Daily brief · Friday, 30 October 2026
Binance hack, Mistral Large 4 weights
Security & Privacy
Binance says it is investigating a "potential security issue" and has paused withdrawals. Suspicious outflows reached up to $5.8B, and the Hacker News headline puts the theft at $5.6B. Onchain data shows about $3.55B in incoming transfers to one unlabeled wallet, with nearly $900M then moved across other wallets. Tether froze more than 1.5B USDT and Circle froze more than 800M USDC.
Dream researchers found on October 25 artifacts of what appeared to be a Chinese AI-assisted campaign that rooted 25 servers, including systems in a US government-affiliated environment. The attacker chained PHP2Shell with a kernel privilege-escalation exploit against the PAN-OS management web server, which also fronts GlobalProtect. After rooting the firewalls, the attacker went after Active Directory. Palo Alto Networks' Unit 42 verified the tooling and the company is releasing fixed PAN-OS versions.
A hacktivist group called the Department of Peace says it stole DHS personnel data by subverting the department's single sign-on system. The names, phone numbers and addresses of more than 40,000 DHS staff and associates, including people involved in undercover operations, were passed to Distributed Denial of Secrets, which posted them as a database called Icepick. A journalist and activist crimew built a searchable version.
AI
Mistral released the weights of Mistral Large 4 ("Le Chonk"), its 1-trillion-parameter, natively multimodal flagship, after a public preview earlier this month. The company says it ranks as the best open-weight model for coding and has gains in defensive cybersecurity and reasoning efficiency that lower inference costs. It offers three reasoning modes and can be self-hosted.
Google's Gemini 4 Carbon scores 59 on the Artificial Analysis Intelligence Index v5, the top score, with the best result on 4 of the 9 evaluations. On the Coding Agent Index it scores 59 with Antigravity CLI, 3 points behind Claude Code with Claude Opus 5.5 (62). It is rolling out to selected users only, with a 50% launch discount and no confirmed end date.
Big Tech
AWS revenue rose 39% to $45.98B, above the $45.29B estimate, and AWS operating income rose 55% to $17.77B. Amazon spent more than $77B on property and equipment in the quarter, which produced a free cash outflow. Andy Jassy said AWS will be a $1T business but must keep spending heavily first. He also said shopping agents are "still not great, nor more convenient than coming to a retailer directly".
Google Search brought in $63.4B of Alphabet's $128B in the September quarter, or 49.7%. That is the first quarter below half since Alphabet began reporting it separately. Search revenue still grew 12% while Google Cloud grew 103%. Ars Technica reports Google admits AI search makes less money, that negative cash flow grew to $9.06B, and that the stock fell after earnings.
Reddit will move to a logged-in-only experience. CEO Steve Huffman said Google's AI Mode "does not drive traffic", and that October search referrals dropped by more than 1 million on average. Q3 revenue rose 53% to $895M, but daily users of 130.3M came in below estimates, Q4 guidance was below estimates, and the stock fell more than 17% after hours.
Startups & Funding
DoorDash and Instacart announced a definitive agreement at $65.00 per Instacart share, a 26% premium to the October 22 close and about $17B in equity value. At least 75% of the consideration will be cash, with DoorDash stock capped at 25%. Instacart's board approved the deal unanimously.
Thrive Holdings, which is backed by OpenAI, is acquiring home security company ADT in a $15.3B deal. It plans to bring AI to the business.
Developers & Open Source
A write-up says Claude Code sends each background agent's full transcript to its model about every 30 seconds, just to produce a 3-5 word status line in the agents panel. The author says there is no setting to turn it off, and that in OpenTelemetry data agent_summary cost more than the main conversation. A 70-line Bun preload script stops the timer without modifying the binary. It was tested on Claude Code 2.1.257 to 2.1.312.
Policy & Society
The New York Times reports an alleged Chinese spy had a "close relationship" with Nvidia CEO Jensen Huang. Ars Technica, citing a report, says the spy is accused of exploiting Trump ties to Huang to funnel secrets to China, and that Trump ignored intelligence on the spy to protect Nvidia's stock.
Show HN and Launch HN
Launch HN from YC F26, founded by ex-firmware engineers from Neuralink and Tesla. It is a simulation layer to test and validate firmware without hardware.
Runs gpt-transcribe, Azure STT and ElevenLabs Scribe, re-checks clips where they disagree, and has an LLM decide what was said. Also cuts captions for any screen shape.
A small Swift app that closes the macOS "find devices on local networks" popup after a quarter second and leaves a notification that it did so.
Also today
A single malformed message crashes com.android.phone and drops active calls, including emergency calls. A proof of concept is public, with a reported 100% reproduction rate on tested Pixel and Samsung devices.
The settlement resolves a complaint from 36 attorneys general. GM must get express consent before collecting or sharing driving and location data.
CFO David Zinsner said the chips are sold out, and CEO Lip-Bu Tan said demand is outstripping supply.
Q3 bookings fell 12% to $1.7B. Shares dropped more than 16% after hours, following child-safety measures that reduced engagement.
The Information reports Nvidia may provide billions in credit guarantees for debt to build a 460MW data center that Anthropic plans to use.
The president ordered trade talks on foreign-made factory robots and threatened tariffs.
Sandisk announced an 8-for-1 stock split and forecast Q2 revenue above estimates. The stock fell more than 4% after hours.
A third-party provider was involved, which a source says is DebugBear. Polymarket says it will reimburse affected traders.
Read from 83 items posted in the last day on Hacker News, Techmeme, TechCrunch, The Verge, Ars Technica, Lobsters and the YC blog.
Get it every morning
The daily brief at 00:45 UTC, the weekly on Monday. Free, and one click to stop.