Cloudflare has released its Clef and Clef-flash decision models as open-source Apache 2.0 weights, while offering customers hands-on reinforcement-learning fine-tuning for their own workloads. Both models are hosted on Workers AI; a self-service training and redeployment platform is planned.

Source

ChatGPT Pro 500 brings Astra Ultrafast to ChatGPT Work and Codex for $500 a month—$300 more than Pro 200—as OpenAI prepares to halve the lower tier’s included usage. The change builds on the GPT-6 Astra rollout to paid plans, but the faster mode targets users whose work is slowed by waiting on model responses.

Source

Microsoft reports that government agencies and services accounted for 27% of observed cyber activity in 2026, up from 17% in 2025. Phishing’s share of observed intrusions also rose sharply, from 7% to 23%, while more than half of intrusions using valid accounts led to further credential theft.

Source

ClickFix accounted for 52% of Push’s detections through Q2 2026, with newer lures hiding malicious commands in fake installation pages for tools such as Claude Code and NotebookLM. Microsoft’s 2026 Digital Defense Report also warns that AI agents’ access to enterprise data, tools, and identities is becoming a security concern.

Source

Azure Cosmos DB Shell is now available from Data Explorer in the Azure portal, where it opens already connected to the account you’re viewing. The feature is in preview, but it lets users inspect data and run NoSQL queries without setting up a separate connection.

Source

Anthropic has made Claude for Government generally available to federal and state agencies, moving its FedRAMP High service beyond beta while the Pentagon’s supply-chain-risk designation remains in place. The dispute was covered when an appeals court let the Pentagon blacklist Claude; civilian agencies are now the focus of Anthropic’s government rollout.

Source

Micron expects memory and storage supply to tighten further in 2027 and 2028, with more than 75% of its 2027 output already committed. The outlook extends the squeeze behind the sixfold jump in DDR5 laptop memory prices and Schenker’s laptop price increases.

Source

NetApp and Oracle are bringing ONTAP storage to Oracle Cloud Infrastructure (OCI) as a fully managed native service, giving customers a way to move existing workloads without redesigning applications. The service will integrate with OCI’s data and control planes and is expected to become generally available within the next 12 months.

Source

Windows 11 users can turn off some AI features, but there is no universal switch: Microsoft’s edition-specific policies leave the Settings AI agent without an officially supported off switch on Home or Pro. Enterprise, Education, and IoT Enterprise can disable it through policy, while Pro users can control several other AI features.

Source

Microsoft says most regions affected by an Azure network outage are recovering, but five still show impact as the company investigates a disruption tied to infrastructure servicing. The September 30 incident affected ExpressRoute and VPN gateways, Azure VMware Solution, and other network services across 18 regions.

Source

Citrix NetScaler attacks that previously planted WHIPSHOT and SLAPSHOT footholds are now showing another post-exploitation pattern: attackers create a privileged account, disguise a web shell as a CSS resource, and stage configuration data for theft. The activity exploits CVE-2026-88771, a pre-authentication command-injection flaw with a CVSS score of 9.5, building on the NetScaler foothold used to deploy WHIPSHOT and SLAPSHOT.

Source

VS Code 1.140 is now available, adding experimental multi-folder sessions so chats can work across separate repositories or worktrees without mixing changes. The stable release builds on the Insiders version’s workspace-less remote agent chats with broader agent features and new enterprise controls.

Source

Microsoft 365 for IT Pros’ October 2026 update highlights new, lower-privilege Microsoft Graph permissions for Entra ID groups and clarifies key Microsoft 365 changes. SMS-based MFA remains scheduled to end on February 1, 2027, with a four-month extension for global administrators and external users.

Source

Google is rolling out Gemini 4 Argon to trusted cyber defenders, following Gemini 4’s move into final testing. The model has already uncovered a critical vulnerability in software used by hospitals worldwide; Google plans to give vetted defenders a version without cyber guardrails.

Source

Microsoft has released general-use Windows 11 26H2 ISOs, expanding beyond the Enterprise Evaluation ISOs for 90-day testing. The new images support clean installs, upgrades, and repairs, with direct downloads for AMD64 and Arm64 PCs.

Source

Canonical has opened the upgrade path from Ubuntu 24.04 LTS to 26.04.1 LTS, with offers rolling out through Update Manager. The rollout follows a delay linked to regressions in Rust-based system tools; users who don’t want to wait can run `sudo do-release-upgrade`.

Source

Windows settings backup is now enabled by default on eligible Microsoft Entra-joined and hybrid-joined enterprise devices upgraded to Windows 11 26H2. But restore remains off unless an administrator enables it, so the new default does not automatically recover users’ settings on replacement devices.

Source

Microsoft 365 Copilot’s September update adds Microsoft Purview DLP protections and new controls over Copilot access to Power BI semantic models. The rollout also brings Copilot in SharePoint to general availability and expands features across Microsoft 365 apps.

Source

Researchers say the reasoning-extraction trick OpenAI disrupted still worked through Microsoft Azure, including against GPT-6 Astra. The finding follows OpenAI’s shutdown of a July distillation campaign linked to Moonshot AI—an effort to copy hidden model reasoning.

Source