AI
Anthropic’s Claude gets computer use capabilities in preview
The feature was launched today as a research preview for Claude Pro and Max subscribers, and it notably pairs with Dispatch, which is a mobile tool that debuted last week. With Dispatch, users can assign tasks to Claude from their smartphone, and have it complete those assignments using their computer.
Anthropic explained that when Claude is given a task to complete, it will look to see if it has the right integrations to perform it using tools such as Google Calendar and Slack. But if it doesn’t have the right connector, it will fall back onto controlling the computer like a human does, using the screen to navigate. It can open files and documents, operate a web browser and run development tools autonomously.
OpenAI rolls out ChatGPT Library to store your personal files
It allows you to store your personal files or images on OpenAI's cloud storage, and they can be used for reference in a future chat.
This Android brand is launching the first true OpenClaw-powered AI agent on a phone
OpenClaw will soon automate mundane tasks on TECNO phones with agentic capabilities.
Claude attacks were 'Rorschach test' for infosec community, scaring former NSA boss
The now-infamous Anthropic report about Chinese cyberspies abusing Claude AI to automate cyberattacks was a Rorschach test for the infosec community. 'It freakin' worked' says Rob Joyce - and shows how relentless AI agents can find holes humans miss.
Mark Zuckerberg builds AI CEO to help him run Meta
Meta’s tools include ‘Second Brain’, designed to search and organise company documents, and ‘My Claw’, which can communicate with other colleagues’ AI agents on their behalf.
There's a new trend in Silicon Valley known as ‘Tokenmaxxing’--using AI as much as possible while they work.
Inside the grind: The SF startup racing to build an AI software engineer
Cognition calls Devin the world’s first AI software engineer — an agent that can build software from start to finish without human involvement.
Walmart: ChatGPT checkout converted 3x worse than website
Starting in November, Walmart offered about 200,000 products through OpenAI’s Instant Checkout. Users could complete purchases inside ChatGPT without visiting Walmart’s site.
It was a failure. Conversion rates for purchases made directly inside ChatGPT were three times lower than when users clicked through to its website. The experience was unsatisfying.
GitHub adds AI-powered bug detection to expand security coverage
It offers code scanning for known vulnerabilities, dependency scanning to pinpoint vulnerable open-source libraries, secrets scanning to uncover leaked credentials on public assets, and provides security alerts with Copilot-powered remediation suggestions.
Politics
The US just pulled the plug on ALL foreign-made Wi-Fi routers
The FCC has blocked new foreign-made Wi-Fi routers from getting approval, effectively banning them from the US market.
Brands must now clear strict national security checks to launch new router models in the US.
It's not just vaccines — parents are refusing other routine preventive care for newborns
One day at an Idaho hospital, half the newborns Dr. Tom Patterson saw didn't get the vitamin K shots that have been given to babies for decades to prevent potentially deadly bleeding. On another recent day, more than a quarter didn't get the shot. Their parents wouldn't allow it. Tefusals of vitamin K shots nearly doubled between 2017 and 2024, from 2.9% to 5.2%.
Parents who decline vitamin K shots are much more likely to refuse getting their newborns the hepatitis B vaccine and an eye ointment to prevent potentially blinding infections.
Before injections became routine, up to about 1 in 60 babies suffered vitamin K deficiency bleeding, which can also affect the gastrointestinal tract. Today the condition is rare, but research shows that newborns who don't get a vitamin K shot are 81 times more likely to develop severe bleeding than those who do.
US to pay TotalEnergies $1 billion to stop developing offshore wind in US
Intuit beats FTC in court, ending restrictions on “free” TurboTax ads
TryHackMe Built an AI Pentester Using Your Data : Here’s Why I’m Not Deleting My Account (Yet)
TryHackMe launched NoScope ; an AI-powered penetration tester trained on seven years of user behavior data: every attack box session, every room completed, every technique practiced. When asked directly about AI training on user data prior to the launch, TryHackMe denied it. Then NoScope launched with that marketing copy. You can understand why people felt blindsided.
Republicans in Congress add $250 annual federal EV tax to transport bill
Federal highway spending is funded by taxes that drivers pay when they buy gasoline (or diesel), and since EVs don’t use any fuel, they don’t contribute to maintaining the roads.
Chinese Orbiter Crushes Starlink With a 2-Watt Laser From 36,000km Above Earth
Using a 1.8-metre telescope and a correction stage using 357 micro-mirrors, they achieved a 1 Gbps downlink.
BART: The worst-case scenarios are actually worse than you’ve heard
Without more funds, BART will close.
The Treasury just declared the U.S. insolvent. The media missed it
The numbers: $6.06 trillion in total assets against $47.78 trillion in total liabilities as of September 30, 2025. To avoid ruin, Congress would need to pass fiscal bills, which they almost certainly won't.
Gas sold for 59 cents in Fresno, hacking suspected
Infosec
Novel WebRTC skimmer bypasses security controls at $100+ billion car maker
What sets this attack apart is the skimmer itself. Instead of the usual HTTP requests or image beacons, this malware uses WebRTC DataChannels to load its payload and exfiltrate stolen payment data. WebRTC (Web Real-Time Communication) is an open-source technology enabling web browsers and mobile apps to exchange audio, video, and data directly peer-to-peer (P2P) in real-time without plugins WebRTC DataChannels run over DTLS-encrypted UDP, not HTTP. Network security tools that inspect HTTP traffic will never see the stolen data leave.
Self-propagating malware poisons open source software and wipes Iran-based machines
After infecting a machine, the malware scours them for access tokens to the npm repository and compromises any publishable packages available by creating a new version laced with the malicious code. Aikido observed the worm targeting 28 packages in less than 60 seconds.
This Company Is Secretly Turning Your Zoom Meetings into AI Podcasts
WebinarTV, a company that bills itself as “a search engine for the best webinars,” is secretly scanning the internet for Zoom meeting links, recording the calls, and turning them into AI-generated podcasts for profit. In some cases, people only found out that their Zoom calls were recorded once WebinarTV reached out to them directly to say their call was turned into a podcast in an attempt to promote WebinarTV’s services.
After hackers hit an Iowa company, cars around the country failed to start
After a DUI conviction, many states require the use of an ignition interlock that measures alcohol levels before allowing the vehicle to start. One brand, Intoxalock, stopped vehicles because their servers were hacked in March.
Security credentials inadvertently leaked on thousands of websites
The researchers analysed 10 million web pages and found over 10,000 that leaked API credentials.
The exposed credentials remained publicly accessible for an average of 12 months, with some online for as long as five years. The majority of those credentials exposed – some 84 per cent of those found – were discovered within JavaScript environments, something the researchers believe may be a consequence of software developers using bundler tools to package their code in a way that can be used online.
|