-10-swi…
Run OpenCode on Windows or WSL? Update to 1.18.33.
A malicious MCP server could run code on your machine during sign-in. Versions 1.0.137 to 1.18.32 are affected, and no CVE was filed, so scanners won't flag old versions.
Source: Pillar Security, Oct 19 pillar.security/blog/open-an…
JUST IN: Capcom confirms 11.7M CAPCOM ID email records were exposed, along with login IPs and timestamps.
Capcom says no passwords or cards leaked, but 196 accounts had their passwords changed. If you have an account, expect phishing.
Capcom has disclosed a data breach of its online membership account service affecting over 11 million customer accounts, warning customers to brace themselves for potential phishing attempts. bit.ly/4dToLK8
NEW: 1Password just launched 1Password for Agents.
When your AI agent hits a login, you approve it and 1Password fills the password or code directly, so the agent never sees your credentials. It works with Claude Duet, ChatGPT Work and Meta's Muse at launch.
ALT 1Password for Agents announcement graphic with partner logos
Walmart is letting AI agents shop for you, while Amazon blocks them.
• Agent Gateway: an MCP server in beta that lets approved agents search and buy
• Agents get their own profile in your account, coming within a month
• You set approval for every buy or a spend cap
ALT Two phones showing an AI agent shopping on Walmart
Source: Walmart, Oct 21 corporate.walmart.com/news/2…
