Thursday, October 22, 2026

Today’s biggest tech story centers on several critical cybersecurity incidents spotlighting widespread vulnerabilities and attacks. Amazon revealed early exploitation attempts of the PHP2Shell flaw starting October 17, days before the patch release, while security researchers uncovered a compromised intermediate certificate authority linked to eMudhra, which announced it will exit the global SSL/TLS certificate business following the incident. Railway disclosed a breach involving encrypted environment variables possibly accessed by third parties, urging customers to rotate secrets. Meanwhile, in AI, Anthropic launched Claude Duet, a proactive AI agent geared toward professionals and small businesses, joining the personal assistant race alongside Meta’s Muse and OpenAI’s Dots. Tesla marked a major milestone by starting production of its Optimus humanoid robot, despite reporting a 43% drop in Q3 profits amid heavy investment in AI and autonomy.

Security

• CVE-2026-111943: Compromised Intermediate Certificate Authority
  A critical certificate authority was compromised, triggering a swift response from eMudhra, who revoked the affected CAs within 14 hours and announced withdrawal from the global SSL/TLS market.
• Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure
  Amazon’s threat intelligence detected exploitation of PHP vulnerabilities days before the public patch release, highlighting advanced attacker capabilities and the limits of embargo protections.
• Security Disclosure
  Railway reported unauthorized access to encrypted environment variables and recommends rolling all secrets as a precaution while investigations continue.
• Several Linux kernel vulnerabilities accidentally posted to public mailing list
  Multiple high-severity Linux kernel flaws were mistakenly disclosed publicly ahead of patches, raising concerns about premature leak of exploits.
• Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched & Hackers Already Trying to Exploit Serious PHP Flaw
  Reports confirm that attackers actively probed and attempted exploitation of PHP2Shell vulnerabilities prior to the patched release; monitoring honeypots revealed ongoing malicious activity.
• 333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
  Attackers compromised over 300 Tor exit nodes to intercept SSH credentials and downgrade encrypted email traffic between Oct 2–5, exploiting infrastructure control gaps.

AI & Personal Assistants

• Claude Duet & Claude Duet app is Anthropic’s bet on agents & Anthropic's Claude Duet Agent Joins Muse, Dots in Personal AI Race
  Anthropic launched Claude Duet, an AI agent designed for professionals and small businesses that proactively manages tasks, integrates with thousands of plugins, and requires user approval for sensitive actions.
• OpenAI's latest AI models are coming to Google Cloud and Antigravity
  OpenAI’s newest GPT 6 and 6.1 series will be available via Google Cloud and integrated into Google's agent-based coding tool Antigravity, broadening enterprise AI access.
• The $15 billion ad-powered AI startup your doctor may already be using
  OpenEvidence, an AI platform assisting US doctors in diagnosis and treatment research, has achieved a $15 billion valuation, fueled by ad revenue and wide adoption.
• Year-old AI lab Flapping Airplanes raises $1B at a $6B valuation
  Flapping Airplanes, focused on data-efficient AI training with an advanced megakernel system, secured a $1 billion Series A round just nine months after launching.
• Recursive launches Flint, a laptop coding model it says was largely built by AI
  Recursive released Flint, a free, open-source 2.5B parameter code assistant model designed to run locally on laptops, developed with substantial AI-driven help supporting offline workflows.
• Does opting out of smart TV tracking work? Research finds “suspicious” traffic.
  Research shows Samsung, Roku, Vizio, and others continue sending data after users opt out of tracking on smart TVs, raising privacy concerns.

Hardware & Devices

• Tesla starts Optimus robot production in California as profit falls 43% & Just because Tesla’s Optimus is in production doesn’t mean it’s actually ready
  Tesla began early production of its humanoid robot Optimus but acknowledges ongoing development challenges in durability, AI, and safety amid a 43% profit drop in Q3.
• Tesla says it will start selling Cybercabs by end of year
  Tesla plans to offer its gold-colored autonomous Cybercab robots to customers by year-end despite ongoing safety investigations; currently used only in its own robotaxi fleet.
• SpaceX to attempt Starship catch on next flight, with eye on rapid cadence increase
  SpaceX targets attempting simultaneous catch of Starship stages on the upcoming 15th test flight, aiming for weekly Starship launches by early 2027 with FAA support for return-to-launch-site landings.
• Insta360 launches a cheaper version of its wireless mics with color screens
  Insta360 unveiled a $249.99 wireless mic system with AI noise cancellation and customizable E Ink screens, positioned between its Mic Pro and Mic Air products.
• Birdbuddy’s Nook is a compact smart bird feeder for small spaces and budgets
  Birdbuddy released the Nook, a $99 smart bird feeder with 2K HDR camera and AI species recognition, designed as an affordable, space-conscious feeder with solar charging options.
• Bose Is Buying Skullcandy. It’s Not as Weird as It Sounds
  Bose acquired lifestyle headphone brand Skullcandy, citing its strong community in board sports culture, adding to Bose’s portfolio alongside luxury audio brands.

Business & Industry

• eMudhra to Exit Global SSL/TLS Certificate Business
  Following a recent security incident involving its certificate authority infrastructure, eMudhra announced it will withdraw from the global SSL/TLS certificate market to focus on core enterprise solutions.
• Meta wants to pay for its broad AI buildout with a newly created class of stock
  Meta plans a non-voting stock class to raise capital for AI investments while preserving founder control, announced alongside strong Q3 revenue of $64 billion.
• Tesla profits drop 43% in Q3
  Tesla’s Q3 profits fell 43% to $787 million as automotive revenues declined slightly and operating costs surged due to heavy investments in AI and robots.
• Automattic begins layoffs following board upheaval and executive departures
  Automattic started layoffs after a board shakeup and executive exits, impacting communications, social, and enterprise business teams.
• Enterprise software upgrades waste 28% of budgets, survey says
  A survey found large enterprises spend 28% of software budgets on vendor-imposed upgrades disliked by their IT teams, with 95% admitting some were harmful to performance or value.
• RIP BioWare: EA shuts down storied RPG studio after over three decades
  Electronic Arts closed BioWare after 30 years, halting early development on the next Mass Effect, as part of a broader plan to focus on profitable franchises and live services.
• Blackstone’s Jas Khaira says fears over AI-buildout debt are overblown
  Blackstone’s AI investment lead emphasized the firm’s aggressive funding of AI infrastructure and compute, downplaying concerns about debt levels in the AI sector.
• Report: Musk ordered Starlink slowdown in Ukraine, then blamed it on Trump
  Investigations revealed Elon Musk personally directed throttling of military-grade Starlink speeds affecting Ukrainian drones, contradicting Musk and Trump’s public denials.
• Meta ordered to pay $25B in case related to Cambridge Analytica scandal
  A New Mexico jury ordered Meta to pay $25 billion over consumer protection law violations tied to the Cambridge Analytica scandal; Meta intends to appeal.
• Airbnb limits chores for guests, sparking backlash from hosts & Airbnb Bans Some Check-Out Chores: No More Taking Out Trash, Washing Dishes
  Airbnb updated its policy banning hosts from requiring guests to perform chores like washing dishes or taking out trash, effective for bookings after Nov 20, prompting criticism from hosts.
• Xbox wants you to pay 24 to 40 cents per hour to stream games you already bought
  Xbox introduced hourly cloud game streaming packs priced from $0.24 to $0.40 per hour for games already owned, a controversial shift from previous subscription offerings.
• Walmart Wants Your AI Agent to Shop for You, Unlike Amazon
  Walmart announced plans to support AI shopping agents with tools to authorize purchases and set spending limits, contrasting Amazon’s blocking of such activity.

Dev Tools & Performance

• Faster than earcut: triangulating 3.7M map polygons in 489 ms
  A new polygon triangulation library, earstrip, significantly outperforms earcut.js and earcut.hpp in both speed and efficiency for mapping applications.

Other

• Woman faces six years in prison over Cash App account she never opened
  Amanda Smith was falsely implicated in fraud involving a Cash App account created with her personal data, highlighting dangers of identity theft and opaque platform policies.
• How to Watch the New England Patriots vs. Chicago Bears Game for Free
  Tips on watching today’s Thursday Night Football game between Patriots and Bears for free via international streams and VPNs.

This digest covers the top developments on cybersecurity breaches, AI agent releases, Tesla’s robot production, and notable business shifts across tech giants.