Top AI news, week of October 26 – November 1, 2026
42 stories
The top stories of the week of October 26 – November 1, 2026, ranked by the Glonce rating: the 🔥 on every story. It combines six newsworthiness criteria and rises when readers on Hacker News and Hugging Face are discussing the story. Each story appears once, and no company takes more than three places.
- Google unveils Gemini 4 Carbon, starting with cyber defenders
Google announced Gemini 4 Carbon, which it calls its strongest model, with a focus on cybersecurity and long-horizon engineering. Access starts this week for a subset of cyber defenders; wider release is promised "as soon as possible".
- OpenAI says its models refuted the ETH and proved local smoothing
OpenAI announced three results it says its models produced, in harmonic analysis, complexity theory and quantum field theory, and handed each to external expert groups to examine. The math and computer science outputs and Lean proofs are on GitHub; the physics group is holding its materials back.
- Google DeepMind announces Genie 4, a real-time world model with native audio
Genie 4 generates interactive worlds in real time, with ambient sound and dialogue, steered by text prompts and Gemini models. It is a research preview for trusted testers, with wider access "coming soon".
- Linux kernel CVE-2026-98432: IPv4 TCP use-after-free rated 9.8
A use-after-free in the Linux IPv4 TCP handshake, reachable by a remote unauthenticated peer, is fixed upstream, but Ubuntu and RHEL kernels were still unpatched on October 31. Anthropic says its Claude model wrote a working root exploit.
- Mistral releases open weights of 1-trillion-parameter Mistral Large 4
Mistral AI has published the weights of Mistral Large 4 (Le Chonk), a 1-trillion-parameter multimodal model, under a modified MIT license. Mistral says it is the best open-weight model for coding; the figures are its own.
- Apple's macOS git and curl still trust compromised eMudhra certificates
A site published by Dennis Jackson says that as of 28 October the developer tools Apple ships with macOS still trust the compromised eMudhra certificates, and that macOS 27.2 undid users' manual workaround.
- OpenAI launches GPT-6.1 Terra at $1 per million input tokens
OpenAI has released GPT-6.1 Terra, a fast model for computer use and visual reasoning. Its standard API prices are 50% lower than GPT-5.6 Terra and GPT-6.1 Sol.
- Claude Code extension on Cursor Marketplace carried an SSH backdoor, Phorion says
Security firm Phorion reports that versions 2.1.312 and 2.1.313 of the Claude Code for VS Code extension on the Cursor Marketplace contained an injected SSH backdoor. Cursor has removed both versions.
- Anthropic files S-1 for Nasdaq listing, showing $11.6B Q2 revenue
Anthropic has publicly filed an S-1 to list on the Nasdaq as "ANT". It shows $11.6 billion in Q2 2026 revenue and a first GAAP operating profit of $974 million, against roughly $780 to $810 billion in compute commitments.
- Binance loses about $6.3B in crypto heist, tracers suspect North Korea
Hackers drained around $6.3 billion from Binance wallets, most of it in about 20 minutes, in what appears to be the largest crypto theft ever. Three tracing firms link it potentially to North Korea; roughly half the funds are frozen.
- Qwenputer compiles a RISC-V CPU into Qwen 3.5 4B weights
A developer compiled a 32-bit RISC-V CPU into a stock Qwen 3.5 4B, using its Gated DeltaNet layers as exact RAM. The CPU runs arithmetic, C and MicroPython inside the model's forward passes, with no training and no external tool.
- Cloudflare reports GLM-5.3 on Workers AI leaked other customers' data in 155 responses
Cloudflare says a misconfiguration plus an SGLang bug made GLM-5.3 on Workers AI return other customers' request data in 155 responses to very long prompts between August 27 and September 9, 2026. Both issues are fixed.
- ChatGPT share link could run attacker code in a victim's session
A research team on parameter.ai says a public ChatGPT share link could run attacker JavaScript as chatgpt.com and read a victim's private conversations. OpenAI fixed it on October 26 and rated the report P1.
- CPython's experimental JIT likely to be removed after PEP 836 is withdrawn
The authors of PEP 836 have withdrawn their bid to make CPython's experimental JIT a supported feature. LWN expects the code to be removed from main fairly soon.
- Northflank reports security incident, tells users to rotate all secrets
Northflank's status page shows an open security incident with major outages across seven components. The company says environment variables may have been decrypted, and users report their AI API keys were used without permission.
- Tailscale details SSH privilege-escalation flaws, patch targeted for 27 October
Tailscale says most of the security issues it found in Tailscale SSH are privilege escalation bugs. Fixes for most are built, a patched client is targeted for the end of Tuesday 27 October, and interim mitigations are listed.
- Stack Overflow query shared with claim of under 1,000 questions a month
A saved Stack Exchange Data Explorer query counts Stack Overflow questions per month, and it was shared under the claim that volume has fallen below 1,000 a month. The query text is all that is visible, so the figure itself is unconfirmed.
- Claude Code's agent status summaries take about 16% of one team's spend, gist says
Flamerix AI published an MIT-licensed Bun preload that switches off Claude Code's background-agent status summaries. The authors say the calls resend each agent's full transcript about every 30 seconds.
- TianoCore EDK II UEFI flaw CVE-2026-97631 allows pre-boot code execution
A 9.5-rated memory-corruption bug in an ICMP component of TianoCore EDK II, the open source base of most UEFI firmware, leaked early when an AMI pull request detailed it and its fix ahead of a planned January disclosure.
- Azure API Connections flaws let researcher cross-tenant compromise, netting $200,000
A security researcher's third writeup on Azure API Connections (part of Azure Logic Apps) describes further ways to reach another tenant's backend, including Key Vault and SQL access, and says these findings alone netted $200,000.
- C++26 fails its ISO DIS ballot, with 12 votes in favor and nine against
The C++26 draft missed both approval thresholds in its ISO ballot, which closed on 23 October 2026. A member of the Polish national body expects all nine No votes to be about contracts; the next step is unclear.
- nesformer compiles an NES CPU into stock Qwen3.5 weights
An open-source project runs the NES's 6502 CPU, its RAM and a game cartridge inside an ordinary Qwen3.5 checkpoint whose weights were computed by a compiler, not trained. It is slow, at 150 to 290 times slower than a real console.
- HackerTube: Opus 5.5 builds a YouTube-style site from videos HN recommends
Fed up with YouTube's recommendations, a blogger had Opus 5.5 build hackertube.org on a Saturday morning: 6,454 videos recommended in Hacker News comments, spread across 150 topics.
- Apple Intelligence comes to China with iOS 27.3, starting with a November 4 beta
Apple says Apple Intelligence reaches China in an iOS 27.3 beta on November 4, with a full release in December. The launch covers earlier features and Alibaba's Qwen, not the new Siri.
- US Justice Department reportedly probes Nvidia's $12.93B Hugging Face deal
Two sources cited by Reuters say the Justice Department is looking at Nvidia's planned Hugging Face acquisition, while US regulators also examine Nvidia's wider sales practices. France's competition authority is running its own investigation.
- Google opens Android Studio to more than 40 outside AI agents, adds Gemini Nano 4 agent API
At the Android Dev Summit, Google launched a Bring Your Own Agent feature in Android Studio Rabbit 2 that runs more than 40 coding agents, including Claude Agent and Codex, plus new agent APIs and the $1,099 XREAL AURA glasses.
- NVIDIA releases Nemotron 3.5 Transcribe and Granary v2 speech data
NVIDIA's open-weight Nemotron 3.5 Transcribe handles transcription, speaker labels, translation and audio Q&A in one promptable model, and ships with the Granary v2 data pipeline and fine-tuning recipes.
- Classification of finite simple groups formalized in Lean
A project page presents a complete Lean formalization of the classification of finite simple groups, checked by Lean's kernel. Along the way the team found counterexamples to a closure assertion in a published route to the Unbalanced Group Theorem.
- OpenAI and Anthropic cut LLM prices by up to 80%; a blogger says open-weight rivals forced it
A blog post tracks OpenAI and Anthropic price cuts from June to September 2026, including an 80% cut to GPT-5.6 Luna. Its author argues competition from open-weight models, not a plan to raise prices later, explains them.
- Accenture contractor reportedly linked DOD system to personal Claude Code
WIRED, citing anonymous sources, reports that an Accenture contractor connected a secure Pentagon system to a personal Claude Code account, and the agent appears to have sent credentials to a high-risk third-party site. Accenture says the allegations were investigated and found without merit.
- Liquid AI releases LFM3, a 2B-class family of on-device multimodal models
Liquid AI's LFM3 puts text, vision, audio, omni and decision models on one shared backbone in the 2B range. The text model fits in about 1 GB at 4-bit precision, and the company says it beats its larger predecessor.
- Claude Sonnet 5 agent performs brain injection on a live mouse
Exin Therapeutics connected a Claude-based agent to a robotic rig and had it inject a gene therapy into an epileptic mouse's brain. Claude Opus 5.5 refused the job; Sonnet 5 agreed.
- Alpine Linux rebuilds GitLab after attempted CVE-2026-97229 exploit
Alpine Linux says an attacker tried to exploit the critical GitLab flaw CVE-2026-97229 on its unpatched instance on October 20 and 21. It found no evidence of success, but rebuilt the server from scratch and says its packages and releases were not tampered with.
- Meta plans up to $95 billion in stock sales to fund AI buildout
Meta plans to sell new stock to pay for its AI infrastructure, up to $95 billion in total according to The Information. Most of it, $60 billion, would come from a new non-voting share class.
- Factorized Vector Quantization: discrete visual tokens match continuous ones, authors say
A paper argues quantization error is a poor guide to what discrete visual tokens lose, and says its Factorized Vector Quantization (FVQ) matches continuous representations in multimodal understanding. Code and models are on GitHub.
- Apple launches 14-inch MacBook Pro with M6 chip
Apple's new 14-inch MacBook Pro with M6 claims up to 30% faster graphics and up to 25% faster AI workloads than M5, plus up to 24 hours of battery. Pre-orders open October 28; it arrives November 6.
- Memdoor workflow: Qwen3.8-27B team tops Fable 5 on 10 hard problems
A Memdoor example rebuilds the GVS5H multi-agent method on Qwen3.8-27B and scores 9.8 of 10 on the first ten LiveCodeBench Hard problems, against 8.0 for Fable 5 alone. The sample is small and contamination is not ruled out.
- Nvidia reportedly in talks to guarantee debt for Nscale's Anthropic data center
Nvidia is reportedly discussing a guarantee on billions in debt for Nscale's planned West Virginia data center, built for Anthropic under a $44.6 billion contract for the first building. The talks were reported by The Information and corroborated by Bloomberg.
- Type Server Protocol spec defines JSON-RPC access to Python type analysis
A documentation page in Microsoft's pylance-release repository specifies the Type Server Protocol (TSP), a JSON-RPC protocol that lets a client ask a type server for Python analysis data. It is still on the 0.x line, where minor versions may break.
- Ghostty 1.4 ships full Kitty graphics, lower memory and security fixes
The Ghostty terminal's 1.4.0 release adds animation and relative placements to its Kitty graphics support, compresses scrollback to cut memory, speeds up I/O on macOS, and fixes ten security advisories.
- tinyworldformer runs a looped-transformer game world model on a Raspberry Pi Pico 2 W
An open-source GitHub project fits two small neural networks on a Raspberry Pi Pico 2 W: a looped-transformer world model that generates each game frame and an actor that plays inside it.
- GPT-6.1 Sol agent swarms beat Claude Opus 5.5 in Bed Wars and Mindustry
A Y Combinator labs write-up, run with Olam Labs, put swarms of LLM agents into Minecraft and Mindustry. GPT-6.1 Sol won Bed Wars 6-3 and Mindustry 6-1 against Claude Opus 5.5, and a 50-agent colony huddled in shelters instead of thriving.