Daily News Digest — 2026-10-29

Today's digest

AI dominated the day across all three sites. Slashdot covered Bank of America warning customers not to hand banking logins to AI agents, an Anthropic engineering manager declaring the coding interview dead, Amazon telling engineers to stop chasing AI token counts, and criticism of Marissa Mayer's AI use. Digg's front page was heavy on AI model news, led by Google's Gemini 4 Carbon release, plus earnings (Alphabet, Samsung), the Fed holding rates, and the Brewers' World Series win.

Security stories led BleepingComputer: a Sony ISP subsidiary breach exposing 2.5 million records, a multinational takedown of the Virtualine bulletproof hosting service, Volt Typhoon's "Silent Train" framework, and scanning for a freshly patched Oracle E-Business Suite flaw. Two stories were covered by more than one site: Apple's first touchscreen MacBook Pro (Slashdot and Digg) and the leak of roughly 41,000 DHS employee records (Slashdot and Digg).

Must-read stories:

• Massive Leak Exposes 41,000 Homeland Security Workers (Slashdot; also on Digg)
• Sony ISP subsidiary data breach exposes 2.5 million customer records (BleepingComputer)
• Apple Announces Its First Touchscreen MacBook Pro (Slashdot; also on Digg)
• Police seize Virtualine bulletproof service tied to ransowmare, cybercrime (BleepingComputer)
• Amazon Finds 'Tokenmaxxing' Lacks Productivity Gains (Slashdot)

Slashdot

Bank of America Kindly Asks That You Don't Share Your Password With Your AI Assistant

Bank of America emailed customers under the subject "Protecting your finances in the AI World," urging them never to share their username and password with another person, an outside service, or an AI tool or agent offering to act on their behalf. A spokesperson confirmed the email is authentic. The bank warned that most account agreements make customers responsible for anyone they give their login to. The advisory was reported by TechCrunch.

Anthropic Engineer Declares the Coding Interview Dead

Felix Rieseberg, an Anthropic engineering manager, says he no longer uses traditional coding interviews because AI outperforms candidates on typical programming challenges. He now reviews resumes and portfolios for prototypes showing "taste, empathy, and principled thinking," but admits he has not settled on a replacement. Others push back: a ZipRecruiter economist cites an October 2026 survey of 1,500 employers finding 62.5 percent of tech companies still require formal skills tests at the application stage, and a Google principal engineer suggests interviewing on how candidates use coding agents.

Massive Leak Exposes 41,000 Homeland Security Workers

A leak reportedly taken from DHS's Okta login system exposed records on more than 41,000 DHS employees and contractors, including roughly 10,000 at ICE. The data includes phone numbers, email and office addresses, reporting relationships, and permission groups tied to undercover work, wiretapping, and surveillance tools. The nonprofit Distributed Denial of Secrets published the archive, called "Icepick," after receiving it from a group calling itself the Department of Peace. Okta said it has "no evidence our data or systems were compromised."

Amazon Puts a Camera In Its Echo Studio So Alexa Can See

Amazon added a camera to its Echo Studio speaker so Alexa can recognize objects, help with tasks, and let owners check on a room remotely. The camera model ships today for $249.99, while the camera-free version remains on sale for $219.99. A dedicated button turns off the microphones and camera, and an indicator shows when images are streamed to the cloud. Some features require Alexa+, which is included with Prime.

Are AI Execs Too Out of Touch To Build For the General Public?

Former Yahoo CEO Marissa Mayer faced criticism after an interview about Dazzle, her new app that learns from your camera roll. She said Dazzle helped write three bullet points describing her 10-year-old daughter as "empathetic, creative, and an animal lover" for a school presentation, which critics called generic. In a later X post she said she was testing the prototype, and she suggested AI could handle tasks like party themes and playdates.

Amazon Finds 'Tokenmaxxing' Lacks Productivity Gains

Amazon told its engineers in updated guidelines published October 27 that heavy AI use does not automatically mean better work. The memo calls metrics such as adoption rates, token consumption, and code changes "deeply flawed" when disconnected from real results, warning they waste resources and can raise compute bills and software complexity. Amazon says it prefers to measure success by long-term outcomes.

Apple Announces Its First Touchscreen MacBook Pro

Apple unveiled its first touchscreen MacBook Pro, reversing a view held for over fifteen years that touchscreens don't suit laptops. It has a tandem OLED touch display, a light-up Apple logo, and M5 Pro or M5 Max chips. Pricing starts at $2,899 for the 14-inch and $3,399 for the 16-inch, with pre-orders open now and deliveries beginning November 6.

EMACS Turns 50

An MIT Technology Review report marks EMACS's 50th anniversary. EMACS, one of the first full-screen text editors, first ran on video terminals at MIT's Artificial Intelligence Laboratory in 1976, and its core concepts were later rewritten for many operating systems. The report credits the software-sharing community around EMACS with helping give rise to the free software movement and GNU/Linux.

FCC Approves Amazon Leo's $11.5 Billion Acquisition of Globalstar

The FCC approved Amazon Leo's $11.5 billion purchase of satellite operator Globalstar, giving the Starlink competitor more infrastructure and spectrum for direct-to-phone satellite connectivity. Globalstar provides the emergency satellite service on compatible iPhones and Apple Watches, and Apple previously held a 20 percent stake. Leo has about 400 satellites in orbit versus Starlink's roughly 11,000.

Google Begins Certifying Registered App Stores For Android

After losing the Epic Games antitrust case, Google is letting alternative app stores apply to its Registered App Stores program for international users. Approved stores get one-click installs and silent background updates but must meet requirements on intellectual property, illegal content, privacy, and security, and pay a $10,000 annual fee. The program launches December 1, works only on the latest Android 17 builds, and does not apply in the U.S.

Astronomers May Have Just Discovered Our Solar System's Sixth Dwarf Planet

Astronomers using the Vera C. Rubin Observatory identified 2026 ED138, an object beyond Neptune that could be a sixth dwarf planet if it proves massive enough to be round. It orbits about 46 times farther from the Sun than Earth and is estimated at 600 to 1,500 kilometers across. Matthew Holman and Kevin Napier of the Harvard & Smithsonian found it with a custom search code, and its orbit tilts about 25 degrees from the solar system's plane.

Digg

Digg's front page links to Digg discussion pages rather than original articles, so these summaries are from the feed excerpt.

Brewers catcher William Contreras named 2026 World Series MVP

MLB credited Contreras with a .381 average and four RBIs in the World Series. (from feed excerpt)

Google Search revenue rises 12% but misses Q3 estimates

Business Insider reports Google's Philipp Schindler described expanding ads in AI Mode and AI Overviews to more queries. Search revenue rose 12% but missed estimates. (from feed excerpt)

Christine Lagarde to leave ECB presidency early on Feb. 7, 2027

CNBC reports the ECB announced Lagarde's departure ahead of the scheduled October 2027 end of her term. (from feed excerpt)

Milwaukee Brewers win first World Series title in franchise history

The Brewers won their first World Series title in franchise history. A fan celebrated with their two children after 42 years of following the team. (from feed excerpt)

Jon Stewart and Ed Zitron discuss AI's finances as guest draws skepticism online

Jon Stewart hosted Ed Zitron to discuss AI's finances, and an X user joked about Stewart having Zitron on as an "AI expert." (from feed excerpt)

Apple announces its first touchscreen MacBook Pro

The redesigned laptop replaces the notch with Dynamic Island and brings back the glowing Apple logo. (from feed excerpt)

David Bruckner reportedly hired to direct 'Smile 3'

Variety reports Nick Antosca will write the screenplay, and franchise creator Parker Finn remains a producer. (from feed excerpt)

NanoGPT Speedrun time reportedly drops from 39.9 to 6.7 seconds

A developer credits retrieval-augmented n-gram hints for the claimed 83.2% cut in time. (from feed excerpt)

Federal Reserve reportedly holds interest rates at 3.75% to 4.00%

Yahoo Finance reports an October 28 hold, and The Kobeissi Letter describes a 10-2 vote with two dissents. (from feed excerpt)

Samsung posts record quarterly operating profit; shares fall in morning trading

Reuters reports the chip division earned nearly all of the 107.4 trillion won operating profit, while investors awaited return-policy details. (from feed excerpt)

Google Releases Gemini 4 Carbon Frontier Model, Reportedly #1 on Artificial Analysis Index with Cybersecurity Focus

A post says the Carbon model scored 88.2% on SEC-bench Pro and is rolling out first to cybersecurity specialists. (from feed excerpt)

Searchable index of leaked DHS-associated records lists 41,191 entries

Reuters reports the records include work contacts and group information that reveal sensitive Homeland Security assignments. (from feed excerpt)

Byte-level H-Net reportedly reaches SmolLM3's six-task average with roughly one-tenth the training tokens

Unlike models with fixed tokenizers, H-Net learns to group raw bytes within the model, according to Cartesia. (from feed excerpt)

Jennifer Lawrence reportedly returns as Katniss in 'The Hunger Games: Sunrise on the Reaping'

On "Call Her Daddy," Lawrence described an emotional reunion with Josh Hutcherson and Woody Harrelson, per Variety. (from feed excerpt)

Particle launches Particle-1, a software-engineering model built for token efficiency

Particle says Particle-1 uses roughly 45% fewer tokens on average than DeepSeek V4.1 Flash across varied tasks. (from feed excerpt)

Rays walk off Brewers in extras, setting up World Series Game 5

Talkin' Baseball said Jacob Misiorowski would pitch Game 5 as Milwaukee tries again to clinch its first title. (from feed excerpt)

Alphabet's Q3 revenue and EPS miss estimates despite 103% cloud growth

Yahoo Finance reports an advertising sales miss as rising capital spending deepened Alphabet's negative free cash flow. (from feed excerpt)

Xbox hardware revenue reportedly headed for another decline next fiscal quarter

Tom Warren reports CFO Amy Hood expects Xbox content and services revenue to rise in the mid-to-high single digits next quarter. (from feed excerpt)

'Dune' and 'Dune: Part Two' reportedly returning to IMAX Nov. 13–20, 2026

ComplexPop reports the screenings will include a sneak peek of 'Dune: Part Three.' (from feed excerpt)

Witchbrook gets Jan. 28, 2027, release date for Switch and Switch 2

Gematsu reports Chucklefish also announced a PS5 version for the planned launch, plus Xbox and PC releases. (from feed excerpt)

BleepingComputer

Note: the BleepingComputer feed was readable only through a fetch tool, and one sponsored post ("Even after PHP2Shell, blast radius matters more than a CVSS score") was left out.

Police seize Virtualine bulletproof service tied to ransowmare, cybercrime

U.S. authorities, with German, Dutch, and U.K. agencies, seized the primary domain of Virtualine, a bulletproof hosting service that operated under aliases such as Secury and Omegatech and had facilitated cybercrime since at least 2022. Dutch police seized dozens of physical servers, taking hundreds of virtual servers offline, and recovered data on more than 3,000 customers. Ransomware groups accounted for about 5% of the provider's financial flows, while a Russian drug marketplace made up roughly 44%.

Discord to let search engines index public server messages

Discord will let search engines index messages from Discoverable Servers, public communities with at least 1,000 members, of which there are about 63,000. Server Web Pages go live November 16, and eligible messages may be indexed starting mid-December. Sharing is on by default except in the EU, UK, Canada, Brazil, Australia, and South Korea, where members must opt in, and users under 18 are excluded.

Sony ISP subsidiary data breach exposes 2.5 million customer records

Sony Network Communications, a Japanese ISP subsidiary, confirmed a breach on October 19, detected four days later, that exposed 2,585,481 customer records, including 2,141,986 So-net entries and 443,495 plala records. Exposed data includes names, phone numbers, email addresses, user IDs, dates of birth, gender, and connection IDs, but no banking or payment card details. A further 54,401 email addresses were exposed along with account passwords, and no misuse had been confirmed as of October 27.

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Black Lotus Labs, Lumen's threat research division, has tracked Volt Typhoon's "Silent Train" framework for three years. It routes attacks through rotating chains of compromised devices, including Intelbras modems overseas and Netgear Orbi devices in the U.S. Volt Typhoon exploited at least four zero-days in edge and management products such as Cisco Catalyst SD-WAN and Versa Director, with most targets in California, Texas, and Hawaii.

Microsoft urges Entra ID admins to migrate users to passkeys

Microsoft told Entra ID admins to move users to phishing-resistant sign-in methods such as passkeys or FIDO2 keys before it retires SMS and voice authentication starting February 1, 2027. The retirement applies to workforce tenants only, not Azure AD B2C or Entra External ID. Admins can find affected users with Microsoft's SMS/Voice Policy Scanner script.

InfraTrust report warns of exploited flaws in critical network infrastructure

InfraTrust's October report found 133 new security advisories across 18 vendors covering 2,813 vulnerabilities between September 18 and October 14. Thirty-seven were rated critical and 58 could be exploited remotely without authentication. Sixteen advisories included flaws in CISA's Known Exploited Vulnerabilities catalog, affecting devices such as Citrix NetScaler, Ivanti Connect Secure, and Fortinet FortiMail, and InfraTrust advises keeping appliance management interfaces off the Internet until patches arrive.

Hackers now scanning systems for recently-patched Oracle flaw

Attackers have begun probing for unpatched systems vulnerable to CVE-2026-101767, a critical Oracle E-Business Suite flaw allowing unauthenticated takeover, fixed on October 20. Defused reported exploratory attacks against its decoys on October 27, though Oracle has not marked the flaw as exploited. Shadowserver tracks over 670 internet-exposed EBS instances, mostly in the U.S.