Yearly Archives: 2026 - Page 110

A hijacked release of the tensorlake npm package stole tokens and AI-tool config files, and booby-trapped the stolen GitHub token so that revoking it wipes the victim's home folder. The same week, GitHub made local sandboxing for Copilot generally available, Bitdefender released a free agent guard for macOS, and Citadel AI opened early access to agent monitoring. LangChain and past.dev shipped agent tooling with access controls built in. What each one confirms.

On 6 October OpenAI launched a Decisions API that returns yes/no probabilities, picks and rubric scores from GPT-6 Luna, and cut its API usage tiers from five to three. Perplexity released pplx-decider-v1.1-27b, an Apache 2.0 open-weight decision model. What decision models are, what each costs, and which scores are the vendors' own.

Arizona’s courts confirm data on 1.3 million people was copied; ccTLD registry hijacks let attackers obtain certificates for Google and other domains; exploitation attempts follow a public Atlassian PoC; Yoido Full Gospel Church confirms 850,000 members’ data exposed; the Double Counter Discord bot is breached; a MonsterCloud owner is charged; and the US offers $10m for accused HAFNIUM hacker Zhang Yu. Confirmed vs alleged, case by case.

Bitcoin slipped below $83,000 as Brent rose above $102 on an Iran strike-plan report, a day after about $550m of leveraged bets were liquidated. Robinhood added $25m of bitcoin to its balance sheet, and Ledger launched self-custodial bitcoin-backed loans via Morpho. What happened, what each move means, and the risks. No price predictions.

Europol’s cybercrime centre says the quantum threat to crypto sits with exposed wallet keys, not blockchains, and urges a phased upgrade now. Separately, Ethereum researcher Justin Drake calls for “bunker mode” over AI-driven maths, with Vitalik Buterin backing caution. What is analysis, what is opinion, and what has not been broken.

Coinbase linked US firms to Deribit, Russia registered its first crypto firms, and French Hill said agency rules are no substitute for law.

Samsung Wallet will support USDC transfers on Solana for US Galaxy users from late October, with Coinbase custody; Moody’s has assigned Sky Protocol, issuer of USDS, a B3 rating, its first for a stablecoin protocol. What each step confirms, and what a speculative-grade rating does and does not say.

Kazakhstan’s central bank signs an exploratory MoU with Tether; Binance accepts four tokenised securities as margin collateral at a 50% ratio; GSR commits $100m to Hare’s onchain vaults; Orca and Loopscale merge as Formation. What is confirmed, what is only planned, and what each step does not prove.

Theta EdgeCloud will supply GPU compute to Weaver Labs' stadium edge platform; AkashML is a launch supplier for Architect's Liquid Inference auction; Fluence says it signed a $2.4M WorldEngine contract; peaq and dualmint say 200 tokenised claw machines are fully funded. What each company says, and what is unverified.

AirTrunk is adding $1B to its 300MW+ TOK1 campus in Japan for liquid-cooled AI, backed by a green loan. In Finland, the regulator has told Google's subsidiary to stop groundwork at two data-centre sites until environmental reviews finish. What each confirms and what it shows about where AI infrastructure can be built.