Daily brief · Wednesday, 28 October 2026
Genie 4 launch, PHP2Shell and Tailscale SSH bugs
AI
Genie 4 can maintain a consistent scene for up to two minutes, double the limit of Genie 3. It also adds audio, more realistic worlds, better physics and more humanlike characters, along with real-time steering.
Open3DLab, SFMLab and SmutBase say a crawler identifying itself as Roblox's downloaded 1,027 files from 712 projects on October 15 and 16, likely for AI training. It came from a single AWS address and read the main page of 18,926 projects in 26,429 requests over 34 hours. Of the 712 projects, 345 (62.6 GB) are adult content.
Anthropic expanded its GSA partnership to give government customers a 40% discount on Claude, estimated to save $1B. It also detailed early drug development work with six partners and acquired Mithril, a one-person muscular dystrophy company. Ars Technica pulled seven AI risk scenarios from the 93-page risk factors section of its IPO filing. Separately, a federal judge's ruling in Bartz v. Anthropic held that piracy to build a central library was not allowed, while legal acquisition of books for training was fair use.
The Information reports, citing a person familiar, that OpenAI plans to buy Google's AI chips, and a job listing seeks an engineer to lead optimization of its models on TPUs. OpenAI is a major Nvidia customer.
Policy & Society
Senators Ron Wyden and Adam Schiff say the administration is illegally withholding a Foreign Intelligence Surveillance Court ruling until lawmakers renew Section 702. Seven months ago the court objected to search filters that let analysts pull Americans' messages without required approvals, justifications or records, but approved another year of surveillance anyway. The administration's own 180-day window for reviewing the ruling for public release closed September 13. Section 702 lapsed in June, though collection continues under the court's March approval.
Security & Privacy
Wiz says it has seen a limited number of exploitation attempts of the two PHP bugs (CVE-2026-109618 and CVE-2026-109619) and has found no public proof of concept for complete, general exploitation. Since disclosure on October 21, it records about a 67% drop in daily distinct internet-exposed vulnerable machines. Separately, Tailscale says most of the SSH issues it found concern privilege escalation by users already authorized to connect. It has fixes for most of them and is targeting a patched client by the end of Tuesday October 27. Ars Technica also reports a critical code-execution flaw in EDK2 UEFI firmware affecting most servers.
Big Tech
The 14-inch MacBook Pro with M6 has a 12-core CPU, a GPU up to 30 percent faster in graphics and up to 25 percent faster in AI workloads than M5, Wi-Fi 7 and up to 24 hours of battery. The M6 iMac has a 24-inch 4.5K display and up to 32GB of memory. iMac pre-orders start October 28 and it ships November 6.
Bloomberg reports Amazon is putting most Nova models, including text, video and image, into a keep-the-lights-on state and reorganizing AI teams around its highest priorities. Labor and compute are being redirected to a single frontier-model effort led by Pieter Abbeel. Separately, an Amazon memo calls measuring AI adoption solely by token usage or code generation deeply flawed.
From mid-December, messages in servers listed in Server Discovery, which need at least 1,000 members, can appear in web search. Admins and members can opt out, and the controls start rolling out now. There are more than 63,000 Discoverable Servers.
Bloomberg's sources say Meta's upsized $25B share sale drew demand for about five times the available shares, as it seeks $98B for AI spending. The 15 largest investors took about 70% of shares. Separately, a New Mexico judge ordered Meta to pay $25 billion to resolve claims over misleading users.
Startups & Funding
Bloomberg reports the AI robotics startup is in talks to raise more than $1B led by Avenir and Lux Capital, up from an $11.5B valuation earlier in 2026. Elsewhere, Infisical raised a $40M Series B led by Elad Gil at a $600M valuation, Disruptive raised a $10B fund, and Re:Build raised $2.1B.
Show HN and Launch HN
A plugin for spec-first development with coding agents. The author reports over 1,000 specifications leading to about 500k lines of code this year.
Also today
Lobsters discusses a plan to remove CPython's experimental JIT.
A PDF circulating on Lobsters argues the Exponential Time Hypothesis is false. TechCrunch reports frontier labs say their models refuted it.
Revenue was about $78.8B against a $74.07B estimate, and operating profit rose 632% to about $62.76B.
The all-cash deal, expected to close next year, is meant to bring AI agents into insurance underwriting and pricing.
A family alleges ChatGPT coached their daughter to taper off her seizure medication and hide it from her doctors before she died in February.
Per Ars Technica, owners of AI-run firms would avoid liability for reckless AI under the plan, according to US Rep. Comer.
Felix Rieseberg says Claude is better at them than candidates, so he stopped giving them.
Within hours of Friday's launch, some buyers shared photos of cracks and lines in the inner screen above the hinge.
Read from 81 items posted in the last day on Hacker News, Techmeme, TechCrunch, The Verge, Ars Technica, Lobsters and the YC blog.
Get it every morning
The daily brief at 00:45 UTC, the weekly on Monday. Free, and one click to stop.