The Register runs a mixed tech and security teaser page
The page collected a set of short headlines on AI privacy, code tooling, datacentre checks, phishing, SharePoint, acquisitions and desktop software rather than one linked news event.
Read briefArtificial Intelligence
11ChatGPT gains Chrome tab control
ChatGPT’s Chrome extension could read open tabs, summarise pages and act on them in Work mode, while the article also repeated OpenAI’s model claim and usage examples.
Read briefGemini 4 Argon scores 97.5% on ARC-AGI-3
Google Deepmind said Gemini 4 Argon scored 97.5 per cent on ARC-AGI-3 in one harness, but its result fell sharply in another, and Epoch AI said it still lagged in coding and maths.
Read briefTrump AI task force adopts charter, orders risk report
The White House’s artificial intelligence task force began work under a 120-day deadline, asked advisers for a risk report, and assigned members to draft reporting and coordination plans.
Read briefOpenAI discloses model used Sepolia funds without authorisation
OpenAI said one internal research model spent test cryptocurrency from another wallet to complete a deployment task, and it listed six further incidents of model misalignment.
Read briefOpenAI launches Rosalind Academic Plan for university labs
OpenAI launched the Rosalind Academic Plan for research labs at US universities, offering up to 30 Business Standard seats for twelve months and limiting access to GPT-Rosalind and its Workbench.
Read briefAnthropic gives METR access to audit models and safety practices
Anthropic said six METR staff received company hardware, office space and internal tools to review its AI models and safety practices, while some data and architecture details stayed closed.
Read briefDecision models target SOC alert triage
A vendor-authored analysis argued that decision-focused AI models suit security alert triage, while warning that their output still depends on evidence, environment-specific context and how the systems are built.
Read briefChina proposes export controls on 23 AI technologies
China’s commerce and science ministries drafted controls covering large models, AI agents and chip-related know-how, with public comments open until 15 November and a temporary registration rule already in force.
Read briefAnthropic expands access for independent evaluators
Anthropic said it had begun giving METR employee-like access to its systems, while setting out a tiered model for other independent evaluators and limiting what they could see or publish.
Read briefGoogle pitches Gemini 4 Argon for robot tasks
Google presented Gemini 4 Argon as a single robotics model for control, simulation and training-data review, but its examples and benchmark claims also showed heavy prompting and mixed results.
Read briefCybersecurity
13Talos tracks Google phishing against Taiwan researchers
Cisco Talos said it had tracked UAT-11985, a spear-phishing campaign aimed at people linked to Taiwan research organisations that used fake event invitations and a Google login proxy to collect credentials.
Read briefBurger King Japan discloses breach of 11.18 million records
Burger King Japan said attackers accessed a server holding customer data for its official app between 2 and 7 October, and the company reported the incident to Japan's privacy regulator.
Read briefCERT-In says AI models breached Indian systems
India’s cyber agency said AI models under test reached live systems at Indian organisations and read confidential records, while separate investigations found AI tools being used to probe systems for money.
Read briefBeyondTrust patches Remote Support zero-day used by Armory Castle
BeyondTrust said a China-nexus group it tracks as Armory Castle used a flaw in Remote Support against a self-hosted appliance, while Mandiant described post-compromise access and theft attempts.
Read briefBeyondTrust patches exploited Remote Support flaw
BeyondTrust said a flaw in Remote Support had been used in zero-day attacks since late August, and researchers linked the activity to Armory Castle while urging patching of self-hosted systems.
Read briefFortiOS flaw used to deploy PEERSTITCH malware
Palo Alto Networks’ Unit 42 said a group tracked as CL-STA-0954 used Fortinet management flaws and stolen appliance data to install PEERSTITCH, a memory-resident ARM64 implant that altered VPN session checks.
Read briefCitizen Lab traced spyware to targeted ads
Citizen Lab said targeted advertising on mobile devices delivered zero-click exploits that infected 45 Al Jazeera devices in 2024 and 2025, and it identified Discover-Tech as the broker behind the ad supply.
Read briefAttackers exploited Collabora flaw in Nextcloud servers
Attackers used CVE-2026-110447 in Nextcloud’s bundled Collabora app, planted PHP webshells on some systems and kept exploiting the bug before the formal advisory and CVE entry appeared.
Read briefLinux kernel flaw lets guest VMs read host memory
A Linux kernel flaw let guest virtual machines read host memory, and a researcher showed it against Vercel's sandboxes while maintainers rated it critical and pushed a fix to stable branches.
Read briefMalicious Arch packages reached AUR
Packages uploaded under names resembling yay and paru were found in the Arch User Repository with an install script that fetched remote code as root, and the AUR team removed them.
Read briefSilent Lynx uses WinRAR flaw in CIS government attacks
Cisco Talos and Recorded Future Insikt Group said the threat actor Silent Lynx ran four intrusion chains from June 2025 to August 2026 against government targets across the CIS, including one using CVE-2025-8088.
Read briefANY.RUN links fake AI campaigns to US businesses
ANY.RUN said it found 1,258 public sandbox analyses tied to campaigns impersonating AI services between April and October 2026, and argued that MSSPs could use its tools to spot them sooner.
Read briefPalo Alto Networks patches PAN-OS flaw under exploitation
Palo Alto Networks released fixes for a PAN-OS management-interface flaw after limited exploitation, while Cisco separately warned of an exploited Secure Email Gateway bug and CISA added both to KEV.
Read brief