Alvaro Lopez Ortega / 2026-10-20 Briefing

Created Tue, 20 Oct 2026 12:33:15 +0000 Modified Tue, 20 Oct 2026 12:34:01 +0000
4467 Words

A leaked Cellebrite document describes a 2026 Advanced Unlocks tool that unlocks iPhones after first unlock, works with Stolen Device Protection and uses an ~8-meter appliance; a commenter says Apple patched it. A Google Cloud outage hit European banks. Apple will invest up to $100M in titanium supplier Perryman for its $1,999 foldable iPhone Duo. Spotify launched paid podcast memberships in 34 markets, creators keep 90%. Otter.ai raised $320M.

🤖 AI & Infrastructure

Alibaba, Tencent, Huawei pour billions into Shaoguan data centers, angering locals

Alibaba, Tencent, and Huawei are investing billions in data centers in Shaoguan, a remote Chinese region with cheap power and a cool climate. Some residents hope the AI infrastructure push will bring a long-awaited economic boom, but the projects have also angered some locals.

Amazon to spend €16B+ in Germany in 2027 on AWS/AI data centers, satellites, video, robotics

Amazon pledged to invest more than €16 billion ($17.9 billion) in Germany in 2027, covering AWS and AI data centers, its Leo satellite program, and Prime Video production. It also plans to open a robotics lab in Berlin that would double its research staff in the capital.

London falls from 7th to last of 18 European capitals on mobile speed; 5G adoption outpaces capacity

London fell from seventh to last among 18 European capitals for median mobile download speed between 2021 and 2026, even as its median download speed rose to 109.43 Mbps in Q3 2026. 5G adoption has outrun capacity: London’s median 5G download speed dropped from 200 Mbps in Q2 2021 to 133 Mbps in Q3 2026, the slowest among the 18 capitals. Adding network capacity has also become harder, with London street-mast applications down more than four-fifths since 2022 and almost three in four decided since 2019 refused.

OpenAI cites major gains in legacy COBOL, Fortran, Visual Basic for banks, govs

OpenAI says its latest models significantly improve coding capabilities for low-resource legacy languages such as COBOL, Fortran, and Visual Basic, which support critical banking and government systems. On its MultiLangBench, GPT-6 Astra reached an 87.4% average pass rate across 20 languages versus 26.8% for GPT-5.6 Sol, while GPT-6.1 Sol achieved 86.6% accuracy on COBOL migration at low reasoning effort versus 5.4%, rising to 97.9% at higher effort. OpenAI says these gains could help teams maintain and modernize essential software at lower cost.

AMD GAIA 0.25 Brings Several Improvements For Local AI Agents On Ryzen AI

AMD has released GAIA 0.25, an update to its open-source project for building and using local AI agents on Ryzen AI hardware. The release defaults gaia chat to the flagship GAIA agent, adds transcription and speech for gaia talk via AMD’s Lemonade server with Whisper and kokoro-v1, and cuts the Windows Python environment from about 0.9GB to 0.1GB. It also checks free RAM before loading models to shrink the context window and avoid first-launch out-of-memory failures on 16GB systems, alongside agent/model, Windows, and Strix Halo optimizations.

Make AI coding agents verify its own work

Reticle is a dev-only SDK and toolset that lets AI coding agents verify changes by driving the running app, observing requests, responses, state, console output, and source lines, then returning a pass/fail/cannot-tell verdict with file:line evidence. It addresses coding agents’ tendency to assume success without opening the app, which can let broken UI, silent errors, and failed deploys ship. In a demo, an agent claimed a fix worked while Reticle caught a double charge and named the responsible source line.

People are using AI to make smart TVs, dumb TVs

Developers are using AI coding agents to create tools like “dumbtv” and “cleanyourtv” that strip ads, bloatware, tracking, and unwanted launchers from smart TVs, making interfaces faster and more customizable. These hacks are spreading across Android/Google TV and Fire TV devices and could disrupt the smart-TV ad industry, though the projects remain works in progress.

🔒 Security & Privacy

Possible new Cellebrite iPhone Radio Zero-Day

A leaked confidential Cellebrite document describes Advanced Unlocks (AU), a new 2026 product that Cellebrite calls a next-generation after-first-unlock vector more resilient to Apple OS changes. It reportedly works with Stolen Device Protection enabled and is enabled by a dedicated appliance with an approximately 8-meter range. A commenter in the report says Apple has patched the issue and urges users to update their devices.

Setting up SSH keys on macOS with Touch ID

The article explains how to set up Touch ID–protected SSH authentication on macOS using an identity stored in the Secure Enclave, with commands to create the identity, configure SSH, and register the public key with services like GitHub. It notes that the private key cannot be extracted or stolen but will be lost if the Mac dies, requiring a new identity and re-registration.

Four Z.ai founders joined 2018-21 project co-funded by CGTRI, which MI5 tied to China spy agency

Four founders of Chinese AI company Z.AI worked on a nearly four-year AI research project co-funded by the China General Technology Research Institute (CGTRI), which the UK’s MI5 has said has “very strong ties” to China’s main spy agency. The project overlapped with Z.AI’s 2019 founding, and a CGTRI engineer and one Z.AI founder were among its leaders, with three other Z.AI founders contributing.

Google’s selfie video sign-in puts your face on its servers

Google’s selfie video verification stores a reference recording of your face on its servers and compares a new selfie video when you need account recovery. The article warns this creates privacy risks around retention, potential AI training, and government data requests, noting deletion is not immediate and Google does not offer an on-device-only option.

Trump Appointees Asked a Federal Agency to Acquire a Voting Machine and Hack It

Political appointees at DHS asked CISA to secretly acquire and hack a voting machine and report findings to the White House, shocking career staff who feared political interference; the request was not carried out. The Trump administration has since cut CISA’s staff and funding and largely abandoned its election-security support, leaving state election officials without federal assistance ahead of the midterms.

France’s supermarket fridges were vulnerable online for months

France’s supermarket fridges were left vulnerable online for months, according to the article. It references a related report about hackers activating automatic defrosting in supermarket fridges across Europe. The provided content contains no further details.

Someone allegedly offered €100,000 to bury German AfD party email leak

A hacker claims to have breached Germany’s far-right AfD party, stealing over 421,000 emails and 100,000 files, and says someone offered €100,000 to take the leak site offline. AfD confirmed a September 2026 cyber incident involving a hosting provider but did not disclose the extent of any data theft, and the leaked emails’ authenticity remains unverified. Researchers examining the leak site reported alleged emails containing Nazism, racism, antisemitism, and political violence.

Feds say ransom negotiator actually ran ShinyHunters extortion site

US investigators suspect executives at two ransomware-negotiation firms collaborated with ShinyHunters, with one allegedly helping operate its Shinywire extortion site that listed nearly 100 hacked organizations. ShinyHunters members were arrested in the Netherlands and Jordan, and the Jordanian suspect began cooperating with the FBI. A 54-year-old Canadian cybersecurity executive, Edward Dubrovsky, was later charged with extortion-related offenses, while the Justice Department is also pursuing negotiators accused of secretly paying hackers or aiding extortion schemes.

Citizens Bank data exposed: here’s what customers need to know

Citizens Bank notified customers that an unauthorized third party accessed personal data including names, Social Security numbers, birth dates, emails, and phone numbers; it says it found no evidence of misuse, has remediated the issue, and is offering affected customers two years of credit monitoring and identity protection. This is the bank’s second cyber incident in 2026, following an April breach involving a third-party vendor.

☁️ Cloud & Outages

Google Cloud outage hits European banks

A Google Cloud outage in its London europe-west2 region began shortly after 7 a.m. UK time and disrupted Revolut and UK banking services including Lloyds, HSBC, Halifax and Bank of Scotland, causing failed payments and app access issues. Google reported a “power event” and multiple-service issue with elevated errors and intermittent network failures, apologized, and advised customers to migrate services to other regions “if feasible.” HM Courts and Tribunals Service, the NHS and DPD also reported issues, though not all links to Google Cloud were confirmed, and no clear resolution timeline was given.

Google Cloud Outage Affects Banks, Websites

A Google outage disrupted websites and apps and reportedly took down banking services, with some bank customers reporting issues. Google said services were recovering, it was prioritizing existing workloads, and full recovery was expected shortly.

Revolut payment and app is down

The title reports that Revolut’s payment service and app are down. The article itself provides only Revolut’s regulatory and corporate information, including FCA/PRA authorisations and registered addresses, and directs users to FAQs or in-app chat. It gives no further details about the outage.

GCP Europe-West2 Outage

Users are reporting issues in Google Cloud’s europe-west2 region. A link to Google Cloud’s regional status page was provided for updates.

Revolut down – Global ATM withdrawals and bank transfers failing

Revolut has been experiencing an outage for nearly an hour, with ATM withdrawals failing across multiple countries, bank transfers not working, and various app failures. Although Revolut’s status page still shows all systems operational, the company has confirmed the issue in replies on Twitter.

Google Cloud networking is down in various regions

Google Cloud networking is experiencing outages in various regions. The europe-west2 region is down, and multiple other European and African regions are facing severe issues.

🐧 Open Source & Dev Tools

Sumi.css - classless-first CSS framework

Sumi is a classless-first CSS framework featuring fluid responsive typography and a shared spacing rhythm for text content. It also provides reusable UI components, grid and flex layout helpers, and CSS custom-property theming with light and dark modes.

BFS Removed With Linux 7.4 As Old UnixWare File-System

BFS, the legacy UnixWare file-system used for boot partitions, has been removed from the Linux 7.4 kernel. The removal follows other unmaintained file-systems such as FreeVxFS and EFS, with no known active users and only AI/LLM-generated patches or fuzzing reports in recent history. The patch removes about 1,200 lines of driver code while keeping the UAPI header.

KDE Plasma 6.8.1 Released With Dozens Of Fixes

KDE Plasma 6.8.1 has been released as the October bug-fix update following Plasma 6.8, bringing dozens of mostly small fixes. These include a possible KWin QPA crash fix, several Wayland fixes, an NVIDIA multi-GPU swapchain workaround, and various Plasma desktop and workspace fixes.

Omarchy 4.5 Expanding To AArch64 World With Snapdragon X & NVIDIA N1X Laptops

Omarchy 4.5-RC1 has been released with initial AArch64 support targeting Snapdragon X and NVIDIA N1X laptops. It was tested on the Dell XPS 16, ASUS ProArt P14, Lenovo Yoga Slim 7x, and Lenovo ThinkPad T14s, with Snapdragon support often requiring firmware from Windows partitions; Omarchy is also folding its Mac fork into the main project as it eyes Apple Silicon support.

Linux 7.4 Adding New Emulation Function While Some Old CPUs May Soon Be Phased Out

Linux 7.4 is adding a cmpxchg_emu_u16() emulation function for two-byte compare-and-exchange so common kernel code can assume support across architectures. The function is used by the SH, ARC, CSKY, and Xtensa ports, though the pull request notes that some older systems without native two-byte store instructions may soon no longer be supported by Linux.

DeepSeek just open-sourced its inference engine

DeepSeek has open-sourced DeepInfer, a high-performance inference framework for offline serving of DeepSeek-V4.1-Flash, featuring optimized kernels, parallelism, DSpark verification, asynchronous scheduling, batch-invariant inference, deterministic sampling, and structured outputs. It supports NVIDIA SM100 GPUs and Huawei Ascend 950 NPUs, but a complete inference service still requires KV cache, disaggregation, and data-parallel load-balancing components not included in this release.

There is no official XScreenSaver GitHub repository

XScreenSaver author jwz says there is no official public source code repository; releases are published only as tar files on the official website. Any XScreenSaver repositories elsewhere, including GitHub, are unrelated and should not be trusted. Submissions and change requests are accepted via email.

Vite+ an excellent toolchain for AI agent development

After three weeks using Vite+ across four projects, the author recommends it for new Vite apps: have agents create projects with vp create and verify work with vp check, vp test, and vp build so agents, developers, and CI share one workflow. For existing projects, vp migrate is only the start and requires reviewing diffs, tests, and build behavior. The author stresses concrete agent instructions, one consistent toolchain and lockfile, and running the same checks in CI to avoid local/CI mismatches.

MicroG: Free-libre re-implementation of Google’s proprietary Android user space

microG GmsCore is a free, open-source reimplementation of Google Play Services that lets apps calling proprietary Google APIs run on AOSP-based ROMs such as LineageOS while offering privacy and freedom benefits. It requires Android signature spoofing and includes the Unified Network Location Provider (UnifiedNlp) module; a full setup also requires a Play Store replacement app such as microG Companion.

Death Plan Switch, a self-hosted dead man’s switch for solo devs

Peter Bishop has launched Death Plan Switch, a free, MIT-licensed, self-hosted dead man’s switch for solo developers that alerts the right people if he goes missing or dies so his business can continue serving clients. He built it after being hospitalized in 2012 and losing his business because data could not reach his technical second-in-command in time. The tool was authored with Claude Code after an extensive Markdown document and passed 42 unit tests.

Lights-on software factory boilerplate for Claude Code

A new boilerplate provides a starting point for running a lights-on software factory with Claude Code. It is based on a setup developed for Votito, where the orchestrator cut token costs by around 80% compared with bare-bones Claude workflow execution.

Developing Taste

The article argues that in commoditized software, taste—not basic functionality—is the key differentiator. It advises developing a trained instinct by studying admired tastemakers, analyzing why great work succeeds, practicing one’s craft, and seeking feedback. It also notes that early work may be weak because taste outpaces skill, which is a normal stage.

📊 Tech Business & Policy

Apple commits up to $100M over 3 years to titanium supplier Perryman, expands Qnity partnership

Apple will commit up to $100 million over three years to Pennsylvania-based Perryman Company to produce titanium for its $1,999 foldable iPhone Duo, and it is expanding a partnership with Delaware-based Qnity Electronics to make camera films for the iPhone 18 Pro as part of a broader U.S. manufacturing push. The Duo is facing severe supply constraints and long delivery waits, with JPMorgan estimating 8 million–9 million shipments this year, below earlier expectations of about 10 million.

Otter.ai raises $320M non-dilutive from GC Customer Value Fund; prior $50M

Otter.ai raised $320 million in non-dilutive capital from General Catalyst’s Customer Value Fund, after previously raising $50 million according to PitchBook. The meeting note-taking startup said it has surpassed $100 million in annual recurring revenue and 40 million users to date, and will use the funds for enterprise growth, go-to-market strategy, international expansion, and product innovation. It is expanding beyond transcription into meeting insights, search, integrations, and features such as pre-briefs and Live Assist.

AI safety advocates criticize leaked Anthropic bill as weaker than bipartisan FRONTIER Act

A leaked federal AI bill circulated by Anthropic is drawing widespread criticism from AI safety advocates, who say it is significantly weaker than the bipartisan FRONTIER Act. The draft lacks standards for third-party evaluators, makes it harder to block dangerous models, and would preempt some state frontier-AI laws while limiting state courts and legislatures from suspending models on catastrophic-risk grounds. Critics argue it makes Anthropic’s safety-first pitch ring hollow and could forestall stronger regulation.

Estonia’s Blackwall raises $100M Series C led by AVP at $2.2B valuation

Estonia-based Blackwall, which provides web traffic security tools for hosting providers, has raised a $100 million Series C led by AVP at a $2.2 billion valuation. The round follows a $49.2 million Series B in March 2025 and reportedly quadrupled the company’s valuation. Blackwall sells through hosting, managed service, and cloud providers, helping them filter bot and AI-agent traffic and offer branded security tools to customers.

US sanctions ex-Microsoft exec Lu Qi’s VC MiraclePlus over alleged Zhisuan ties to Google AI theft

The US has sanctioned MiraclePlus, a Chinese venture firm founded by former Microsoft AI scientist Lu Qi, and three affiliates over seed funding to Shanghai Zhisuan Technology. Zhisuan was founded by former Google engineer Ding Linwei, who was convicted this year of stealing Google AI trade secrets. The State Department said the measures may include freezing US assets and banking restrictions.

UK Defence Startups Are Being Denied Banking Services Under ESG Rules

Despite UK government backing for defence spending, defence start-ups are encountering banking compliance obstacles driven by AML rules and overzealous ESG screening. Eyebrook Technologies was denied accounts by Barclays and other banks before securing one after direct CEO intervention, and the issue has been raised in Parliament with calls for government support and less excessive caution in financial services.

Albertans have rejected referendum on independence

Albertans rejected an independence referendum, with Prime Minister Mark Carney urging unity and stressing Alberta’s oil wealth as central to Canada’s trade diversification amid a trade war with the US. Carney highlighted a proposed Pacific pipeline to open Asian markets and framed Canada as a global energy superpower with Alberta at its core.

Americans Are Spending More Money to Drive Worse Cars

High gas prices are accelerating EV and hybrid adoption worldwide, but U.S. EV sales remain low at 6.4% of new cars, with hybrids instead capturing much of the demand (up 27% year over year). The article attributes sluggish U.S. EV adoption to high prices, limited model choices, charging and brand concerns, and policy barriers such as the effective ban on Chinese-made EVs.

U.S. Supreme Court to review 1868 federal ban on home distilling of liquor

The U.S. Supreme Court agreed to review the constitutionality of an 1868 federal ban on home distilling, which the Trump administration defends as a tax-revenue measure and challengers argue exceeds congressional authority. The case follows a split among federal appeals courts, with more than a dozen Republican-led states backing the challenge, and a ruling is expected by the end of June.

Novo Nordisk, Eli Lilly Report GLP-1 Signals of Slowed Biological Aging at ARDD

Novo Nordisk and Eli Lilly presented early ARDD data suggesting semaglutide and tirzepatide may slow molecular measures of biological aging. Novo’s 10,052-person proteomic-clock study found roughly 2–3 years’ difference overall and up to 4 years on a heart-protein clock, while Lilly’s SURMOUNT-5 epigenetic substudy found all 15 age clocks showed less aging than the 1.38 years of elapsed time.

Canada’s Telesat plans to launch its Lightspeed low-Earth-orbit broadband network in early 2028 for government, telecom, and defense customers, backed by a CA$2.3 billion Canadian contract to improve secure military communications, especially in the Arctic. Telesat says it may extend Lightspeed services to Ukraine and other NATO/allied partners as concerns grow over reliance on SpaceX’s Starlink. Unlike Starlink, Lightspeed will not focus on consumer and commercial applications, and its first satellites are planned for December 2026.

PlayStation father backs Sony’s disc-less move, says gamer fury isn’t fully logical

Former Sony CEO Ken Kutaragi backs Sony’s plan to end physical game releases by 2028, saying digital distribution is economically inevitable and that gamer backlash is partly a “mentality issue.” Critics fear digital purchases give companies too much control over access, while the proposed Power to the Players Act would require FTC rules protecting consumers’ ability to own and play purchased games.

Netherlands sees the number of cybersecurity firms skyrocket amid rising threats

The number of registered cybersecurity companies in the Netherlands has risen to 962, up from 233 in 2021 and just over 100 in early 2020. Rising cyber threats, stricter regulations such as GDPR and NIS2, and faster AI-assisted vulnerability detection have driven demand for services including security advice, forensic investigations, and employee training. The NCSC stresses that businesses and organizations remain responsible for managing their own cybersecurity.

🌐 Digital Society & Platforms

Spotify paid podcast memberships launch in 34 markets incl US; creators can offer perks, keep 90%

Spotify has launched paid podcast memberships in 34 markets, including the U.S., letting creators offer perks such as bonus content, fewer ads, and early access. Creators keep 90% of membership revenue and can use multiple tiers and pricing options; eligible shows must be hosted on Spotify for Creators or Megaphone and meet minimum listener, listening-hour, and episode thresholds.

Pew: 20% of US adults regularly get news on TikTok, up from 3% in 2020

A Pew Research Center survey found that 20% of U.S. adults regularly get news on TikTok, unchanged from 2025 but up sharply from 3% in 2020. Regular news consumption on TikTok is especially common among younger adults, at 39% of those aged 18 to 29 and 25% of those aged 30 to 49.

Lula supporters protest against Meta to denounce its ’electoral interference'

Supporters of Luiz Inácio Lula da Silva protested against Meta to denounce what they called its “electoral interference.” The demonstration targeted the tech company over the accusation.

Game decompilation site is closing because AI has ‘broken the community aspect’

Decomp.dev, a major site indexing video game decompilation projects, is shutting down because AI misuse has “broken the community aspect” of decompilation, its creator said. While AI can be used ethically to speed decompilation, bad actors have forked open-source projects and rushed AI-assisted “finished” ports, undermining collaborative work and research-focused decompilation.

Some Google Home Speakers download excessive amounts of data, the company says it’s on it

Some Google Home speakers have been downloading hundreds of gigabytes of data in the background, with users reporting cases such as 300GB in 30 days and 294GB down with 544GB up. Google says a fix is already rolling out, but the cause and how widespread the issue is remain unclear.

Fake AI photos of elderly couple “robbed” in France riots spark outrage

Two AI-generated images falsely claiming to show an elderly couple stripped and robbed during French unrest spread widely on X through far-right accounts, gaining millions of views. France 24 used SynthID to confirm the images were AI-generated and traced one to a montage published by a pro-Israel website. The real protests began in September over school staff shortages and poor conditions before expanding to cost-of-living, fuel, and health service grievances, with some violence and looting.