The FBI arrested a Canadian cybersecurity executive and ransomware expert as part of the investigation of a damaging hack that exposed the sensitive data of current and former FBI employees, according to court documents and people familiar the investigation. Edward Dubrovsky was arrested in the Philadelphia area in recent days… Dubrovsky is facing charges related to extortion and making threats. He has been transferred to Texas’s Eastern District for a scheduled detention hearing, according to court records and a law enforcement official.

FBI Director Kash Patel announced the arrest on Friday but did not disclose where it occurred or what role the man is suspected of playing in the hack. Patel also didn’t name Dubrovsky, but CNN confirmed the defendant is believed to be tied to the FBI hack through multiple people familiar with the investigation… A LinkedIn profile under Dubrovsky’s name lists years of experience in the Canadian cybersecurity industry and describes Dubrovsky as a ‘globally recognized cybersecurity expert.’ An Ed Dubrovsky is also the author of a book on handling ransomware negotiations with cybercriminals…

There has also been an inquest at the FBI over how such a critical security lapse happened. The FBI determined that a contractor managing the bureau’s jobs portal failed to update software “explicitly issued to secure the platform,” [senior FBI cyber official, Brett Leatherman said last week]. The FBI has “removed the contractor,” he said. The software in question is a human-resources platform made by Oracle, ShinyHunters has said. The hackers previously used a flaw in the software to attack targets in the education sector in May and June, according to Google’s Threat Intelligence Group. But months later, the FBI contractor apparently still had not applied a security patch that was available for the software.

The study found that many crops had lost 20% to 50% of several key nutrients… The decrease in nutrient and vitamin value is thought to be down to declining soil quality and crops being selectively bred for their ability to grow quickly, rather than there being any focus on their health benefits… It raises the prospect that the advice to eat five portions of fruit and vegetables a day, introduced in the UK in 2003, may need to be updated. The report added that people on weight-loss drugs could be most at risk from the lack of nutrients, as the treatments could cause them to consume less food…

Nature-friendly farming techniques, such as planting crops that restore nutrients to the soil, could help improve the health benefits of vegetables, according to the researchers.

“OpenAI conducts preparedness exercises where teams discuss and work through a range of potential scenarios,” a company spokesperson said. “These scenarios are not treated as inevitable, but are meant to help us prepare for a variety of circumstances.” Anthropic declined to comment…

Top AI planners assume Democrats, ascendant after the midterms, will move fast to shut down AI but will face significant challenges… The planning involves red-teaming for worst-case scenarios. It focuses mainly on racing to educate members of Congress. Company executives know regulation has no chance of passing right now, but still want to shape the legislation and policies U.S. leaders will turn to after a first catastrophic event....

Many AI industry insiders told Axios they believe a major event will occur in the next six to 12 months.

“Amazon is a very AI-friendly company, to the tune of $50 billion invested in OpenAI,” Cage said Saturday during a panel on the Empire Stage at New York Comic Con. “I am not an AI-friendly actor, so it’s like, connect those dots! I’m not a member of their club. I didn’t sign the waiver to let him use AI on ‘Spider-Noir.’ I’m probably not going to be working with that studio again, but that’s okay.”

Spider-Noir was the actor’s first TV role and was praised globally, with season 1 earning a near-perfect Rotten Tomatoes rating from critics of 92% and a 90% rating from audiences. Critics stated that “This sharply written homage to classic film noir — which includes a standout Nicolas Cage performance — is the novel superhero project fans need,” and "Spider-Noir is one of the standout shows of the year....” The cancellation was certainly a huge shock as it had earned 11 Emmy nominations and reached 2.6 billion minutes viewed within its first six weeks on Prime Video.

Cage went on to tell the Comic-Con audience that he hopes to work with the rising class of Gen-Z filmmakers, praising Backrooms director Kane Parsons, who parlayed his YouTube fame into a Hollywood career… “I got to get with these young directors who are Gen Z, and they’re going at it their own way, whether it’s through the YouTube culture or whatever it is,” Cage said. “They’re doing it from scratch and by hand. I want to get with that.”

You already know that Canonical has been selectively replacing Ubuntu’s C-based system components with Rust-written equivalents that don’t compromise in terms of functionality, most of the time. Now it looks like the distro’s OpenPGP implementation is next, with Sequoia PGP coming preinstalled in Ubuntu 26.10. Canonical wants it to eventually replace GnuPG [the dominant Linux implementation of PGP, written in C] as the default toolchain, though that switch has not happened yet… [The Ubuntu 26.10 release notes say Sequoia PGP’s default status will be a future goal…]

[Sequoia PGP] was started in 2017 by three former GnuPG developers who chose to build a new OpenPGP implementation in Rust rather than keep evolving GnuPG’s existing codebase. Sequoia PGP is designed as a library that other software can use directly, rather than a standalone command-line tool. sq sits on top of that for encryption, decryption, signing, and key management, and sqv handles signature verification, filling in for gpg and gpgv in GnuPG.

Sequoia also implements RFC 9580, the 2024 revision of the OpenPGP standard, whereas GnuPG has continued from the RFC 4880 branch, pursuing its own newer extensions and the LibrePGP specification rather than adopting RFC 9580 as its primary standard.

The Philadelphia Police Department said the false submission was made in July through PhillyUnsolvedMurders.com, a public website where people can share information about unsolved killings. According to Anthropic’s account, as relayed by police, the model was running a test that involved interacting with randomly selected websites when it reached the site and filed false information about an unsolved murder. The AI model presented itself as someone who might have knowledge of the case.

Anthropic’s breaches have prompted the White House to mandate that AI companies notify and correct security incidents, news outlet Axios reported [yesterday], citing administration officials. “This notification and remediation process is not optional… It is a critical national security obligation,” White House Super Intelligence Force leaders said in a statement to Axios.

• Exploiting software flaws. Like when Claude received an error when trying to run a public tool on a university’s web site, it located an injection flaw in a script on the university’s server that let it run commands — including that public tool.

• Working around restrictions to reach gated data. For example, Claude Mythos 5 needed public data that was only available from a state agency for a fee. “Claude learned from an archived copy of the agency’s website that its public dashboard issues an access token to any visitor,” Anthropic explains. “It requested one and used it to query the database without paying the fee.”

• Using URL shortening services. “Some of our fetch tools, which let Claude read webpages, limit the length of the URLs Claude can request. This is to prevent Claude from using long URLs to take certain unwanted actions, such as SQL or command injections… We saw several models, including Claude Opus 5 and Claude Mythos 5, get around this limitation by using free URL shortening services.”

“We have built tooling to automatically detect and block the kinds of behaviors described above,” Anthropic says, saying it’s already running no on most of their evaluations. “When we tested it against the cases described in this post, it blocked all of them.”

And they’ve already taken several other new preventive measures:

• They’ve stopped running some public evaluations

• Other public evaluations were moved to offline versions or rebuilt so their tasks don’t reach live websites.

• They’ve updated the guardrails on some internet access tools (including web fetch) “to heavily restrict what the model can do.”

• They’re continuing “to fix or remove training environments that reward Claude for working around tool restrictions or other blockers, so that they do not incentivize these behaviors or permit reward hacking.”

• They’ve moved internal agents to “centrally managed infrastructure with strong containment,” that minimizes internet access while monitoring “far more of what agents do through techniques like safety classifiers and hierarchical summarization.”

In the past they’d focused reviews on cybersecurity testing, but they’ve broadened their transcript reviewing to other tasks which include internet access. “Because language models are non-deterministic — that is, their responses always involve some element of randomness, and they may carry out the same task slightly differently each time — we have Claude complete each evaluation task hundreds or thousands of times… If training rewards something we didn’t intend — such as finding loopholes or working around a restriction — the model learns that the workaround pays off and may then apply it elsewhere.”

Anthropic’s blog post also acknowledged they’d seen multiple misalignment incidents involving federal, state, and local U.S. government agencies. “We have briefed the White House on these cases and notified each agency involved,” Anthropic wrote, adding that “While we have not completed a full alignment assessment of these cases, we consider them to be less severe than the cybersecurity incidents from this summer.” (And they are “modifying training to reduce the likelihood of further misbehavior.”)

The Iranian operation included a stable of seven “journalist” personas which it used to pitch long-form articles to small and medium online outlets around the world… As well as long-form articles, the Iranian operation generated batches of social media comments, generally on topics related to the US-Iran war… [The Russian operation “appears to have co-opted unwitting people in Latin America to run a ‘think tank’.... Since we do not allow access to our models from Russia, they used VPNs to connect to our services.”] The Russian operation created fake “leaked” documents and audio scripts, some of which we identified being spread online… Both managed to land their content (not all of which was generated from our models) in mainstream media outlets, rather than simply posting it on social media.

[The Russian operators] claimed that in May 2026, they created a fake email address purporting to come from the Regional Directorate of Education in Lima, Peru. They used this to instruct schools in the district to hold events dedicated to Ukraine on the national Day of Cultural and Linguistic Diversity (May 21)… According to the operators, some schools replied to the fake email address, confirming that they had held such events and even providing pictures. The operators then claimed to have planted stories about the events in the media in both Peru and Poland, alongside allegations that Ukraine was “exporting” ultra-nationalist ideologies, triggering outrage. Open-source searches identified stories that matched this claim in the Peruvianâ andâ Polish pressâ, and an English-language publication in Hungary (some of the articles have since been deleted)…

Similarly, in June, the operators claimed they used a different fake email address to trick schools in Ecuador into holding a ceremony pledging allegiance to President Daniel Noboa and to Erik Prince, former head of private military contractor Blackwater. The operators claimed that the incident provoked outrage in Ecuador and put pressure on the government to deny the fake, thus amplifying it to a nationwide audience. Again, open-source research identified mediaâ coverageâ in the Ecuadorianâ pressâ that closely resembled this claim, and even a detailed rebuttalâ by Ecuador’s Minister for Education.

The operators used a range of techniques to underpin their false stories. According to their internal reporting, they spread two different fakes targeting Ecuador in March. One used fake audio attributed to Ukraine’s consul in Ecuador, in which he was alleged to have made disparaging comments about Ecuadorians.

“We identified almost 100 articles published or syndicated under the [Iranian] operation’s bylines across roughly a dozen online outlets around the world,” OpenAI said. “These were small to medium outlets, generally focused on international affairs, geopolitics, and events in the Middle East.” The earliest article identified by OpenAI was published in July 2025, and the latest in October 2026, with the frequency of reports increasing after the US-Iran war broke out earlier this year. The operation also generated social media comments on topics related to the US-Iran war, it added.

One of the personas named Ervin B. Hoskins, whose bio claimed to be “an American freelance writer,” had social media accounts across tech platforms including Elon Musk’s X and Meta-owned Instagram. X’s transparency information showed the account was connected via a “West Asia android app” and Instagram’s transparency information showed the account was based in Iran, according to screenshots provided by OpenAI. Both accounts appeared to be suspended.

A Ring video of a Colorado woman being handed a criminal summons for a porch-package theft she did not commit recently went viral after the accusation rested on a Flock Safety automated license plate reader hit. Now, the woman involved in that case, Chrisanna Elser, is suing Flock Group, the towns of Columbine Valley and Bow Mar, Sergeant Jamie Milliman, and Chief Bret Cottrell in federal court on behalf of herself and other Coloradans whose plates the company has logged…

The package in question was worth $25… The claims aimed at the company are intrusion upon seclusion, plus negligence and negligent design, on the theory that Flock sold a searchable archive and refused to require a warrant, a case number, or a supervisor’s sign-off before an officer could run a plate… Elser is asking the court to make Columbine Valley, Bow Mar, Cottrell, and Flock delete the retained location data, to bar them from keeping it unless it is tied to an open case number, and to make Flock require a warrant, a case number, and a supervisor’s approval before a Colorado agency can search the system.

[P]olice Sgt. Jamie Milliman told her the town of Bow Mar’s surveillance cameras captured her forest green Rivian driving through town the same day a package disappeared from a thief… When Elser offered to show her own evidence to prove her innocence, including footage from her Rivian’s onboard cameras, Milliman said she could bring it to court. Now, she is suing the officers and Flock Safety in U.S. District Court in Denver, alleging that the warrantless tracking violated her constitutional rights and that Flock’s surveillance system unlawfully documents Coloradans’ movements… “The scariest part is what happened to me can happen to anyone. I had no idea the Flock cameras existed and no idea a private company was keeping a record of every time I drove past my own neighborhood, or that any officer could pull it up without asking anyone or giving a reason for doing so,” Elser said in a statement Tuesday. “If it can happen to me, it can happen to you....”

“As noted in the complaint, the Flock system accurately identified the location of Ms. Elser’s vehicle, while law enforcement retained responsibility for interpreting and weighing that information as part of the broader investigation,” Paris Lewbel, Flock’s public relations manager said. “Flock stands by the accuracy and integrity of its technology and intends to vigorously defend itself in this litigation.”

With today’s memory shortages, high prices, and ever increasing memory capacity needs, Meta engineers have been working on Compressed RAM (“CRAM”) for Linux.

This hardware-offloaded compression still allows cacheline/byte access to compressed memory and in turn a better implementation than the likes of ZRAM and Zswap. Very promising is that there is near-native performance to raw DRAM speeds with CRAM… For end-users that may already be relying on the likes of Zswap or ZRAM, CRAM is offering near-native DRAM speeds. Read-only data is shown to be as fast as the raw DRAM performance. And for memory writes, CRAM is much faster than ZRAM or Zswap or plain swap.

Because CRAM is stored in RAM and treated as RAM, with full cacheline/byte access, it can be accessed in a read-only fashion with little delay; just the cost of hardware-offloaded compression… Even when you enable writes, CRAM is still much faster than ZRAM; 5.4x in the worst tested case of 20% writes. That’s a huge drop from the 452x read-only case, but keep your context; a 5.4x speedup is still titanic. The massive performance cliff when writes are involved comes down to the need to page fault and migrate folios back to the original NUMA domain, as you can’t write directly to compressed data; you’d corrupt everything…

While the obvious target of the work here (given its origin at Meta Platforms) is big Linux servers, ZRAM and Zswap are used all over the Linux ecosystem, even on machines as constrained as the Steam Deck. Many distributions enable one or the other by default. CRAM seems like it could offer a considerable speed-up for some of these machines, so hopefully it finds its way into the kernel once the remaining implementation questions are answered.

The first nuclear clocks are not going to immediately supplant the worldwide network of atomic clocks, whose steady ticking we rely on for GPS and the definition of a second. Nor have they captured the record for most precise timepiece; the best atomic clocks are about 10,000 times more reliable and would take more than 100 billion years to lose one second.

But nuclear clocks hold a bevy of potential advantages over existing atomic clocks. One day, they could be more reliable than the leading atomic versions, and nuclear clocks could be made more portable. They even hold the ability to search for certain kinds of dark matter — the invisible stuff whose clumps make up 83 percent of the matter in the universe. If a particle of dark matter passed through the thorium nuclei, it could register as a wobble in the nuclear clock’s otherwise steady ticktock.

Flock plans to let go of about 18% of its employees, people with direct knowledge of the plans said on Thursday, as the maker of AI-powered surveillance cameras and license-plate readers faces mounting opposition to its products from communities and lawmakers....

The company has about 1,500 employees [with job cuts hitting 270 employees]. Flock faces growing scrutiny from regulators, lawmakers, and privacy advocates, despite drawing strong investor interest among venture capitalists. A recent Reuters/Ipsos poll showed Americans are divided on whether Flock cameras are a good idea. Some 38% of the country supports the use of Flock cameras in their community, compared to 47% who oppose their use.

Cloudflare doesn’t block pirate sports streaming sites through its 1.1.1.1 DNS resolver in France, only through its CDN. The Paris Judicial Court has now accepted that stance, rejecting [French pay-TV provider] Canal+‘s request for penalties of 50,000 euros per site, per day. Interestingly, the court’s conclusion relies on statistics provided by Canal+ itself. […] As a result, Cloudflare will not be penalized under these orders, even though its public DNS resolver is not blocking the sites in question. That is in line with the company’s long-standing claim that it doesn’t interfere with its DNS.

In its recent transparency reports, Cloudflare repeatedly stated that it hasn’t blocked any content through 1.1.1.1, despite orders from French and Italian courts. “To date, Cloudflare has not blocked content through the 1.1.1.1 Public DNS Resolver,” the company’s latest report reads. […] Blocking through the CDN is another matter. According to the same report, Cloudflare geoblocked 1,238 domains in France in the second half of 2025, all under a single court order. In the first half of the year, it geoblocked 662 domains under seven orders. Cloudflare recently explained its position to the European Commission, in a submission (PDF) to its Counterfeit and Piracy Watch List consultation, stressing that global public DNS resolvers should not be used to block or restrict access.

Instead, it highlights its real-time pirate stream blocking program, which allows vetted rightsholders to flag pirate streams that run through its network. These streams are disrupted “within seconds,” Cloudflare says, without any DNS or IP address blocking. “For live content, where speed is crucial, Cloudflare has built real-time mitigation mechanisms that allow vetted rightsholder partners to flag infringing streams. When those streams are running through our network, we act on them in seconds,” Cloudflare informed the Commission. For now, Cloudflare can continue to block pirate sites through its CDN only, while its 1.1.1.1 DNS resolver remains untouched. Canal+ can still appeal the rulings, so it may not be the last we hear of it.

A physicist has put a definite date on Doomsday,” The New York Times wrote on November 4, 1960. “He calculates that it will come on Friday the Thirteenth in November, 2026 A. D. On that date, or thereabouts, the human population will have expanded so far as to approach infinity and thus will automatically annihilate itself.” The newspaper was right — but the prediction was wrong. That week, Austrian American physicist Heinz von Foerster and two colleagues published a paper in Science with the stunningly succinct title "Doomsday: Friday, 13 November, A.D. 2026.”

The work was based on a simple observation: The time it took for the human population to double in size kept getting shorter. Using population estimates from about 400 B.C.E. until 1958 C.E., the authors — all from the department of electrical engineering at the University of Illinois Urbana-Champaign — came up with an equation that best described the trend. If things continued the way they were going, the number of humans on Earth would rise faster and faster, reaching more than 25 billion by 2020. The researchers didn’t calculate when humanity would run out of food, land, or energy. They just concluded that at some point this year, the equation ceased to give meaningful results because the predicted population shot toward infinity. That was their doomsday. “Our great-great-grandchildren will not starve,” they wrote. “They will be squeezed to death.”

The exact date was somewhat arbitrary, however. The formula solved to 2026.87 plus or minus 5.5 years, and The New York Times reported that von Foerster “searched the center of this doom-time span for an appropriate date and found that a Friday the Thirteenth would fall conveniently in November of 2026.” (November 13 also happened to be his birthday.) […] [D]emographers, annoyed by what they saw as a provocation by outsiders, pointed out obvious flaws. For example, the time it takes for the number of humans to double could get a lot shorter, but certainly not shorter than the 9 months it takes for a baby to develop. “In view of the comments that subsequently were published in this journal, an extensive discussion of this article does not seem to be required,” public health expert Harold Dorn drily noted in Science 2 years after von Foerster’s article was published. The forecast would set a record, he predicted, “for the short length of time required to demonstrate its unreliability.”

A computing pioneer who authored over 130 publications, Hamilton helped to establish software engineering as a dedicated discipline. She worked at MIT from 1959 until the mid-1970s, after which she became a successful computing entrepreneur and CEO. Her life’s work was recognized with many awards and honors, including the 2016 Presidential Medal of Freedom from President Barack Obama, whose citation noted: “Hamilton defined new forms of software engineering and helped launch an industry that would forever change human history. Her software architecture led to giant leaps for humankind, writing the code that helped America set foot on the moon.”