The upcoming Fathom will be based on what Ford calls its Universal EV Platform, designed with the aid of its 2023 acquisition, startup Auto Motive Power, with bidirectional power on the plate from the start. The hardware required to invert the battery’s DC energy to an estimated 10 kW of AC home power will be built into the truck, so it won’t require a separate wall-mounted inverter box. Ford says the Fathom’s system will meet all applicable UL 1741 requirements and IEEE 1547 standards to ensure the vehicle is safely connected to the grid. As for the actual hardware you plug into your car, all signs point to the Fathom using the NACS plug type pioneered by Tesla and now widely adopted by new EVs in North America. In terms of the communication standard — the one that governs how AC power is routed from the slim wall box to the car’s onboard charger — that’ll be via SAE J3068, a software protocol developed for high-power, heavy-duty AC charging.

[…] However, while Fathom’s Universal EV Platform eliminates the need for a wall inverter box, it doesn’t completely bypass the need for additional hardware to make your home ready to accept bidirectional power. Say you wanted to take advantage of the Home Power Management feature to draw energy into the Fathom’s battery when power is cheapest, and then use that energy to offset peak-hour usage when power is most expensive. You’ll have to install at least the Ford Home Power Station in your home, at an additional cost. The automaker hasn’t specified pricing, but says that it’s working to reduce costs and expects this component alone to cost half as much as the first-generation Ford Home Energy system, which debuted at around $1,300. That could put the new system at roughly $650.

The four companies were named in an updated public notice (PDF) dated Monday, Oct. 26, from OKXICE, the two firms’ joint venture. They join earlier objectors including Microsoft, Alphabet, Goldman Sachs, Cisco and Wells Fargo. The growing list underscores a hurdle for OKXICE and the SEC’s new framework for tokenized stock trading: building a market that issuers are willing to join. The agency’s five-year “Innovation Exemption” gives qualifying venues room to test round-the-clock blockchain-based trading of stocks, and it also gives public companies an option to block their shares from being offered.

OKXICE issued its initial public notice on Oct. 4, outlining plans to use Uniswap v4 liquidity pools on OKX’s XLayer blockchain, with transactions settled in stablecoins. The venue would use automated market makers — software that executes trades through pools of assets rather than matching buyers and sellers through a conventional order book. Under the framework, venues must notify issuers and give them 30 days to object before offering tokenized versions of their shares.

Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in boot-time firmware used by most of the world’s server vendors and data centers. The vulnerability, with a severity rating of 9.5 out of 10, resides in the TianoCore EDK II, an open source codebase that hardware makers and cloud providers use to create the UEFI firmware that runs during the boot-up sequence. Last year, a representative of the UEFI Forum called (PDF) EDK2 the “preeminent solution / implementation of the UEFI specifications.” Virtually all UEFI suppliers (sometimes still called IBVs or independent BIOS vendors), including AMI, Insyde, and Phoenix, use the reference code extensively. Project Mu, Microsoft’s hardened EDK2 fork, used the code containing the vulnerable component as well.

The vulnerability, tracked as CVE-2026-97631, is a memory-corruption flaw in an ICMP component that attackers can exploit to execute malicious code that runs before the operating system and firmware can implement defenses like Secure Boot, which establishes a chain of trust for all code, including the Trusted Platform Module (TPM), loaded during boot. While final payloads delivered by CVE-2026-97631 have no persistence — meaning they run only once — they can give attackers a wide opening to install other payloads that also run each time early in the boot process.

The parties that discovered CVE-2026-97631 — Alex Matrosov of Anthropic and Dan Holmes of Google — had arranged for it to stay under wraps until a coordinated disclosure that was scheduled for January. AMI, a maker of motherboards and other hardware, published this pull request last month that detailed the vulnerability and included a code fix. Once the post came to the attention of the discovering parties, TianoCore Project members published a public advisory last week. With publicly available patch code, it will be trivial for advanced hackers to learn how the vulnerability is triggered and to build working exploits. Further compounding the urgency, patching UEFI code vulnerabilities in millions of end devices sold and used by thousands of hardware makers and cloud providers is cumbersome and time-consuming.

Google DeepMind released its newest world model, Genie 4, in research preview on Tuesday. The latest model generates the most photorealistic and interactive worlds yet, allowing users to type prompts mid-simulation to change the scene. The model also generates real-time audio that matches the simulated world, including music, ambient noises, and interactive dialogue.

[…] Google released its predecessor, Genie 3, as a research preview a little over a year ago. Aside from being far more photorealistic and featuring audio, Genie 4 allows for freeform edits, like changing the weather or camera angle in real time or adding new people or objects. It can maintain a consistent scene for up to two minutes, double its predecessor’s limit, and offers better physics and more human-like characters. Gemini, Google’s AI model, is also mo

Anduril, arguing that its manufacturing capabilities are directly applicable to laptop manufacturing, is starting a project for a fully 100% U.S.-sourced laptop. The computer will use a Qualcomm Snapdragon SoC. I did not see any information about the OS, but I’m assuming that, given the type of processor, this will be Linux-based?

Reports of the problem first surfaced on Reddit and other social media sites. Bloomberg News has since independently verified the issue with more than half a dozen customers, who provided photos showing damage to their devices or evidence of their support conversations with Apple. Apple acknowledged the issue in a statement, saying it was “aware of an issue impacting the inner display on a small number of iPhone Duo units.”

“If users experience issues with their iPhone Duo display, they should contact AppleCare for a replacement,” the Cupertino, California-based company said. Most Duos aren’t affected by the problem, and the units that are impacted exhibit the defect quickly, Apple said.

A Florida man who was the subject of a 2019 investigation by ProPublica was indicted last month on federal charges that he defrauded clients of his ransomware data recovery firm. According to the Justice Department, the man, Zohar Pinhasi, told customers he could recover their encrypted files without having to pay hackers, when, in reality, he paid the ransom and charged victims a hefty fee on top. The indictment mirrors the findings from ProPublica’s 2019 article "The Trade Secret,” which centered on Pinhasi and his scheme.

The outlet found that the ransomware victims were being harmed twice: once by the hackers, who locked their targets’ files and demanded ransom, and a second time by MonsterCloud, Pinhasi’s Florida-based data recovery firm, which misled its clients about not paying ransoms. “By falsely claiming to decrypt ransomware without paying off the ransomers, the defendant re-victimized his clients while extracting a hefty profit for himself,” U.S. Attorney Joseph Nocella said in an Oct. 7 press release. “Our Office will vigorously prosecute ransomware attackers who prey on Americans from across the world and those who cynically profit from their criminal activity.” […] Pinhasi, who went by the alias Zack Green, told ProPublica in 2019 that MonsterCloud never promised clients that their data will be recovered by any particular method. “How we do it, it’s our problem,” he told ProPublica. “You will get your data back. Sit back, relax and enjoy the ride.” He called MonsterCloud’s data recovery methods a “trade secret.”

[…] Federal investigators found that, over the course of the scheme, Pinhasi allegedly charged clients more than $19 million and paid more than $8 million in ransom payments. In one example, Pinhasi made a ransom payment of about $8,200 but charged the client about $150,000. If convicted, he faces up to 20 years in prison. […] In 2019, Pinhasi touted MonsterCloud’s ties to law enforcement as evidence of its integrity. Pistole, who also headed the Transportation Security Administration under President Barack Obama, was listed on MonsterCloud’s website as the only member of its “Cyber Security Advisory Council.”

Announced this morning through a press release, the new 14-inch MacBook Pro features three Thunder 4 USB-C ports that all support charging and DisplayPort connectivity, a MagSafe 3 charging port, full-size HDMI, and an SDXC memory card slot accommodating photographers. Pricing for the new M6 version of the 14-inch MacBook Pro starts at $1,999 with 16GB of memory, the same as last year’s M5 model. Preorders start on October 28th and shipping is expected to begin on November 6th.

The new M6 processor is Apple’s first 2nm chip with a bump to a 12-core CPU, up from 10 cores in the M5, and the company says it offers up to 1.2x faster multithreaded performance when compared to its predecessor. The M6 also features a Dual 16-core Neural Engine to handle heavy on-device AI tasks, plus an upgraded 12-core GPU with a Neural Accelerator in each core. In addition to performance improvements, Apple says its M6 processor is more power efficient.

While global tech stocks teeter, in China they have already crashed as lofty valuations collapse under worries about AI demand and curbs on Chinese exports. The meltdown, tanking the mainland STAR50 index of AI and semiconductor leaders by 40% in less than four months and vaporizing some $480 billion in market value, is an ill omen for wobbly world markets and a dampener on China’s efforts at encouraging its savers into stocks to fund the AI boom. It has also slammed the brakes on a rally running two years, since economic stimulus promises sent shares soaring, and has stalled Beijing’s push to break with a long boom-bust pattern and drive a “slow bull” market that delivers reliable performance. China’s broad blue-chip index has dropped about 20% from highs made in June. “The stock market later evolved into a speculative crazy bull,” said Beijing-based fund manager Dong Baozhen. “And now we see the bubble bursting.”

According to Danish publication Computerworld, the pilot project was launched in 2025 and involved 38 employees, all of whom would start using the British open-source Collabora office suite instead of Word, PowerPoint, and Excel. The experiment was initiated by the then Digitization Minister Caroline Stage, who wanted to reduce the country’s dependence on American technology. Denmark isn’t alone in moving away from U.S. software, with France and the Netherlands both taking steps to replace Microsoft Windows. However, it seemed that the experiment fizzled out less than six months after it started. It had reportedly ended by the time the Danish government called for an early election in February 2026, with some employees complaining about issues with style, paragraph formatting, blank pages, and challenges with tracking changes.

But even though it’s been months since the experiment reportedly ended, Prof. Mikkel Flyberbom of the Copenhagen Business School complains that the project hasn’t been properly evaluated. “It’s a good idea to test alternatives in a pilot project,” the professor said in an email. “However, I wish that the ministry would take the opportunity to learn from the pilot project and share those experiences with other parts of the public sector.”

Scientists today say we’re just beginning to understand the harm that the tiny bits of plastic we drink, eat and breathe are doing to the human body. Internal memos among company scientists and executives obtained by The Times reveal that for at least half a century, the plastics industry has been aware of and concerned about the potential for microplastic contamination in the human body. But recently discovered chemical company documents dating back several decades show that industry scientists have long been aware of — and concerned about — the way microplastic particles migrate beyond the gut in animals and humans, depositing in important organs. And the potential for that knowledge to affect the plastic food packaging industry.

Their concern goes back to 1974 and a scientific meeting at a New York City hotel, where a German gastroenterologist presented a scientific paper that showed for the first time that ingested particles like microplastics could infiltrate the rest of the body. His presentation was largely overlooked by the government scientists in attendance but became a point of worried discussion among company scientists. Tracey Woodruff, professor of epidemiology and population health at Stanford University, who reviewed the documents, said they indicate scientists and executives at major chemical companies have known and remained silent even as microplastics accumulated in tissues. She likened it to other industries that knew about pollutants — greenhouse gases, asbestos and tobacco — but did not take action to make them safer.

A spokesperson with the chemical industry’s largest trade group took issue with that characterization. “Scientific debate over what the evidence shows is not silence. It is how sound science and effective policy advance,” said Craig Davis, senior director of plastics chemistry at the American Chemistry Council. “Our industry is committed to advancing microplastics science by supporting independent research and policies that would do so.”

The U.S. designated helium as a critical material on Friday because it’s indispensable for making semiconductors that are essential to energy generation, and the global supply is at risk of disruption, according to the Energy Department. The designation by the Energy Department means that more federal financing will be available for helium producers and that the government will monitor it more closely. Helium is primarily produced as a byproduct of natural gas processing. The United States is the world’s largest producer of natural gas and of helium. Qatar and Russia are the other top helium producers.

[…] Helium makes balloons rise, but that’s not why the DOE is interested in it. Helium plays an important role in wind, solar and nuclear energy production, space exploration, medical imaging and research. Assistant Secretary of Energy Audrey Robertson said helium’s unique properties make it irreplaceable, such as the fact that it’s non-combustible and has the lowest boiling point of any gas. The nation needs an ample supply for semiconductors, quantum and super computing, and superconducting magnets, added Robertson, who oversees the Office of Critical Minerals and Energy Innovation.

[…] Despite environmental concerns with recovering helium from natural gas, there are also opportunities, said Greeshma Gadikota, director of the Lenfast Center for Sustainable Energy at Columbia University. “If we burn the natural gas, there are a lot of CO2 emissions associated with that,” Gadikota said. “But if you just extract the helium and use it, the uses of it don’t contribute necessarily to greenhouse gas emissions. “So from a climate standpoint, if we are going to continue down the line of extracting natural gas and recovering helium,” she added, “I would prefer to see natural gas being used in a form where we directly produce hydrogen and we produce solid carbon.” Hydrogen is a clean burning fuel, and solid carbon can provide permanent carbon sequestration and can be used widely in industrial applications, including rubber and pigments.

The malicious activity was caught by Adel Karimi, detection and response lead at Perplexity, whose honeypots recorded evidence of confirmed remote code execution against an Apache mod_php installation running PHP 8.4.26. “This is now confirmed RCE with usable memory disclosure, not just a crash followed by a suspicious process. The response delivered an 800 KiB decoded cookie dump, and a function address derived from that dump using the public exploit’s offsets appears in the subsequent execution payload,” Karimi shared.

“The evidence demonstrates this chain on the intentionally favorable single-worker mod_php profile; it is not a measurement of exploit reliability on other worker counts, PHP builds, or applications,” he added. Karimi’s findings were also confirmed by Expel threat researcher Marcus Hutchins, who has been tracking a stream of alleged successful PHP2Shell exploitation reports.

“This is by far the highest quality confirmation of in-the-wild php2shell exploitation I’ve seen so far. Deep technical breakdown of a successful exploitation attempt against an Apache mod_php installation running PHP 8.4.26,” Hutchins said.

The new program was outlined by chairman and CEO David Ellison and co-CEO Ynon Kreiz in a memo to staffers Monday. “As we bring our teams together, we recognize that not everyone will see their future here, and we respect that. To give eligible employees the option to move on in a way that works for them, we are introducing a Voluntary Buyout (VBO) Program,” the execs wrote. “Those who qualify will receive an individual communication with their personalized details and terms, and a window to decide whether to accept this one-time offer.”

They added, “Please know we don’t take any of this lightly. We are clear about what we’re building: a company that tells the stories people around the world love, embraces new ways to connect with audiences, and leads the next era of media and entertainment. We have the talent, the creative firepower and the ambition to do it, and we will get there together.”

[…] In the Oct. 26 memo, Ellison and Kreiz also said the new Skydance is moving to a mandatory five-days-per-week in-office policy across the company. “We believe in-person collaboration is vital to our culture and to the success of our business. Especially in a creative company like ours, the best ideas come from people in the same room, sharing perspectives, challenging one another and solving problems,” the execs said. “We truly believe this is in the best interest of our company and our people. We’ve seen the benefits firsthand at Paramount, and we want every part of Skydance to share in them.”