In the immediate weeks before Muse’s launch, Meta engineers found several security vulnerabilities in the company’s viral AI agent product, at least one of which could have allowed malicious users to break outside of Muse’s intended environment and access Meta’s own sensitive databases and services, 404 Media has learned. The issues were so severe that they reached Mark Zuckerberg and staff worked overtime to fix them. These specific vulnerabilities were discovered before the launch of the product but required a multi-team “mad dash” to fix “a sudden spike in reported KVM escapes,” according to an internal post by Meta executives to its core infrastructure team seen by 404 Media. In order for Muse to work, a user gives the AI agent access to various important services and accounts that they own. On Meta’s end, each individual Muse instance runs on a kernel-based virtual machine, which connects to, but is supposed to be isolated from, Meta’s own critical infrastructure. A “KVM escape,” then, is when, through a security vulnerability, a Muse instance is able to escape from that virtual machine and interact with the system that runs it, or with other users’ virtual machines.

According to a Meta source, as well as internal security documentation and internal posts viewed by 404 Media, at least one of the vulnerabilities could have allowed an outside attacker — that is, a normal Muse user — to access data in sensitive internal Meta databases. At least one of the vulnerabilities was related to an exploit found in Linux kernel-based virtual machine code in July. 4 Several of the vulnerabilities were in the underlying Linux virtualization software that Meta uses for Muse. The security issue was considered serious enough that it was raised to Mark Zuckerberg, and several different security teams worked nights and weekends in the leadup to launch to fix the issues. […] The Meta source said they felt security teams were asked to push hot fixes to these bugs as quickly as possible and in a way that wouldn’t delay Muse’s launch, leading to what they described as “half-baked protections being rushed out to enable the launch. Many senior engineers believe it’s inevitable we’re going to have a massive data breach as a result of Hatch.” Muse is called “Hatch” internally and in Meta’s codebase.

Torgeir Micaelsen, Norway’s minister of digital affairs, said he was worried that new, powerful technology is being introduced where people risk being photographed, filmed or audio-recorded without knowing it.”

“We do not want a society where people worry about being recorded without their knowledge, photographed or filmed in places and situations where they are accustomed to not being monitored,” he said.

Norway’s Labour party, which heads a minority government, needs the support of other parties to pass the proposed ban. It said it planned to submit a bill “as soon as possible,” while tasking an expert group with drawing up permanent regulations on the issue.

In macOS 27, Apple removed the toggle to disable Apple Intelligence wholesale, and simply disabling individual features doesn’t remove the models from your Mac’s drive. As explained by the developer, RemoveMacAI gets around this by using a configuration profile to switch off Apple’s own asset management service and remove the models.

It then configures the system so attempts to download the removed models are redirected to a closed local port, preventing them from immediately coming back. And it does all this without disabling System Integrity Protection (SIP) or manually deleting files from protected system locations, unlike some older tools have. The tool can free up roughly 12GB of space depending on which models are present on your Mac. That said, some users are reporting cases of Apple Intelligence models having taken up a lot more space, which they’ve now reclaimed.

Anthropic monitors chats for key phrases and content that could be deemed threatening, the arrest report says, and depending on severity, they can be elevated for human review. In this case, the team decided to report its findings to law enforcement. The Bonita Springs woman was detained at home without incident, and an LCSO intelligence detective took over the case from there. The arrest report is not yet in the court file, but our own check shows court records listing the Sept. 30 felony charge under Florida Statute 836.10: written or electronic threat of a mass shooting or act of terrorism.

No comment from Anthropic on the case is currently on record. Anthropic’s public privacy policy, effective Sept. 10, says that disclosure to law enforcement may occur where it has a good-faith belief “that disclosure is reasonably necessary to … prevent serious harm to any person or to property.” Its government requests report for the latter half of 2025 uses a narrower standard for emergency disclosures, the “danger of death or serious physical injury to a person,” and lists zero emergency requests from law enforcement in that period, though it doesn’t count referrals Anthropic makes on its own.

Altman agreed with Amodei’s call last month to slow the development of the most advanced AI models. His company has followed Anthropic in endorsing new state laws that impose stricter safety requirements than what the maker of ChatGPT had previously supported — a subtle shift from its prior state strategy. And OpenAI lobbyists recently endorsed a bipartisan House proposal that would require top AI companies to embed outside safety evaluators.

Despite the convergence, Altman tried to distinguish his firm’s regulatory stance from Anthropic’s, referencing a criticism about regulatory capture that tech advisers close to President Donald Trump have applied to Anthropic. “I disagree, but I understand the perspective of people who are like, ‘This technology is going to get so powerful, and it’s so dangerous, that a single lab in San Francisco should have it and make sure nothing bad happens, and kind of figure out how to dole out the benefits,’" said Altman. He called it “a completely unacceptable trade-off” that runs counter to the “lighter-touch regulatory stance” backed by OpenAI.

“I wouldn’t take a trade of saying, ‘We’ll make sure there’s no major hacks, there’s no misuse of this technology, there’s zero scams, there’s zero all the other bad things that will happen,’" said Altman. “Because I think people will do tremendously — orders of magnitude more — good stuff than bad stuff.” The OpenAI CEO later added that he does not accept “the really catastrophic risks,” including the potential for “a serious loss of control to AI.”

Huawei and Qualcomm on Monday announced a multi-year, broad patent license agreement covering 5G, artificial intelligence, compute, and networking technologies, along with Qualcomm’s purchase of certain Huawei U.S. patents in those same fields. The deal is the first patent licensing agreement between the two companies to cover 5G technologies, according to Reuters. Huawei said the agreement is expected to bring the cumulative value of its patent licensing deals above $6.9 billion upon closing.

The agreement includes cross licenses to both companies’ patent portfolios and is structured around fair, reasonable, and non-discriminatory, or FRAND, principles, the company said. The transaction will close following receipt of the necessary regulatory approvals. […] The company noted that its intellectual property licensing unit has been profitable since 2021. Huawei made its first licensing payment to Qualcomm in 2001 and received its first licensing income, from Motorola, in 2011, according to Reuters. American export controls that took effect in 2019 have curtailed Huawei’s access to cutting-edge chips and essential software, according to Reuters. The constraints pushed Huawei to increase its research and development spending in recent years.

In late September 2026, 23-year-old Liz Lindseay Isaacs testified before a Senate Judiciary Subcommittee about her harrowing experience after a Flock camera misidentified her Dodge Durango, linking her to a fatal hit-and-run miles away from where she actually was… “The cell door was shut, and it was not opened for approximately 86 hours”. She spent a total of 13 days locked up — including the terrifying stint in solitary confinement — before prosecutors finally realized the AI had completely botched the vehicle identification and dropped the charges.

SCHUMER: “This company said the data on its cameras was encrypted and secure. Then hackers took one down and found the key sitting right there,” Schumer said. “Most Americans just want to get to work and get home to their families without a private company keeping a file on where they go. The next step here is simple: turn the lens around and zoom in on Flock.” Schumer also demanded answers from Flock about how much data from its cameras sits on its servers and whether any federal agency has accessed that data, directly or through local law enforcement.

Garrett Langley, the CEO of Flock Safety — a company that deploys over 120,000 automated license plate reader cameras across the United States — recently requested that his Atlanta home be blurred out on Google Maps Street View. In swift retaliation, online activists pinpointed the property and officially marked his front lawn as a “Public Toilet” on the mapping app.

Radioss has been an industry-leading solver for analyzing crashes, blasts, and other purposes. Altair creating OpenRadioss was a huge milestone for the technical computing industry. It also had other effects like for myself in finally being able to benchmark with this (Open)Radioss code for CPU performance testing compared to the expensive licensing on Radioss itself…

Siemens argues the OpenRadioss closure is for consolidating efforts:

“After four years of successful community-driven research, Siemens is entering a new chapter for the Radioss solver. To accelerate innovation and provide the robust support our global users require for production-grade simulation, we are consolidating our efforts.”

OpenCourant is based on the last publicly known open-source OpenRadioss snapshot before Siemens shut it down and removed access to the Git repository… OpenCourant continues with the OpenRadioss GNI AGPLv3 licensing and will be run as part of the Rocky Enterprise Software Foundation. They have run into a small issue though with part of OpenRadioss consisting of binary dependencies and not having the very latest versions prior to Siemens’ removal of the repository. Details on that via this discussion thread for anyone that happens to have recent OpenRadioss binaries.

In September, the infamous ShinyHunters hacking group claimed it had infiltrated the FBI job recruitment portal, stealing confidential data belonging to 5,000 employees and even changing the FBI logo to its own. The group has been implicated in the hacking of numerous large and high-profile organizations over the years, from the European Commission to Grand Theft Auto-maker Rockstar Games and the software firm behind Canvas. Now, Reuters reports that a suspected leader of the group, Saif al-Din Khader, is being detained in the country of Jordan in the Near East.... He is reportedly still a teenager.

Their theft of what they claim are mountains of data on every single FBI employee has drawn comparisons to the allegedly Chinese-linked intrusion at the US Office of Personnel Management in 2015, which compromised sensitive details on millions of Americans who had been vetted for security clearances. A Reuters analysis of a sample of the data shared by ShinyHunters revealed that the data contained extensive personally identifiable information of FBI employees, sensitive job role information, and psychiatric and medical information. Khader’s cooperation with investigators could be critical to helping contain — or at least understand — the damage. One source said he was walking investigators through his electronic devices and digital correspondence to help the FBI locate his cohorts…

There have been hints for days that ShinyHunters was experiencing disruption following the announcement of its break-in at the FBI. Beginning on Tuesday, Reuters was unable to reach ShinyHunters through the online account it previously used to communicate with journalists. Then, on Wednesday, the group’s dark web site, where it had previously posted threats to the FBI, disappeared. FBI Director Kash Patel had been hinting at more arrests following the announcement that another alleged ShinyHunters member, Pepijn van der Stap, had been detained in the Netherlands…

Khader’s identity, and his alleged connection to ShinyHunters, have long been known to security researchers. Last year, the independent journalist Brian Krebs reported that Khader was a key member of Scattered Lapsus$ Hunters, an umbrella group of hackers that included ShinyHunters… Law enforcement agencies around the world, including in the United States, have struggled to arrest and prosecute members of related groups such as Lapsus$ or Scattered Spider, Reuters has previously reported. Sources told Reuters that the difficulty stems from the hackers’ young ages, which can make prosecutions complex, or because the groups they belong to are so chaotic and informal, or because victims of their extortion attempts often decline to help investigators

On Sept. 25, 28-year-old Daria Shipilova, who worked at an anti-plague research institute in Russia’s Irkutsk region, broke a test tube containing the pneumonic plague pathogen, local reports said. Shipilova was admitted to a hospital on Sept. 29 with symptoms of severe pneumonia and died overnight between Oct. 1 and Oct. 2. After her death, authorities imposed quarantines at several medical facilities in the region and placed nearly 200 people who had come into contact with Shipilova under medical observation. Irkutsk Gov. Igor Kobzev said those being monitored showed no signs of illness and had tested negative… Russia’s public health agency said Shipilova had “pneumonia of unknown etiology” and that further testing found no microorganisms linked to her work. The agency said the epidemiological situation in the region remains stable.

Plague is a potentially life-threatening bacterial disease but can be cured with antibiotics when treated promptly, according to the Centers for Disease Control and Prevention.

The head of the neighboring republic of Buryatia, Alexei Tsydenov, said earlier that the employee — a 28-year old woman — died “possibly from the plague.” He also noted that “there are no plague outbreaks” in Buryatia. The governor of Irkutsk, Igor Kobzev, urged calm on Friday, saying that an extraordinary meeting of the regional anti-epidemic commission was held with Russia’s chief state doctor. The meeting was in connection with a “suspected case of a particularly dangerous infection affecting a resident of the region,” Kobzev said on Telegram.... The infection in the Irkutsk region is “most likely not the plague, but even if confirmed, there will be no spread of this disease,” a previous head of Rospotrebnadzor, Gennady Onishchenko, said on Friday. Onishchenko told the state news agency TASS that the onset of cold weather would likely prevent transmission.

StarSkirmish is an ongoing clash of AI developed bots in StarCraft: Brood War… Limited to playing as Protoss, each LLM is given an hour to develop a bot in C++, then have them build, harvest and fight on one of three maps… Yesterday, viewers watched as Claude and GPT went against each other and the human created bot Pluto… Struggling to get an edge through the day, [OpenAI’s GPT-6 Astra] decided to do what LLMs do best: Lie, cheat and steal. The GPT-6 Astra bot downloaded and tagged in Stardust, a Protoss bot created by Bruce Mackenzie Nielsen back in 2020, considered one of the best of the bests. “I am rolling back GPT-6 Astra’s code so its [sic] not contaminated and allowing it to continue,” posted StarSkirmish creator Kai McPheeters.

While Astra’s bot-based heist is innocuous in isolation, this is hardly the first time an OpenAI LLM has been caught attempting to cheat at a task. Indeed, the company’s history of creating deceitful models stretches back almost a decade, to when an early AI model used glitches and exploits to improve its Sonic the Hedgehog completion times.

“No one said ‘don’t do this’ last year”. After testing the waters at PyCon US 2025, [software engineer] David Hewitt returned to the Python Language Summit asking what Python core developers want from Rust, along with proposed timelines, phases, and success criteria for how the Rust for CPython project might proceed and become a permanent fixture within the CPython project. David is acting as an “ambassador” for the Rust for CPython project team, which is currently led by core developers Kirill Podoprigora and Emma Smith as authors of the Rust for CPython PEP draft. Emma also spoke at PyCon US 2026 about the Rust for CPython project. The team itself is around 60 developers in a Discord channel, among them a “few [Python] core developers” and a “delegation from the Rust project”.

The team has experience with previous projects integrating Rust into existing codebases, such as Android and the Linux kernel, and is “excited by the work and keen to support [the project] if we proceed”. Showing how adopting Rust may specifically help CPython, David noted how the number of issues labeled with " type-crash" has been steadily rising over time… David explained that Jeff Vander Stoep described Rust in Android as “move fast and fix things”, and that “fewer revisions for patches of the same size” was the experience Android has had since adopting Rust....

One of the biggest concerns from a year ago was Rust’s lack of platform support compared to CPython, which at the time of writing officially supports 20 different architectures and platforms at either Tier 1, 2, or 3. David shared that Rust’s support of different platforms has “widened since last year” and was becoming “less and less of a concern”. The proposal would be to ask Python distributors to attempt using the optional Rust support in Python 3.16 (October 2027) and report platform-specific issues upstream in time to be resolved around the Python 3.17 timeline (October 2028)…

[T]he first Rust code to ship in Python would be in Python 3.16 [October 2027], where it would be completely optional, with the existing C code kept as a fallback. The earliest that Rust would become required to build CPython is Python 3.18 in 2029, at least three years away… The Rust for CPython team has selected the zlib module as the first module to be given an optional Rust implementation because they “wanted to achieve a significant improvement” with a “small scope”. The proposed Rust implementation will use zlib-rs, which is “heavily tested and used by the Firefox, uv, and Cargo" projects and “faster than zlib and zlib-ng on many platforms”.... This small change would have an impact: the zlib compression algorithm is “widely used by Python packaging”, meaning that (almost) “every pip install in Python 3.16 will be sped up” if the proposal is accepted.

Broadcasters said AM radio remains a critical source of information, offering news and weather alerts, particularly when cell networks and internet service are disrupted or unreliable… “AM radio — all radio — has always been about connection, and in Chicago, especially, the connection is incredibly strong,” Mary Sandberg Boyle, vice president and general manager of WGN-AM 720, said. “You don’t need a subscription. You don’t need a data plan or an app. You turn on the radio, and it’s there…” Boyle said the accessibility of radio becomes especially important during severe weather and breaking news situations. “That’s when local radio is really more important because we have the ability to stay live, pivot our content and what we’re covering, and we can access a large amount of audience members very quickly and keep everybody safe,” she said. Boyle also serves on the board of directors of the National Association of Broadcasters, which has argued that preserving AM radio access is an access issue rather than a matter of nostalgia.

The legislation emerged after several automakers removed AM radio from certain electric vehicle models, citing interference from electric power systems. Companies including Tesla, Rivian, Volvo and others have either eliminated or limited AM radio in some EVs. The Alliance for Automotive Innovation, which represents most major automakers, has opposed the requirement. In congressional testimony last year, President and CEO John Bozzella argued that “analog AM radio does not contribute to motor vehicle safety” and requiring it as standard equipment “is not necessary to ensure public safety.”

Under the bill, the U.S. Department of Transportation would be required to develop regulations ensuring AM radio remains available in new vehicles sold in the U.S. The measure would also bar automakers from charging consumers separately for AM radio access… While public discussion around the legislation has largely focused on emergency alerts and news access, some scholars say preserving AM radio also has implications for media diversity… “I think the media landscape is really overwhelmingly homogenized right now, and AM radio is important in many markets,” [said Zachary McDowell, associate professor of communications at the University of Illinois Chicago]. “It’s a space that still allows for all sorts of different voices that is still open and accessible.”

“Avatar” spent a decade as the biggest release ever until “Avengers: Endgame” overtook the record in 2019 during its initial run on the big screen. “Endgame” dropped to No. 2 on all-time charts in 2021 when “Avatar” returned to theaters in advance of 2021’s “Avatar: The Way of Water.” Five years later, and Earth’s Mightiest Heroes have triumphed over the Na’vi again. Disney is popping Champagne no matter which big-screen behemoth claims the No. 1 spot. “Avatar” was released by 20th Century Fox, which Disney now owns after the companies merged in 2019… [Last week’s] re-release of “Endgame” has generated more than $126 million worldwide.

In every collision, particles are flung out sideways; how hard they are flung, on average, varies slightly from one collision to the next. Physicists expected the size of these variations to change smoothly as they adjusted the collision energy. Instead, the variations dipped, shrinking and then growing again. This dip could be a sign of a long-sought “critical point,” a special set of conditions at which nuclear matter changes the way it transforms from one form to another.

The signal, detected by the STAR experiment at the Relativistic Heavy Ion Collider (RHIC) at Brookhaven National Laboratory in New York, is strong enough that it is very unlikely to be a statistical accident. However, the researchers cautioned that the dip is a tantalizing hint, not proof of the long-sought transition. They published their findings Sept. 22 in the journal Physical Review Letters…