Systemd, the Linux system and service manager, has merged infrastructure for building new components in Rust. The change is expected in systemd 263, currently anticipated in December 2026, but it does not start a rewrite of systemd’s existing C code.

Source

Embedded browsers in five AI coding assistants let hostile pages cross security boundaries, but the most urgent risk remains in Codex and VS Code: as of October 29, neither had a fix, and a developer’s click could expose sensitive files.

Source

OpenAI is rolling out phone texting for ChatGPT Dot, its always-on agent for ongoing tasks. The new US Pro beta lets users reach Dot through iMessage or Android RCS, extending the agent’s original app-based channels. But messages pass through third-party provider Linq and are not end-to-end encrypted.

Source

CISA has added the Linux kernel flaw Fragnesia (CVE-2026-46300) to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch it. The move follows reports that attackers chained it with PHP2Shell to root 25 servers, including three in a government-affiliated environment, as detailed in the reported 25-server campaign.

Source

Enterprise AI adoption is accelerating, but many organizations still struggle to turn pilots into measurable gains. A Gartner survey found that only 13% of CIOs report significant or transformational value from AI, while 71% of organizations expect to deploy AI agents within a year and just 21% have governance capabilities for them.

Source

Oracle is bringing its applications and business data into ChatGPT, while adding OpenAI-powered tools to its own products. The expansion includes a security service for finding and fixing vulnerabilities, plus new tools for building applications. U.S. customers can buy OpenAI services through Oracle Marketplace using eligible Oracle credits.

Source

A study of 200 languages found that some require up to 17 times as many tokens as English in one AI model—potentially raising costs, increasing response times, and shrinking usable context. The burden is not limited to languages with few speakers: Bengali, Urdu, and Punjabi are among the large language communities affected.

Source

Apple’s 14-inch MacBook Pro is a macOS notebook for demanding professional workloads. Its new M6 model brings a 2nm chip, Wi-Fi 7 and Bluetooth 6; Apple says local language-model prompts produce their first token up to 1.3 times faster than on the M5 model. Preorders opened October 28, with sales starting November 6.

Source

Apple’s 24-inch iMac is an all-in-one desktop running macOS, and its latest refresh swaps the M4 for an M6 chip without changing the design. The upgrade brings faster local AI processing and Wi-Fi 7, while 2.5Gb Ethernet costs extra. The iMac starts at $1,499; preorders opened October 28, with availability set for November 6.

Source

Google’s Gemini 4 Carbon is a frontier AI model for complex coding work and cybersecurity defense. Its rollout begins with a limited group of cyber defenders before expanding to trusted partners. Google reports top scores on several security benchmarks, but says the tests were run without safeguards.

Source

Microsoft has put Entra ID Conditional Access policy plans in public preview, giving administrators a way to organize related access rules around shared conditions and exclusions. The plans can reduce duplicated settings, but they run alongside existing policies rather than replacing them.

Source

Cisco Catalyst SD-WAN controllers manage connections between an organization’s sites. Talos says attackers used a critical authentication flaw to plant KeyDrift, malware that can collect encryption key material from controller traffic. Separately, Lumen reports Volt Typhoon exploited the same flaw from late 2025, but has not linked that activity to KeyDrift.

Source

GitHub Copilot Fusion, now generally available, routes coding tasks among AI models instead of requiring developers to pick one. It builds on Copilot’s planned local-and-cloud model routing, previously covered as a coming feature, by adding multi-model orchestration and effort levels for different tasks. In benchmark testing, Fusion Max came close to Claude Code with Opus 5.5 Max while costing about half as much per task.

Source

New Outlook for Windows users hit an attachment-opening bug after an Edge 156 update enabled an unintended configuration. Microsoft has begun rolling out a fix, expected to take about 12 hours; affected users should close and reopen Outlook after it arrives.

Source

Cisco has released fixes for CVE-2026-76418, a zero-day attackers are exploiting to remotely crash Cisco Secure Firewall ASA and FTD devices. The flaw affects reachable SSL VPN services when secondary authentication is configured on a tunnel group; attackers don’t need to log in. Shadowserver is tracking more than 51,000 Cisco ASA SSL VPN devices exposed online, though that count does not show how many remain vulnerable.

Source

Microsoft Authenticator, which handles sign-in approvals and verification codes, will get clearer backup and restore guidance on Android in mid-January 2027. The update builds on Microsoft’s move to shift Android backups to Google One and adds help for using passkeys to sign in across devices.

Source

Cisco has open-sourced Project Quarry, a detection engine that looks for risky behavior across an AI agent’s full session rather than judging tool calls in isolation. The release includes a command-line scanner, a Python SDK, and plugins for Claude Code, Codex, and other MCP-compatible agents. Cisco says Quarry is already used in AI Defense and plans to bring it to DefenseClaw.

Source

Nvidia’s Vera is an 88-core server CPU designed for AI agent workloads, including running tools and processing data between model calls. Oracle has made standalone Vera CPUs generally available on OCI, with an initial deployment of 150,000. Independent tests on a local Vera server—not OCI—recorded more than twice the Stream benchmark memory bandwidth of a dual Intel Xeon 6980P system.

Source

PHP2Shell’s reach extends beyond websites: embedded PHP can leave firewall, VPN, and other appliance management interfaces exposed to remote code execution. CISA has confirmed active exploitation of the flaws, and added them to its Known Exploited Vulnerabilities catalog. Appliance customers often cannot patch PHP themselves; they must wait for vendors to issue updated firmware.

Source