AI company Anthropic is warning that advances in small AI models could soon usher in a new era of self-replicating malware that’s capable of infecting smart fridges, vacuum cleaners, and a wide range of other Internet-of-things devices and is more resistant to takedown. By next year, smaller AI models may be able to autonomously self-replicate on all kinds of IoT devices, the company said. Eventually, the capability could enable computer worms, which propagate without requiring human interaction and are capable of infecting unfamiliar IoT devices. An experiment the company performed recently revealed significant challenges in bringing such an AI malware replicator to fruition, so the finding is necessarily tempered. Still, the results do raise concerns about the possibility of new forms of computer worms.

Anthropic further warned not only about the new potential malware, but also that it could be difficult to stop. In its blog post, it wrote that “a replicator like this would be challenging to shut down, since there’s no centralized point to shut off — though it may be slow (with a doubling time of days). Unlike non-AI malware, it could also figure out unfamiliar devices on its own.” Smaller AI models require much less powerful hardware to run than do frontier models. Anthropic ran small open-weight models on real or simulated low-cost, off-brand Android TV boxes and other types of IoT hardware. Company researchers found that by using quantization to represent the models using fewer bits and splitting the workloads into “shards” running on each device, the models were able to establish inference, meaning that the model weights loaded and could generate output.

[…] This finding was the starting point for further research that asked: Would it be possible for small models to create self-replicating infections that run themselves on IoT devices the way traditional IoT worms, like Mirai, install DDoS code and other payloads? Unlike Mirai, these AI worms could pose a much higher threat, since the models could tailor exploits and payloads dynamically, depending on the target. Once such an infection chain began, it might also be harder for defenders to stop it. “Such an ‘AI worm’ could carry its model weights with it as it reproduces (or re-download them from a public hub), and then run inference directly on compromised hardware,” Anthropic said. “Effectively, the weights would become part of the malware payload.”

The idea comes as more people are experimenting with building their own applications via AI for specific, personal needs. However, being able to use that app on their own Android device has meant publishing to Google Play, making it accessible to the Play Store’s some 3 billion users. That led many to limit their vibe-coding efforts to web apps that could run on any device instead of something built natively for Android.

Now, Google says Android device owners can vibe-code an app using Google AI Studio, then launch it for their own use. These apps are still required to comply with Google Play’s existing policies but allow users to experiment more directly with building apps for Android. Initially, the feature will be available to users in the U.S., age 18 and up.

[…] In the months ahead, the company said that users will be able to share their vibe-coded creations with a network of trusted friends. That means the apps you built for family or friends, or maybe your child’s T-ball league, could be used with a small group of people, without having to go public on the Play Store. And if the app ever really becomes popular, there will be a way to shift the personal app to one that’s published on the Google Play Store for everyone to try, after completing the trust and safety reviews.

The bulk of the job cuts would be in Netflix’s product, tech, legal and human-resources teams, the email Co-CEOs Greg Peters and Ted Sarandos sent to employees on Wednesday showed.

“Our mission — to entertain the world — is ambitious, and delivering on it requires us to be disciplined about where we prioritize our people âand resources,” they said in the memo. “Our business is strong and growing, and we remain on track to deliver our full-year forecast.”

The Netherlands’ Tax and Customs Administration has abandoned its planned Microsoft 365 public-cloud rollout. Why? The reasons were clear at the Open Source Summit Europe conference, where the Linux Foundation (LF) released the 2026 State of Open Source in Europe. In it, the nonprofit, pro-open-source organization revealed that 94% of European Union (EU) organizations say digital sovereignty is important, with 61% considering it very important. As Thierry Carrez, the Linux Foundation Europe GM, said in his keynote, “Europe has clearly heard the message on digital sovereignty.”

In an interview onstage at the summit, Nithya Ruff, chair of the LF board, added that it’s not just Europe: “Digital sovereignty is a need that the entire world feels, whether it’s Sierra Leone or the US or China.” It’s not just the Dutch tax collectors, though. The Netherlands is also exploring switching from Windows and proprietary software to Linux and open-source programs across the board. […] The Netherlands had planned to switch to Microsoft 365 in 2025. The idea then was to complete the rollout by the end of 2026. About 5,000 employees had already migrated when the Dutch Advisory Council on ICT Assessment recommended reversing the public-cloud rollout in June. The government paused the plan in July; the latest announcement replaces that rollout with an on-premises/open-source approach.

The Tax and Customs Administration isn’t replacing all of Microsoft Office with a single open-source suite, at least not yet. Instead, the government will keep the existing Microsoft software for now. Looking ahead, State Secretary for Finance Eelco Eerenberg set out the replacement timetable in a letter to Parliament: “In 2027, the provision for mail and calendar will be realized on-premises. Later in 2027 and 2028, European open-source solutions for personal storage and collaboration will follow. This allows us to work toward a sustainable and more autonomous solution for these functionalities.” […] For now, the on-premises email/calendar environment will still use Microsoft software, including Outlook. The open-source portion concerns personal storage and collaboration, not a wholesale replacement of Word, Excel, PowerPoint, or the entire desktop environment.

“In May 2026, Anthropic averaged around 2,500 code changes merged per day; as of September, we merged over 30,000 per day,” the biz said in a blog post on Tuesday. “We don’t expect this rate of growth to slow down anytime soon; the latent demand for merging code is practically infinite, and every bottleneck we remove immediately leads to a further increase in the amount of code we produce.”

After several months of model prompting and five months of migration, the result is a homemade version control system called Scion, a monorepo scheme that sounds a bit like Subversion, Apache’s centralized version control system. […] Scion has been designed to meet the needs of AI agents, so the client leaves much of the work to the server; the source control queries are exposed via API so internal tools can respond without needing a local repo, and there’s less synchronization but more need for server speed.

“In Scion, the unit of work is a ‘changeset,’ an entry in a write-ahead log,” Anthropic explains. “A changeset stores most of what you’d expect from a commit in git. But where a git commit stores a pointer to the tree, a changeset stores a list of the files that changed relative to its first parent, along with content-addressed pointers to the compressed file contents in blob storage.” […] Anthropic says its bespoke system isn’t right for general use. There will be no open source release. Nonetheless, the company contends that its own code scaling problems will become commonplace in other organizations over the next few months, so it wanted to share its approach — having ample funding to pay for writing custom infrastructure tools.

The new prices take effect for new subscribers immediately. Current subscribers to the streaming service, which primarily features unscripted content, like reality shows and documentaries, will receive 30 days’ notice before the new prices take effect, starting with bills issued as of November 12. […] However, a Skydance spokesperson told Ars Technica that the pricing changes were in the works before Discovery+ knew about the merger’s closing date and were not planned in anticipation of a merger.

The spokesperson said that Discovery+‘s prices are regularly evaluated to ensure that they are in line with the content and experience that the service offers, and the new prices reflect that. Discovery+ has increased its prices three times since launching in 2012. Before today, the most recent price hike occurred in January 2025, when ad-based monthly subscriptions increased from $5 to $6, and ad-free plans went from $9 to $10.

An OpenAI employee was arrested after a "sophisticated recording device" was found hidden inside the executive conference room. Abdulrahman Alfozan, 35, who is a national of the Kingdom of Saudi Arabia, was arrested in connection with the matter, the DOJ said. The company said an employee planted the device a few days before it was found, and the Federal Bureau of Investigation “moved quickly to make an arrest,” the post said. The employee was terminated.

FBI Director Kash Patel said in a statement that Alfozan “allegedly concealed a covert recording device inside his employer’s executive conference room to secretly capture sensitive communications about the company’s super intelligence technology.” Alfozan is also listed as a partner at Raed Ventures, a venture capital firm that focuses on the Middle East and North Africa, according to its website. The firm announced on Feb. 6, 2025, that H.H. Prince Khalid Bin Bader Al Saud, a member of the Saudi royal family, had joined the firm as a venture partner. Alfozan was announced as a venture partner two days later. The Raed announcement for Alfozan lists Meta, Microsoft and SAP as previous roles and said he studied computer science and engineering at MIT.

The Q1 2027 PC release window for GTA VI comes only a few months after the game’s November 2026 console launch, representing a significantly quicker turnaround for PC development than the previous iteration of Grand Theft Auto, whose April 2015 PC release came roughly a year and seven months after the September 2013 release of Grand Theft Auto V.

The user base of Grand Theft Auto V skews largely towards console players, with PC players representing a small minority. With GTA VI’s production budget rumored to exceed $2 billion, Rockstar is highly incentivized to pull all the levers it can as fast as it can to monetize the game’s upcoming sequel — and PC players represent a significant expansion of the GTA VI audience.

The potential benefits of launching GTA VI relatively quickly on PC go beyond the opportunity to grow the game’s casual player base. Rockstar has signaled its plans to implement user-generated content creation tools into GTA VI, and the company’s August 2023 acquisition of Cfx.re, the development team behind the prominent Grand Theft Auto V roleplaying server company FiveM, made it clear that Rockstar considers online roleplaying in GTA to be a factor in the game’s future.

The company, which allows users to create and interact with AI-generated avatars, said it made the filing in U.S. Bankruptcy Court for the District of Delaware. It said it hopes the process will allow it to “facilitate a value-maximizing sale of all or substantially all” of its assets. The Character.AI platform will continue to operate during the bankruptcy.

The Disney agreement, reached prior to the filing, would give the media giant a non-exclusive perpetual license of select intellectual property and company claims from Character.AI. Disney would pay $20 million and provide resources during a transition period as the company explores a sale. […] Character.AI said it is aiming to conclude the sale process by late November or early December.

Kroger last month outlined its AI strategy, meant “to improve the customer experience, make work easier for associates and produce better business outcomes.” Cincinnati-based Kroger is the largest standalone U.S. supermarket chain with 409,000 employees and more than 2,700 stores operating under various brands, including Ralphs, King Soopers, Smith’s and Fred Meyer.

Kroger named former Walmart executive Foran CEO in February, 11 months after the abrupt resignation of its previous CEO. Foran has a reputation for being tech-savvy and detail-oriented. He led Walmart’s U.S. division from 2014 to 2019, where he focused on cleaning up stores, ensuring items were in stock and improving the fresh produce selection. He also introduced online ordering and pickup, and accelerated Walmart’s digital capabilities.

Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users’ cryptocurrency wallets. The company has been investigating reports of users losing funds from wallets purchased through CryptoBilis, a major Malaysia-based hardware wallet retailer operating across Southeast Asia. Some researchers have shown the implant in Ledger X since September 16, saying tampered devices were available for nearly half the price of the original hardware.

[…] In a report over the weekend, Tibane Labs notes that the threat actor made room for the malicious circuitry by replacing the original battery with a smaller one, which powers both the implant and the Ledger X. “Under the battery and antenna sits an ST STM32G431KBU6 (Arm CortexM4, 128 KB flash, UFQFPN32),” the researchers found inside one of the devices. For connectivity, the actor used “a tiny eSIM, an 8pad package just 2x2 mm, next to the MCU, and a shielded LTE module that sends the words out.”

[…] Ledger is advising users to avoid purchasing from unauthorized resellers as they run an increased risk of getting counterfeit or modified devices. The company is also reminding its authorized resellers and distributors to get the products only through authorized channels and to avoid restocking returned products. Ledger provides a ‘Genuine Check’ mechanism to determine the authenticity of the device; however, it explicitly warns that it cannot detect added implants when the device’s original Secure Element remains intact.

Anthropic has updated its Usage Policy to prohibit “sustained and needless abusive or cruel behavior” toward its Claude AI models. While ordinary frustration, criticism, and adversarial testing remain acceptable, repeated cruelty could result in account restrictions. Anthropic acknowledges there’s no evidence Claude can suffer but argues that uncertainty about AI consciousness warrants precaution.

Critics contend the policy anthropomorphizes software, encourages unhealthy emotional attachments, and raises questions about how customers may interact with products they’ve paid for.

The move raises an intriguing question: If an AI cannot demonstrably experience suffering, is abusing it an ethical problem, or is Anthropic simply policing human behavior?

Alphabet’s Google on Wednesday released its flagship AI model Gemini 4 Argon to developers and businesses worldwide, seeking to regain ground against rivals OpenAI and Anthropic after months of delays and a leadership shakeup at its DeepMind lab. The model excels at “deep work” on complex, multi-step tasks in coding, finance, law, cybersecurity and science, Google said. API pricing at launch starts at $2 per million input tokens and $10 per million output tokens, with rates set to double after November 30.

[…] Argon is available to paying customers through the company’s AI application building tools. Google AI Pro and Ultra subscribers can access it through the Gemini app and AI Mode in Search, while the Antigravity coding tool is limited to Ultra subscribers. Teams using Argon in Antigravity increased agentic code submissions by more than 35%, while reducing code rollbacks by nearly a third, Google said.

Reuters reported Sunday that sources familiar with the matter identified the arrested suspect as Ed Dubrovsky, a Canadian cybersecurity executive whose career has focused on helping clients negotiate with ransomware attackers. Court documents from the U.S. District Court for the Eastern District of Pennsylvania show Dubrovsky is facing two criminal charges: conspiracy to threaten to impair the confidentiality of information with the intent to extort money, and interference with commerce by threats. The allegations have not been proven in court.

“For the cybersecurity community in general, I think that there’s a sense of shock,” Toronto-based tech and cybersecurity analyst Ritesh Kotak told CBC News on Monday. Kotak says Dubrovsky is “very popular” and has spoken at numerous conferences, but stressed that the charges “are clearly just allegations” and that it is not yet known “what exactly has happened.” “This is an individual that was for the most part respected when it came to ransomware negotiations,” he said. “A lot of people are familiar with his work as well.”

The device’s square shape makes it feel less imposing than larger smart displays like Google’s Nest Hub Max or Amazon’s Echo Show 11, and I can see it fitting nicely on my kitchen counter — though it might be a hair too big for my bedside table. The HomeView is the centerpiece of Apple’s new push into the home. It costs $299 and launches alongside a new collection of cameras, thermostats, and a door lock designed for Apple Home.

As a smart home hub, Matter controller, and Thread Border Router, the HomeView can orchestrate these and other Apple Home and Matter smart home devices. It’s available in eight countries at launch: the US, UK, Canada, Australia, New Zealand, Singapore, South Africa, and India. Pre-orders are open now, with devices shipping November 13th.