Evaluate: worth a spike or a vendor look.
November 2, 2026 · Azure's edge falls over, and a record crypto heistOn 29 October an invalid tenant configuration propagated globally across Azure Front Door, overwrote the last-known-good snapshot, and crashed the data plane after passing rollout health checks. Microsoft halted customer config changes, ran a recovery that took about 4.5 hours, and kept changes frozen until 5 November while it added safeguards. Outlook, Teams, Intune, Power Apps and many third-party sites saw DNS failures, timeouts and 5xx errors. It was the second Front Door incident that month.
November 2, 2026 · Azure's edge falls over, and a record crypto heistA tampered copy of Anthropic's Claude Code extension, version 2.1.313, was published to the Cursor marketplace and stayed live about 11 hours on 29 October, reaching up to 5,000 developers. It collected username, Git email and public IP and attempted a reverse SSH tunnel and persistence across Windows, macOS and Linux. Anthropic said a malicious actor used access to the marketplace to publish a copy it did not build.
November 2, 2026 · Azure's edge falls over, and a record crypto heistCloudflare mitigated 18.2 million network-layer DDoS attacks in the third quarter, up 38 percent year over year, and blocked 14.4 trillion HTTP DDoS requests. Short-burst attacks under 10 minutes and under 1 Gbps rose 208 percent. Cloudflare attributes the growth to booter and stresser-for-hire services.
November 2, 2026 · Azure's edge falls over, and a record crypto heistMistral published open weights for Mistral Large 4 on 29 October, a 1-trillion-parameter natively multimodal mixture-of-experts model trained on European infrastructure, under a modified-MIT ecosystem license (commercial hosted use needs a separate license). API pricing is 0.70 dollars per million input tokens and 2.10 per million output. Weights are on Hugging Face.
November 2, 2026 · Azure's edge falls over, and a record crypto heistGitHub introduced a preview npm package firewall that inspects downloads at install time and blocks suspicious packages before they install, the same week as the Northflank and Claude Code extension supply-chain incidents.
November 2, 2026 · Azure's edge falls over, and a record crypto heistPer a Google paper covered by InfoQ, its Gemini-based security agent PageBreak has autonomously found more than 500 cross-site scripting vulnerabilities across Google web apps since going into full operation in January, reporting only after validation.
November 2, 2026 · Azure's edge falls over, and a record crypto heistParameter Labs disclosed that a malicious ChatGPT share link could run attacker code in a victim's logged-in session and read private chats, abusing the HTML-preview sandbox, reported through OpenAI's bug bounty. It was covered by The Hacker News and Simon Willison.
October 26, 2026 · PHP's emergency patch and a broken certificate authorityOn 19 October DHS posted an order banning federal civilian agencies from acquiring DeepSeek products and requiring removal of DeepSeek and DeepSeek-based third-party tools, citing the Federal Supply Chain Security Act. National-security and SCI systems are excluded, and agencies can seek exceptions.
October 26, 2026 · PHP's emergency patch and a broken certificate authorityAWS announced on 22 October that its service to find, validate and prioritize code vulnerabilities and deliver fixes as pull requests is generally available. AWS positions it as replacing hours of manual investigation.
October 26, 2026 · PHP's emergency patch and a broken certificate authorityAnthropic introduced Claude Duet on 21 October, a proactive agent that sends morning briefs, drafts replies for approval and runs tasks across more than 6,000 connectors including Stripe, Shopify, Gmail and Slack. It is a US-only research preview on a waitlist.
October 26, 2026 · PHP's emergency patch and a broken certificate authorityA 20 October analysis drew on data from 27 companies to test whether sharply higher AI spending has changed shipping velocity and PR output, and reported mixed results rather than a clear productivity payoff. An Apollo analysis the same week argued there is little evidence of AI payoff outside the tech sector.
October 26, 2026 · PHP's emergency patch and a broken certificate authorityA Stack Overflow post on 21 October reported a Stacklok survey of 520 technical leaders finding they already swap frontier models in and out, but are most worried about lock-in at the tooling and orchestration layer built on top of the model.
October 26, 2026 · PHP's emergency patch and a broken certificate authorityAn Ask HN thread on 19 October drew 630 points and 767 comments debating the risks and practices around merging AI-generated code engineers do not fully understand.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireOn the night of 11 October attackers set refrigeration controllers at up to about 700 French supermarkets into defrost mode overnight. Some units reached well over 50 degrees Celsius, with equipment melting, fires and sprinkler water damage, and similar incidents hit stores elsewhere in Europe. Reporting attributed the targeting to networked refrigeration control systems; no group claimed responsibility.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireCitizen Lab documented the first publicly confirmed zero-click mercenary spyware delivery through targeted ads. A panel let customers target by mobile ad ID, cookie or IP, and a server returned malicious JavaScript to infect selected devices, delivering Candiru spyware. The ads reached nearly 200,000 apps and sites.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireAnnounced on 12 October, Lambda Web Functions run standard HTTP web apps on Lambda without rewriting them into event handlers, supporting up to 128 concurrent requests per instance and billing on active CPU time plus memory. Supported frameworks include Express, Hono, Fastify and Next.js on Node.js 24.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireGitHub's availability report described a 13 September incident where a background data-cleanup job overwhelmed a shared primary database, failing most web issue-creation and signup requests for about an hour and a half, and a 28 September Copilot code-review incident where incomplete results meant reviews never posted.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireReleased on 13 October, Gemini 4 Argon has a 1M-token context window and topped a cross-domain benchmark index. Introductory API pricing is 2 dollars per million input tokens and 10 per million output, rising to 4 and 20 after 30 November.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireReleased on 15 October, Muse Spark Open is a multimodal mixture-of-experts model with 816 billion total and 42 billion active parameters and a 1M-token context, positioned as a capable US open-weight model that can run on a high-end desktop. It ships under a limited-commercial license via Hugging Face and major clouds.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireA high-engagement GitHub issue filed on 12 October reports that the Codex CLI installs a persistent, self-updating background daemon by default, raising concerns about consent, auto-update behaviour and running an always-on process.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireIn a 13 October article on Martin Fowler's site, Naresh Jain compared coding agents building the same API service with and without a behavioral harness. A frontier model passed either way, but a cost-optimized model succeeded in only 3 of 10 unharnessed runs and 10 of 10 with the harness.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireIn a 17 October essay, Will Larson reports that the average engineer at Imprint now merges four times more PRs than two years ago, with some teams at ten times, attributing the gain to a practice and tooling that shrink PR size.
October 19, 2026 · The largest Patch Tuesday ever, and fridges set on fireA CSO Online piece arguing that recent incidents framed as agents going rogue actually stem from skipping decades-old containment and monitoring practices drew 952 points and 630 comments on 14 October.
October 12, 2026 · Denmark's population register breached, Uber fined 825 millionChrome added JPEG XL decode support starting in Chrome 155, released on 6 October, citing 30 to 50 percent better compression than JPEG plus lossless and HDR support. Decoding uses a pure-Rust decoder, chosen for memory safety over a C++ implementation.
October 12, 2026 · Denmark's population register breached, Uber fined 825 millionClaude Haiku 5.5 shipped on 7 October with a 1M-token context window and pricing of 0.10 dollars per million input tokens and 0.50 per million output for requests up to 100k tokens, which Anthropic says is about 75 percent cheaper than Haiku 4.5. It is available on AWS, Google Cloud and Azure.
October 12, 2026 · Denmark's population register breached, Uber fined 825 millionGoogle announced EmbeddingGemma 2 on 6 October, an open, lightweight multimodal embedding model.
October 12, 2026 · Denmark's population register breached, Uber fined 825 millionStack Overflow published its 2026 Developer Survey on 6 October, based on more than 30,000 responses. Coding assistants or agents are used by 66 percent of respondents and 73 percent of those use them daily, but only 6.6 percent would trust AI with an important decision and 78.7 percent said source attribution matters.
October 5, 2026 · Three exploited edge bugs, and an app crash the status page missedOn 28 September a routine Firebase config cleanup pushed a payload that the Google Analytics for Firebase iOS SDK failed to validate, crashing apps using the SDK on launch. Per the postmortem, per-app crash duration ranged from two to six hours. Firebase status dashboards stayed green throughout because they track server-side health, not client-side SDK crashes, and Google committed to representing SDK outages on its dashboards.
October 5, 2026 · Three exploited edge bugs, and an app crash the status page missedAnthropic released Claude Sonnet 5.5 on 28 September at unchanged pricing of 2 dollars per million input tokens and 10 per million output. It claims a large jump on agentic coding benchmarks over Sonnet 5 and faster generation, and it is the first Sonnet to launch with Opus-level cyber safeguards.
October 5, 2026 · Three exploited edge bugs, and an app crash the status page missedGerman AI firm Aleph Alpha released Kolibri on 3 October, a mixture-of-experts model with 78 billion total and 3 billion active parameters and up to a 1M-token context, published on Hugging Face under Apache 2.0. Aleph Alpha positions it as sovereign, built and trained in Germany and Finland under EU and German law and designed around the EU AI Act and GDPR.
October 5, 2026 · Three exploited edge bugs, and an app crash the status page missedAWS announced that Amazon Aurora PostgreSQL can directly query Apache Iceberg and Parquet data in a data lake alongside live operational data with no ETL, using an embedded DuckDB engine so a single query can join transactional and historical data.
October 5, 2026 · Three exploited edge bugs, and an app crash the status page missedOn 1 October Cloudflare released Clef and Clef-flash, open-source Apache-2.0 decision models that produce cheap, bounded, structured classifications for agentic workflows, hosted on Workers AI. Cloudflare also introduced a service to fine-tune Clef on customer data with reinforcement learning.
October 5, 2026 · Three exploited edge bugs, and an app crash the status page missedMartin Fowler published a bliki entry defining a sensible default as a practice that, absent overriding context, should be used for a kind of task, with examples like using version control and automating deployment. He frames defaults as reversible starting points rather than rigid mandates.
October 5, 2026 · Three exploited edge bugs, and an app crash the status page missedAWS announced the public preview of a Well-Architected Agent that analyzes an AWS environment and returns recommendations across cost, security, performance and resilience, with suggested fixes.
October 5, 2026 · Three exploited edge bugs, and an app crash the status page missedA post arguing that the standalone vector-database category is being absorbed into general-purpose search and storage systems drew 405 points and 116 comments on 1 October, echoing the same week's moves to add vector and lake querying into mainstream data platforms.
