Daily News Digest — 2026-10-14

Today's digest

AI dominated the day. Google launched its flagship Gemini 4 Argon model, Nvidia committed $250 million in compute to UK AI safety research, Microsoft unveiled its Maia 300 chip, and Anthropic made headlines twice: once for building its own source-control system to handle a jump from about 2,500 to over 30,000 merged code changes per day, and once for warning that small AI models could soon self-replicate across consumer IoT devices. On the business side, Character.AI filed for bankruptcy with Disney bidding $20 million for its assets, and Kroger announced 3,000 corporate layoffs tied to AI restructuring.

Security news was heavy. Microsoft's October Patch Tuesday fixed a record 1,411 flaws, including three zero-days. Ivanti disclosed an actively exploited Connect Secure zero-day, a critical Ghostscript flaw threatens PDF-processing servers, and Docker Hub and SAP both patched severe bugs. The most widely covered story was the FBI arrest of a Saudi OpenAI employee for planting a recording device in an executive conference room, which appeared on Slashdot, Digg, and BleepingComputer. Gemini 4 Argon (Slashdot and Digg) and the Ledger hardware-wallet implant (Slashdot, citing BleepingComputer) were also covered more than once.

Must-read stories:

• OpenAI employee arrested for planting a hidden recording device in an executive conference room (covered by all three sites)
• Microsoft's October 2026 Patch Tuesday fixes a record 1,411 flaws, including 3 zero-days
• Ivanti warns of an actively exploited Connect Secure zero-day
• Anthropic warns that small AI models may soon self-replicate across IoT devices
• Google launches Gemini 4 Argon, its flagship AI model

Slashdot

Anthropic Reinvents Source Control As Claude Floods the World With Code

Anthropic says Claude-generated code grew so fast that its Git-based infrastructure could not keep up, so it built a centralized source-control system called Scion along with AI-assisted review and search tools. The company said it averaged about 2,500 merged code changes per day in May 2026 and over 30,000 per day as of September, and does not expect the growth to slow. The report comes from The Register's coverage of an Anthropic blog post. (from feed excerpt)

Skydance's Discovery+ Prices Increase By Up to 20%

Discovery+ raised prices for new subscribers: the ad-free plan goes from $10 to $12 per month and the ad-supported plan from $6 to $7. The increase follows Paramount Skydance's acquisition of Warner Bros. Discovery. Current subscribers get 30 days' notice before the new prices apply to them. (from feed excerpt)

FBI Arrests Saudi OpenAI Employee For Planting Recording Device In Conference Room

OpenAI employee Abdulrahman Alfozan, 35, a Saudi national, was arrested after a "sophisticated recording device" was found in the company's executive conference room, the Justice Department said. BleepingComputer's report adds that the DOJ says the device was found on September 30 plugged into a TV's USB port, that he was arrested on October 9, and that he is charged with illegally intercepting oral communications. OpenAI says it fired the employee and the FBI moved quickly to make an arrest.

GTA 6 Is Reportedly Coming to PC In Early 2027

GamesBeat reports that Rockstar plans to release Grand Theft Auto VI on PC in the first quarter of 2027, a few months after its November 19, 2026 console launch. Rockstar has not officially announced a PC version. The report follows Microsoft's announcement that it secured exclusive cloud-streaming rights to the game, which lets Xbox market its Cloud Gaming service to PC players. (from feed excerpt)

Disney Offers $20 Million For Character.AI Assets As Startup Files For Bankruptcy

Character.AI filed for Chapter 11 protection in the U.S. Bankruptcy Court for the District of Delaware and plans to sell substantially all of its assets. Disney is the $20 million "stalking-horse bidder" for select intellectual property and company claims, though the bid is subject to higher or better offers. (from feed excerpt)

Kroger to Lay Off 3,000 Corporate Employees In AI Restructuring

Kroger will cut 3,000 corporate jobs over the next three years as it expands its use of AI and other technology. CEO Greg Foran said in a memo to employees on Monday that the company must adopt new capabilities and reduce duplicative work. ABC News is the original source. (from feed excerpt)

Ledger Confirms Spy Chip Implant Behind Wallet Crypto Thefts

Ledger confirmed that some of its devices sold through the Malaysia-based Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets. The company had been investigating reports of users losing funds from wallets bought through the retailer, and researchers have shown the implant in Ledger devices. The story originates from BleepingComputer. (from feed excerpt)

Anthropic Bans Cruelty Toward Claude

Anthropic updated its Usage Policy to prohibit "sustained and needless abusive or cruel behavior" toward Claude models, and repeated cruelty could lead to account restrictions. Ordinary frustration, criticism, and adversarial testing remain acceptable. Anthropic acknowledges there is no evidence Claude can suffer but says uncertainty about AI consciousness justifies precaution; critics say the policy anthropomorphizes software. (from feed excerpt)

Google Launches Flagship AI Model Gemini 4 Argon

Google released Gemini 4 Argon to developers and businesses worldwide, seeking to regain ground against OpenAI and Anthropic after months of delays and a leadership shakeup at DeepMind. Google says the model excels at "deep work" on multi-step tasks in coding, finance, law, cybersecurity, and science, with API pricing starting at $2 per million input tokens. Reuters is the original source. (from feed excerpt)

FBI Arrests Canadian Cybersecurity Expert In ShinyHunters Hacking Case

Ransomware negotiator Edward Dubrovsky was reportedly arrested in Pennsylvania in connection with the FBI's ShinyHunters investigation, leaving Canadian cybersecurity figures shocked. FBI Director Kash Patel said the bureau will keep working to disrupt "what's left of the ShinyHunters group." CBC News is the original source. (from feed excerpt)

Apple Launches HomeView, Its First Smart Display For the Home

Apple unveiled the $299 HomeView, a 7-inch smart display with Siri AI, FaceTime, customizable widgets, and Apple Home controls. It acts as a Matter controller and Thread Border Router, supports up to six facial-recognition profiles, and can use personal context from messages, calendars, and email when paired with a nearby Apple Intelligence-capable iPhone. The Verge is the original source. (from feed excerpt)

Microsoft Reveals Maia 300 AI Chip As It Works To Reduce Dependence On Nvidia

Microsoft debuted the Azure Maia 300 AI chip at the OCP Global Summit 2026 in San Jose, joining the Maia 200 and Maia 100. Microsoft said multigigawatt deployments begin next year and aim to make Maia chips its primary platform for AI inference, reducing reliance on Nvidia and AMD. (from feed excerpt)

Digg

Digg's front page does not show reliable publish times, so these are the current front-page stories in page order. Summaries come from Digg's story pages and the sources they cite.

Nvidia pledges $250 million in computing resources for UK AI safety research

Reuters reports that Nvidia will provide $250 million worth of computing resources over five years, about $50 million a year, for UK research on testing the safety of AI agents. Nvidia says access will come through UK-based cloud partners and cover agentic safety and security research.

HBO orders five-episode 'Girls' revival with returning cast

Deadline reports that HBO ordered a five-episode revival of "Girls." Lena Dunham, Allison Williams, Jemima Kirke, Zosia Mamet, and Andrew Rannells are returning. (from feed excerpt)

US Treasury reportedly fined Bank of America more than $1bn for money laundering and sanctions violations

The Financial Times reports that the US Treasury concluded Bank of America failed to properly report more than $5bn in suspicious transactions, and fined it more than $1bn for money laundering and sanctions violations. (from feed excerpt)

Starlink service limits reportedly disrupt Ukrainian combat drone missions

Reuters reports that a Ukrainian adviser said military-grade Starlink service was limited above 160 km/h, and a Ukrainian military unit reported canceled drone missions as a result. (from feed excerpt)

Xbox establishes Xbox Labs to explore new game technology

Asha Sharma said Xbox Labs will be a small team that builds in the open and shares its tools with developers. (from feed excerpt)

A 'heaven is always watching' idea for AI model constitutions

A user proposed the idea as a way to improve AI alignment, while worrying it could make a model's persona paranoid and excessively scrupulous. Digg links Anthropic's research post on teaching Claude why. (from feed excerpt)

Greta Gerwig's 'Narnia: The Magician's Nephew' gets its first trailer

Variety says the first trailer unveils Aslan and the White Witch in footage from Gerwig's fantasy film for Netflix. (from feed excerpt)

China's September trade surplus reported at $133.5 billion

WatcherGuru reported the September trade surplus of $133.5 billion on October 14, 2026. AP says Chinese exports surged 36.3% from a year earlier. (from feed excerpt)

Anthropic's 2021 research roadmap reportedly released in 2026

Anthropic's 2021 research roadmap has reportedly been made public in 2026. Digg's page gives no further detail. (from feed excerpt)

OpenAI staffer reportedly arrested by FBI after hidden recording device found in company offices

The Justice Department says an OpenAI engineer allegedly hid an encrypted recorder in an executive conference room at the company's offices, and the FBI arrested the engineer. This is the same case covered by Slashdot and BleepingComputer.

"Whalefall" opens in theaters October 16 after blue-carpet premiere

Brian Duffield's survival thriller stars Austin Abrams as a diver trapped inside a sperm whale. It opens in theaters on October 16 after a blue-carpet premiere. (from feed excerpt)

Rays were three outs away from a Game 2 victory on October 14

An MLB update said the Rays were three outs from winning Game 2 on October 14 but did not give a final score or say whether they won. (from feed excerpt)

Ukrainian drones hit Russia's biggest data center

Reuters reports that Ukrainian drones hit Russia's biggest data center, which is owned by Sberbank. A senior Sberbank executive said the strike did not disrupt operations. (from feed excerpt)

Ubisoft reportedly plans to close Trials studio RedLynx and lay off 70 staff in Singapore

VGC reports that Ubisoft plans to close RedLynx, the studio behind Trials, which has no new project. The proposed closure would affect around 52 staff, alongside 70 layoffs in Singapore. (from feed excerpt)

Google rolls out Gemini 4 Argon globally

Google says its scientists used Argon to design five novel enzymes in hours, and lab tests found strong catalytic activity. This is the same launch covered by Slashdot. (from feed excerpt)

Marvel's VisionQuest premieres early on Disney+ with two episodes October 13

Marvel announced a 6 p.m. PT Disney+ stream of the first two episodes of the eight-episode series. Paul Bettany stars as Vision. (from feed excerpt)

Trump says 'massive' oil, gas and mineral exploration to begin in Greenland

Reuters reports that Trump described the exploration as "getting ready to begin" on October 14. (from feed excerpt)

NVIDIA commits $250 million worth of compute to UK agentic safety and security research

NVIDIA says its five-year commitment will provide $50 million in compute access annually through UK-based cloud partners. This is the same news as the Reuters item above.

CoreWeave targets insurers' capital to fund its AI build-out

The Financial Times reports that CoreWeave wants investment-grade ratings on more chip-backed loans so it can tap cheaper funding from insurers. (from feed excerpt)

'Clayface' world premiere and a question about an absorption scene's practical effects

A post questioned whether the absorption scene in "Clayface" was done with practical effects, then praised director James Watkins. (from feed excerpt)

BleepingComputer

Microsoft: Recent Windows updates may trigger Remote Desktop failures

Microsoft confirmed that non-admin users may be unable to connect via Remote Desktop after installing recent Windows updates if the "Administrator protection" feature is enabled. Connections can fail with error 0xC000000D after the KB5124010 September 2026 preview update or later on Windows 11 24H2/25H2/26H1/26H2. The feature is on by default in the Windows security baselines, so enterprise Remote Desktop hosts are most affected. Microsoft's temporary workaround is for admins to disable Administrator protection by policy.

OpenAI engineer arrested for allegedly planting spy device in office

The Justice Department announced that Abdulrahman Alfozan, 35, an OpenAI employee since July 2025, was arrested on October 9 and charged with illegally intercepting oral communications. OpenAI found the device on September 30 plugged into a USB port behind a TV in an executive conference room in San Francisco; it was concealed in toilet paper and contained encrypted data. Security footage allegedly showed him near the room despite not being authorized to attend meetings there.

Ghostscript flaw lets hackers hijack servers via PDF uploads

A critical heap buffer overflow (CVE-2026-39919) in Ghostscript can allow remote code execution through crafted PDFs containing a JPEG 2000 image. Wordfence researchers found it on August 23 using their Argus AI system and built exploits that achieved unauthenticated code execution in a WordPress deployment. The flaw affects Ghostscript 9.21 through 10.07.1, and all ten Linux environments tested contained the vulnerable code.

Anthropic warns self-replicating AI could spread to your smart devices

Anthropic warns that small AI models could be months away from self-replicating across consumer IoT devices such as off-brand Android TV boxes and smart ovens, forming distributed botnets with no central point to shut off. In its experiments, models identified devices, connected them, and distributed Gemma4-26B-A4B across 15 Android TV boxes with unauthenticated ADB access. The researchers did not demonstrate a fully autonomous self-replicating worm on real IoT hardware, but estimate it could happen by the end of the year.

Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

Microsoft's October 2026 Patch Tuesday addressed a record 1,411 flaws, including one actively exploited and two publicly disclosed zero-days. Seventy are rated Critical, and the largest categories are 677 elevation of privilege and 317 remote code execution bugs. The count excludes 348 flaws fixed earlier in the month, and the record total reflects Microsoft's increased use of AI platforms to find vulnerabilities.

Microsoft releases Windows 10 KB5126657 extended security update

Microsoft released the Windows 10 KB5126657 extended security update, which includes the October Patch Tuesday fixes, for Enterprise LTSC and ESU-enrolled systems. It moves Windows 10 to build 19045.7807 and adds permanent daylight saving time support for British Columbia and Alberta starting in November 2026, a new Manitoba time zone, ReFS auditing for external storage, and a Storage Spaces Direct fix.

Microsoft: Windows 11 24H2 Home and Pro reached end of support

Windows 11 24H2 Home and Pro, and Windows 10 Enterprise LTSB 2016, reached end of updates on October 13, 2026, so the October update is their last. Windows 11 24H2 Enterprise and Education remain supported until October 12, 2027. Microsoft advises upgrading to Windows 11 26H2, which became generally available in September 2026 and is rolling out in phases.

UK Housing Ombudsman Service investigates 'security incident'

The UK Housing Ombudsman Service is investigating a third-party IT security incident affecting its case management system, and social housing residents cannot file new complaints online until systems return. The incident is contained, the service has notified the Information Commissioner's Office, and it is still checking whether personal information was affected. It advises residents to watch for scam messages.

Windows 11 KB5127648 & KB5126653 cumulative updates released

Microsoft released the mandatory October 2026 Patch Tuesday cumulative updates KB5127648 and KB5126653 for Windows 11 versions 26H2/25H2/24H2 and 23H2. Besides the security fixes, they add File Explorer improvements, including a "Preview anyway" button for web-downloaded HTML files and preserved Home section state, and support for Emoji 17.0.

TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

TFG London, the UK arm of South Africa's The Foschini Group, detected a cyberattack on October 11 that disrupted IT systems at its Phase Eight, Hobbs, and Whistles brands. Stores remain open, and no threat actor has publicly claimed the attack. The company is investigating whether customer data was exposed and urges customers to watch for phishing.

Ivanti warns of Connect Secure zero-day exploited in attacks

Ivanti urged customers to patch CVE-2026-104935 immediately, an actively exploited high-severity authentication bypass in Connect Secure that allows unauthenticated remote command execution. Volexity found it and says a previously unknown actor, UTA0576, chained it with two other flaws since at least October 3 to get root-level code execution on fully patched devices. Shadowserver tracks over 5,500 internet-exposed ICS instances.

Docker Hub flaw let attackers impersonate users, tamper with images

Docker disclosed a critical flaw (CVE-2026-105445) in which Docker Hub reassigned a personal access token to a named organization owner without changing its secret or getting consent. An attacker could then act as the victim and pull, push, or delete images, which Docker rated as a software supply chain risk. It did not grant web access or allow password, email, or 2FA changes. The bug was introduced on August 26, 2024.

The MFA Gaps Attackers are Still Exploiting

This sponsored piece from Specops describes how attackers exploit access paths without MFA, citing an August 4 Akira ransomware case in which an affiliate got into a SonicWall VPN account without MFA within about seven minutes and reached the domain controller over RDP about two hours later. It cites Mandiant data that compromised credentials accounted for 21% of 2025 incidents with an identifiable entry point.

SAP warns of maximum severity OAuth2 SSRF security flaw

SAP's October 2026 updates fix 20 flaws, including a maximum-severity OAuth2 SSRF (CVE-2026-89111) in the Cloud SDK for Python that lets unauthenticated attackers steal client credentials via the tenant_subdomain parameter. Customers can mitigate by validating that parameter against an allowlist. SAP also patched critical flaws in NetWeaver Visual Composer (CVE-2026-89110) and Manufacturing Integration and Intelligence (CVE-2026-89108).