Ubuntu 26.10 “Stonking Stingray” arrives as an interim release with nine months of support, Linux 7.3, GNOME 51, Rust coreutils, post-quantum package signing, TPM encryption, and Myna speech-to-text. Seven stable kernels—7.2.11 through 5.10.272—fix critical CVE-2026-99999 in skb_checksum_help(), so upgrade. At LPC, Android vendor hooks remain key for out-of-tree device changes.
GitLab urged immediate patching of a maximum-severity CI/CD regex flaw (CVE-2026-97229) that can let unauthenticated attackers execute code; fixes are in 19.2.8, 19.3.4, and 19.4.2. A test of 25 package managers found many miss repository tampering, while Go 1.27 cut HTTP/1 reuse benchmark time nearly 5x. Anthropic’s Scion faces plagiarism claims for omitting Mononoke attribution. Epic rebuilds Easy Anti-Cheat for Linux with eBPF/systemd.
Intel released ISPC 1.32 with AVX10.2/APX and AMD Zen 6 support. Linux kernel developers plan to drop the “Assisted-by” AI disclosure tag after maintainer consensus. Firefox 159 beta fixes Wayland tab detaching and adds sidebar passwords. Linux Mint 27 targets a Christmas release with Ubuntu 26.04 and Wayland gains. ONLYOFFICE 10.0 debuts AI tools plus 1,000+ fixes. NVIDIA’s Nova continues leading Rust GPU driver work.
The FBI arrested a suspect in the ShinyHunters breach that stole FBI agent data. A cyberattack on remote refrigeration systems hit hundreds of French supermarkets, spoiling food and causing millions in losses. Daiichi Kosho warned 8.7 million customers may have been exposed. WhatsApp is testing login blocks for outdated phones. Python 3.15 arrived with lazy imports and a new profiler. The ALCS begins Oct. 12.
A Booz Allen report warns autonomous AI attacked all eight operational-technology test scenarios, breaching industrial controls in minutes, leaving critical infrastructure defenders little time. Separately, OpenAI fired safety researchers before cutting its annualized revenue estimate to ~$50B from ~$70B, hitting suppliers. Britain’s PM said Russia clearly interfered in the 2016 Brexit vote, warning of similar disinformation in Europe.
AI-decompiled browser ports of Halo, GTA Vice City and others are flooding the web, raising publisher IP alarm as takedowns struggle. Nvidia is reportedly in talks to acquire Reflection AI, while Anthropic’s Tom Brown brokered a SpaceX compute deal. CMS’s private Slack let tech giants shape AI health policy, and publishers face backlash for quietly using AI on covers and copy.
A ransomware attack on SoftBank-owned IDC Frontier hit 495 organizations, disrupting JR East, police, logistics and e-commerce; up to 6.09 million records may be exposed. Telegram Desktop patched a critical flaw that let one malicious link steal sessions. A Haverford professor was charged with cyberstalking a Jewish colleague on X. Researchers found 981 suspected AI Russian war-propaganda tracks on major music platforms.
CPython developers are exploring an optional Rust zlib in Python 3.16, while NumPy 2.5 ships np.searchsorted up to 25Ă— faster and advances abi3/Limited API work for cross-version wheels. Datadog unveiled an async-aware Python profiler that preserves asyncio task context and cuts overhead by over 60%. Also: VEX shell halved cold starts via lazy imports, and Glazer cut disposable-browser startup to ~2s.
Margaret Hamilton, who led Apollo flight software and helped define software engineering, died at 90; her code was critical to the moon landing. OpenAI released 372 major math results, including a claimed proof of the Unique Games Conjecture, though proofs remain unreadable. A rare American chestnut grove in West Virginia faces possible clearing for a data center, and ICANN revealed 1,615 applications for new gTLDs.
Paramount completed its $111B Warner Bros. Discovery merger, forming Skydance with Paramount+, HBO Max, CBS, CNN and sports assets, after the Supreme Court rejected a last-ditch block. Lawmakers introduced the Ban Flock Act to curb federal use of Flock license-plate cameras, while reports say Tumbler Ridge shooter Jesse Van Rootselaar used ChatGPT far more disturbingly than known, evading safeguards.
