Fastfetch 2.70.0 changes how disk space is reported and removes configuration options that older setups may rely on. On Windows, it now reports full volume capacity by default for quota-limited volumes. The October 14 release also changes command output capture, removes QuickJS, and adds Android detection features.

Source

Microsoft says October’s Windows updates can disrupt Wi-Fi, Ethernet, and VPN sign-ins that rely on MS-CHAPv2 and NTLMv1-derived credentials. The change affects Windows 11 24H2, 25H2, and 26H2, and Windows Server 2025, when Credential Guard is disabled and the relevant registry setting hasn’t been configured. Microsoft’s temporary workaround restores Audit mode, but reduces protection against legacy authentication.

Source

A 12-week security cohort brought 27 municipalities together to harden Windows Server and Active Directory—nearly twice the 10 to 15 originally expected. The effort points to a key obstacle for small IT teams: known weaknesses can persist not just because of limited budgets, but because one or two administrators struggle to turn long audit reports and competing tasks into sustained action.

Source

Microsoft Graph PowerShell SDK fixes prompted an early update to *Automating Microsoft 365 with PowerShell*. Version 29.2 includes the latest changes, after SDK version 2.41 introduced problems that Microsoft addressed in follow-up releases. The latest SDK release appears to work in Azure Automation with PowerShell versions earlier than 7.6.

Source

ChatGPT’s Chrome extension can now use open tabs to answer questions across pages, while its Work mode can interact with websites to complete tasks. Users can connect tabs by mentioning @chrome in ChatGPT’s web or desktop app, bringing these capabilities into Chrome without switching to a separate AI browser.

Source

The KVM guest-to-host escape Vercel had confirmed while its technical details were unknown is now identified as PwnEscape, CVE-2026-99999. The Linux networking flaw can leak host memory, crash a host or—in researcher-controlled tests—execute code on it. The fix must be applied to the host kernel, not just guest systems.

Source

A scan of 217 million HTTP responses found prompt-injection attempts in headers on 30 websites—part of a broader set of nearly 8,000 sites sending custom messages to AI agents. Most attempts looked like pranks, but eight carried content that could influence an agent if it processed the headers.

Source

Perplexity has open-sourced SPACE, its sandbox for isolating AI agents, after testing nine frontier models in 118 escape attempts. None broke out, the company says, and a network restriction bypass found during testing was fixed and did not recur in follow-up tests. CoreWeave, Akamai, and Crusoe are already deploying the sandbox.

Source

Microsoft is testing Project Odeon, a separate Microsoft Store app that resembles Windows 11 Settings and can read some PC information. The experiment could let Microsoft update Settings components independently and help move Control Panel functions into Settings, but it does not confirm plans to replace the built-in app or release Odeon publicly.

Source

AI developer Theo Browne says AI agents rebuilt Microsoft’s TypeScript compiler, type checker, and language server in Rust in about two weeks, at an estimated API cost of $24,000. The experimental TS_Rust project is claimed to run twice as fast as Microsoft’s Go-based version, though those performance results have not been independently verified.

Source

Microsoft is adding browser-based annotations for sensitivity-labeled PDFs in OneDrive and SharePoint, while preserving their existing security controls. Users with the right permissions will be able to mark up documents without removing labels, encryption, or usage rights. The rollout is scheduled to begin in January 2027.

Source

Microsoft says the KB5127648 Windows 11 security update can prevent users from turning Smart App Control back on if it was already disabled. The setting may appear grayed out on affected Windows 11 24H2-and-later devices, but devices where the feature is already enabled remain protected. There’s no fix yet; Microsoft has provided temporary workarounds.

Source

After October 6, 2026, Microsoft will start turning off the last Azure AD Graph API access that legacy Azure CLI and Azure PowerShell builds still depend on. Releases below Azure CLI 2.37.0 and Az.Resources module builds below 5.1.0 continue to hit the retired graph.windows.net endpoint and can break without warning while Microsoft rolls out a two-month phased shutdown. Supported current builds already target Microsoft Graph and stay unaffected. Here you will learn how to verify tool versions in scripts and automation, how to upgrade, what breaking changes to plan for, and how to handle code that still calls the legacy endpoint directly.

Source

AWS is proposing “Trust in Depth,” a four-layer approach for letting AI agents handle more work without requiring people to approve every action. The framework combines defined permissions, agent identities, runtime controls, and activity records, with automated reasoning to verify rules that can be stated precisely.

Source

GitHub AI Scan adds AI-powered vulnerability detection to pull request reviews, complementing CodeQL with broader language and framework coverage. It is now generally available, adding vulnerability checks for languages and frameworks that CodeQL does not cover. The scans can offer explanations and suggested fixes, but their findings are advisory and cannot block a merge. Using the feature consumes Code Security AI Credits.

Source

Meta has released the weights for Muse Spark Open, an 816-billion-parameter AI model with a 1-million-token context window, built for coding and agentic tasks. Its standout feature: it can run locally across two Apple M5 Ultra Mac Studios using the MLX framework. The model is available through inference providers and under a license with limited commercial terms.

Source

Cloudflare is adding custom code to its secure web gateway, letting organizations run Cloudflare Workers inline with traffic and policy checks. The Forward action is in public beta, while DLP validation functions are available now; Gateway custom functions are expected before the end of 2026. Because Gateway and Workers run on the same edge network, the integration avoids an extra network hop.

Source

NVIDIA Run:ai is a Kubernetes-based platform for scheduling, sharing, and managing GPU resources for AI workloads. It helps organizations coordinate training, inference, and batch jobs across shared GPU infrastructure. NVIDIA made the full Run:ai platform—including its self-hosted control plane—available as open source on October 13, 2026. Organizations can use it in production without a Run subscription, but must supply and operate their own Kubernetes and GPU infrastructure; NVIDIA enterprise support remains a paid option.

Source

Ubuntu 26.10 “Stonking Stingray” is now available, and Myna’s local speech-to-text preview can also be tested on Ubuntu 24.04 LTS and 26.04 LTS. The 26.10 beta introduced Myna as an optional feature; the preview’s availability now extends to earlier releases.

Source