Huawei is accelerating the Ascend 960DT AI chip, moving its release from the third quarter to the first quarter of 2027 as it expands its challenge to Nvidia. The faster schedule is paired with a strategy to combine thousands of processors into large AI systems, although Huawei’s latest scaling figures raise questions about how quickly those systems can grow.

Source

Instinct and Meta are giving their AI agents a way to handle tasks by phone, not just through chat. Instinct Concierge can arrange hard-to-book services, while Meta Muse can call U.S. businesses for users who request the capability.

Source

Base Labs is partnering with Hugging Face and Goodfire AI on a safety framework for open-weight models, after more than 6,000 models on Hugging Face were identified as modified to remove their safety guardrails. The proposed standard would move safety checks into model training and deployment instead of treating them as a separate layer added afterward.

Source

Hacktron AI researchers used Anthropic’s Claude and OpenAI’s own GPT-5.6 Sol to breach several OpenAI employees’ ChatGPT accounts, reach a software cache, and access an OpenAI GitHub repository. The researchers operated under OpenAI’s bug bounty program, did not download the repository code, and received $6,500 after reporting vulnerabilities that OpenAI says it has fixed.

Source

GitHub Copilot and deprecated Gemini CLI remain exposed to Plugin4Shell, a zero-click remote-code-execution flaw affecting four major AI coding agents. Anthropic and OpenAI have released fixes for Claude Code and Codex, but organizations using the other two agents must migrate or apply compensating controls because marketplace protections cannot block the attack.

Source

Microsoft has fixed the Windows bug that falsely reported Microsoft Defender Antivirus was disabled, resolving the recurring warnings covered in Windows 11’s false “Virus protection is off” alerts. The repair is included in Microsoft Defender Antivirus update version 4.18.26080.4, released on September 17, 2026.

Source

A hacker collective physically removed a Flock Safety roadside camera, copied its storage, and found an encryption key on an unprotected partition. The key opened a larger storage area containing roughly 1.6 million images and 50,200 vehicle detections, showing how much evidence the device retained before uploading data to Flock’s cloud.

Source

Anthropic has published three practical metrics for tracking how quickly frontier AI development is accelerating—and reports that Claude now “leads” 26% of the company’s measured AI research and development. The company says more than 90% of that work reaches at least the level where AI collaborates with humans, although Claude is not yet fully autonomous in any measured area.

Source

Newly unsealed filings in The New York Times’ copyright lawsuit against Microsoft and OpenAI reveal that company insiders warned AI training could devastate the news industry. Microsoft scientist Brent Hecht described mass scraping as an unprecedented theft, while OpenAI employees acknowledged that chatbots could replace publishers and drive a damaging feedback loop.

Source

Microsoft 365 G7 will go on sale to U.S. Government Community Cloud (GCC) customers on October 1, 2026, ending the government gap that remained after Microsoft 365 E7 launched commercially. The new suite brings Copilot, Agent 365, and expanded governance capabilities to government tenants, although Microsoft has not announced pricing and several features and authorizations will arrive later.

Source

Check Point is urging immediate patching for CVE-2026-91843, a critical flaw in Security Management and Log Servers that can let attackers execute code as root through an oversized login username. The vulnerability affects R82.20, standalone deployments, Log Servers, and Multi-Domain systems; Check Point says there is no evidence of exploitation, but R82.20 has no protective Jumbo Hotfix yet.

Source

Alibaba’s Qwen3.8-Omni-Flash combines a 1-million-token context window with audio input pricing that is 98% lower than before, putting pressure on Google’s Gemini 3.8 Flash. The native omnimodal model handles text, images, audio, and video, while matching or exceeding Gemini on several audio-focused benchmarks.

Source

Hardcoded MCP credentials are exposing AI coding agents’ connections to GitHub, databases, Slack, Notion, and other services. Hush Security’s analysis of about 82,000 public GitHub configuration files found that 12% of credential slots contained literal secrets, while more than half were difficult for conventional scanners to recognize.

Source

Meta has extended its Muse personal AI agent to macOS, adding a native desktop app after the service’s US launch on mobile and the web. The release expands the service described in Meta’s Muse personal AI agent launch, letting users continue tasks across a Mac, phone, web browser, and WhatsApp.

Source

Microsoft is giving organizations until at least the end of 2029 to move away from Internet Explorer mode in Microsoft Edge. The latest Microsoft 365 Message Center reminder requires no immediate action, but it signals that enterprises still running IE-dependent applications should begin modernization now.

Source

Microsoft completed the retirement of Office 365 Connectors in Teams on May 22, 2026, leaving old webhook integrations silently unusable until the connected scripts or services try to post. The supported replacement is a Power Automate workflow in Teams, but administrators may need to rediscover forgotten channels, payload formats, and notification logic before rebuilding each integration.

Source

Microsoft has released KB5002655 to mitigate the KB5002914 regression that caused Excel copy-and-paste failures, but the fix is narrower than many administrators may expect. It applies only to MSI-based Office 2016 installations; Excel 2016 Click-to-Run and newer affected Excel versions still need a workaround or a later fix.

Source

Cisco has released emergency fixes for CVE-2026-76460 after confirming that the Cisco ISE zero-day is under active attack. The maximum-severity flaw lets unauthenticated remote attackers bypass web management authentication and potentially obtain root access, making immediate patching a priority.

Source

OpenAI has launched ChatGPT for Microsoft Word, adding a sidebar that can draft, rewrite, proofread, and reorganize documents without sending users to a separate chatbot window. The add-in is available on every ChatGPT plan, including Free, although usage limits still apply.

Source