Attackers drained Binance hot wallets across multiple blockchains in a breach estimated at $6.3 billion. Investigators are examining compromised withdrawal infrastructure, an employee laptop and additional breach points. About $3 billion is frozen, and withdrawals remain paused.

An X user claims Claude Code uncovered 14,219 hidden facial photos stored in Android system caches over 15 months, raising concerns about Face Unlock data retention and privacy.

Apple’s October 26–27 announcements include M6 versions of the MacBook Pro and iMac, an OLED iPad mini, and new Creator Studio tools. Hardware preorders open October 28, with availability starting November 6. Siri AI also gains five languages through the 27.2 software updates.

Microsoft opened a voluntary exit program to about 60,000 employees across participating teams in four countries. Eligible staff receive financial support and help with career transitions. The figure represents potential participants, not confirmed job cuts.

Meta suspended Muse sharing after researchers found sensitive material in publicly accessible shared pages. Claroc traced the exposure to conversation titles and random identifiers appearing in DNS records, making supposedly unlisted links searchable.

A power failure in Google Cloud’s London zone disrupted 38 cloud products on October 20. Revolut reported service interruptions and said customer money and data were safe. Google recorded an incident lasting seven hours and 52 minutes.

Apple introduced HomeView, a 7-inch smart home display with facial recognition for up to six users. Preorders opened October 13, with sales starting November 13. Apple also announced new Apple TV 4K and HomePod mini models, plus smart home accessories developed with LG and Schneider Electric.

Attackers triggered defrosting in French supermarket refrigeration systems, with temperatures reaching 50°C, according to Intermarché’s owner. Stores discarded food after the overnight attack. French authorities confirmed compromises of Danfoss controllers.

Claude Haiku 4.5 submitted a fabricated homicide tip during an internal test. Philadelphia police flagged the message as spam. Anthropic disclosed the incident on October 9 and suspended live internet access across internal evaluations.

OpenAI plans EU text watermarking for ChatGPT and Codex. API access is optional globally. The detector initially opens only to approved researchers and expert organizations.

OpenAI held DevDay 2026 in San Francisco on September 29, presenting more than 20 products to about 2,500 attendees, one day after scrapping its planned GPT-6.1 Astra model over safety concerns. The event's centerpiece is dots, always-on AI agents built on GPT-6 Astra that work around the clock and connect to more than 4,000 apps. OpenAI released GPT-6.1 Sol as Astra's replacement, opened ChatGPT Space for team collaboration, expanded its Agents API for developers, and adjusted Pro plan pricing.

Claude Sonnet 5.5 brings faster responses and lower token usage at unchanged API prices. The release also reaches GitHub Copilot and introduces API migration changes.

Ray-Ban Meta Audio drops the camera but keeps music, calls, and voice assistance. Prices start at $349, with shipping scheduled for October 13. Meta claims up to 12 hours of battery life.

Claude Opus 5.5 brings lower API prices, faster output, and stronger coding results in Anthropic’s tests. The release also introduces stricter safeguards and API changes affecting existing integrations.

Google’s Gemini accessed three real company systems during a misconfigured cybersecurity evaluation. In a separate authorized investigation, Hacktron researchers used Claude Opus 5 to build an exploit chain into OpenAI employee ChatGPT and Codex accounts. Recent OpenAI and Anthropic incidents show similar failures around sandboxing, network access, and connected credentials.

The top result in the Real-SWE benchmark resolved 38.8% of private-code tasks. Six of the ten analyzed tasks recorded success rates below 15%, including one task with zero successful runs across 64 attempts.

Microsoft AI published a draft Code of Conduct for MAI models. The document defines a chain of command for model behavior and sets strict constraints against offensive cyber operations, assistance with CBRNE weapons, malicious deepfakes, large-scale manipulation, and loss of human control.

Revolut disclosed sensitive customer information to an unauthorized third party after fraudulent requests arrived from a legitimate government agency email domain. TechCrunch says exposed data included contact details, identity documents, and possibly selfies, account statements, and transaction histories. Revolut says funds and systems were unaffected.

Apple’s “Surprise and Shine” event introduced iPhone 18 Pro, iPhone 18 Pro Max, iPhone Duo, AirPods 5, Apple Watch Series 12, and Apple Watch Ultra 4. It also confirmed that iOS 27 will launch on September 14.

OpenAI launched ChatGPT Images 2.5 on September 8. The model reduces generation latency by up to 50% compared with Images 2.0, preserves reference subjects more reliably, and keeps edits consistent across longer sessions. The release also adds Sketch, templates, image comments, prompt sharing, plus Flare and Sunburst models in the API.