Fireworks AI says its October breach was broader than initially disclosed, with attackers gaining access to customer account and billing information as well as some datasets, incomplete model weights and secrets. Notion, the popular productivity and note-taking app, disclosed that it was impacted in the breach but "fewer than 1% of Notion workspaces" were involved. "Upon analysis of the new data, we discovered that it included Notion AI chat transcripts used for the Insights feature, which for the vast majority of impacted workspaces were unattributable," it said. "'Unattributable' means the chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain tool call results." The Hacker News reports: In a notice published on October 10, 2026, [Fireworks AI] said it detected unauthorized use of internal Fireworks credentials that allowed an unauthorized third-party to access environment variables used in evaluation jobs in a limited number of customer accounts. The activity was detected on October 6, 2026, at 9 a.m. PDT. [...] The latest bulletin from the company reveals that the scope of the breach may have been broader than previously thought. The company said attackers reached its development environment via an unnamed third-party cloud provider that hosted Fireworks research and development (R&D) machines on October 23, 2026.

"On October 24, the unauthorized third party used it to reach Fireworks development machines and then run an unauthorized workload that led to additional customer data impact," it added. "As of October 25, we have not detected further evidence of successful unauthorized access by the threat actor on the Fireworks platform customers use." The breach is said to have provided access to the following types of information: [Resource metadata; Billing information; and Model weights and datasets]. Fireworks AI said payment card numbers are not stored by the company and were not impacted by the security incident. It also said it's alerting customers whose data was impacted.

New York is launching a state-backed AI safety research center at Binghamton University that will independently study and test AI systems, develop safety and security techniques, and train researchers in responsible AI. "While the federal government fails to act, New York is leading the way on AI safety and holding big tech accountable," New York Gov. Kathy Hochul said. "The stakes are too high to simply take AI companies at their word." Politico reports: The center -- which is funded by a $30 million gift from Bloomberg co-founder Tom Secunda and a $25 million research investment from SUNY and New York state -- is set to launch before New York's major AI safety law, the RAISE Act, comes into effect on Jan. 1. That will require submissions of detailed safety frameworks from AI companies operating in New York State, which Hochul's office hopes will be scrutinized by researchers at the new center.

"AI is opening up questions that scientists could not tackle before," said Secunda, who also serves as the board chair of Empire AI, a $500 million public-private partnership. "With Empire AI and researchers across New York, the Center can test systems independently and give public officials evidence they can use."

Over 80 leading scientists and researchers on AI systems from across New York state will contribute to the effort, which will be run by the New York Center for AI Responsibility and Research at Binghamton University, according to details shared by Hochul's office. The initiative will be led by Jeannette Wing, the executive vice president for research at Columbia University, and Greg Morrisett, the vice provost of Cornell Tech.

"We need new techniques that can be applied to this new kind of system with swarms of autonomous agents acting independently and without control. How can you first detect that they're going to do harm, and how can you prevent them from doing harm?" said Wing. "The beauty of what's being proposed is that this state is committing resources to really light this up."

An anonymous reader quotes a report from TechCrunch: Anthropic announced new workplace features on Tuesday, including Claude Meetings, which brings Claude into video calls to begin working on tasks while participants are still talking. The company also unveiled Claude Whiteboards and Claude Sheets. The launch of Anthropic's new productivity-focused features comes just a few weeks after OpenAI unveiled a series of workplace tools that allow users to collaborate with ChatGPT to do things like visualize company information and create presentations, as both companies compete to turn their products into office suites of sorts to take on Microsoft and Google. Meta is also joining the competition with its Muse AI agent, which can build mini-apps on the fly to help users complete specific tasks. Here's a summary of each of the offerings Anthropic announced today:

Claude Meetings: Allows Claude to join video calls as a visible participant, take notes, answer questions, retrieve information from connected apps, and create plans, timelines, and action items in real time. Available in beta for Team and Enterprise plans, initially supporting Google Meet.

Claude Whiteboards: A collaborative visual workspace where teams can brainstorm with Claude, organize ideas into timelines and plans, and turn their work into documents or slide decks. It also integrates with Claude Meetings to build whiteboards during conversations.

Claude Sheets: Lets teams create and collaboratively edit spreadsheets with Claude, including budgets and trackers with multiple tabs, formulas, formatting, and dropdown menus. Claude can make changes directly in cells while explaining its edits.

Anthropic also announced the general availability of Claude Data (formerly Claude Dashboards) that connects Claude to business systems like CRMs and data warehouses. "Users can ask questions, and Claude responds with dashboards, written data stories, or narrated videos," reports TechCrunch. Additionally, the company announced new interactive connectors that let users open Claude and work within third-party apps like Adobe, Atlassian, and HubSpot.

SpaceX has unveiled the Starlink Mini 2, equipping the company's smallest satellite internet terminal with a removable 71Wh battery and Wi-Fi 6. Preorders are opening to select U.S. customers for $999, which also includes a year of Roam Unlimited service. Shipments are expected to begin in mid-December. InterestingEngineering reports: The removable battery represents the biggest functional upgrade over the original Starlink Mini. Previously, users needed an external power source to operate the satellite terminal. That meant carrying additional equipment for camping trips, remote work, or extended journeys. Mini 2 addresses that limitation with a detachable 71 Wh battery pack. It weighs approximately 1.08 pounds (490 grams) and delivers up to 4.5 hours of connectivity. Owners can replace it with another charged battery when necessary.

The battery also features LED indicators and its own USB-C charging port. SpaceX supports 60-watt USB-C Power Delivery charging for the pack. The retail kit includes a compatible 60-watt wall adapter and a three-meter USB-C cable. Users can also power the terminal through USB-C without relying on its battery. A physical power button replaces the original model's simpler plug-and-play arrangement.

[...] SpaceX has also upgraded the wireless hardware from Wi-Fi 5 to Wi-Fi 6. The integrated router supports coverage across approximately 1,800 square feet (167 square meters). An IP67 rating provides additional protection against dust and water. Other hardware details include a foldable kickstand and a standard 1/4-inch-20 tripod mounting thread. The terminal also offers a 55-degree field of view for satellite acquisition.

Nintendo is hiring a digital archivist to help ensure the company's historical records are "preserved for future generations." The 12-month position is tasked with designing and implementing a "structured framework for organizing technical records, engineering documentation, source materials, and institutional knowledge related to legacy systems and platforms." Polygon reports: In the past, Nintendo has drawn criticism from the preservation community. In 2022, the Video Game History Foundation publicly criticized the company for announcing it would be closing the Wii U and 3DS eShops. The foundation released a statement saying that Nintendo's decision was "actively destructive to video game history." The statement also pointed out that Nintendo is part of the Entertainment Software Association, which funds lobbying that prevents a number of preservation efforts.

Blender 5.3 has been released with support for 3D Gaussian Splats, Nvidia DLSS 4.5 Ray Reconstruction and Vulkan as the default graphics backend on Linux. Phoronix reports: Blender now allows importing Gaussian Splats from PLY, SPZ, and glTF files. Also new to Blender 5.3 is NVIDIA DLSS 4.5 Ray Reconstruction support as a new denoiser. Blender 5.3 also brings support for NVIDIA RTX Spark devices.

For the Cycles code in Blender 5.3 the Principled BSDF for shader nodes now supports dispersion. Another notable change with Blender 5.3 is the Vulkan back-end now being the default on Windows (except for Windows on ARM) and Linux systems. Vulkan 1.1 or newer is required and should deliver better performance than OpenGL.

Reddit is rolling out an AI-powered shopping feature called "Reddit Reviews" that summarizes user conversations about products and turns them into dedicated reviews. TechCrunch reports: Reddit's announcement points to its rules and its latest measures to combat automated abuse and spam, as well as its practice involving community moderators, as tools it will use to keep the reviews on the site legit. The Reddit Reviews feature itself taps into AI to organize the conversations people are having where they describe their product experiences. These posts will often see users discussing how a product works for them, or why it fails, or what the trade-offs are that someone should consider before buying.

The company has been testing the product reviews feature since February, initially with U.S. users in areas like Electronics, Video Games, and Health & Beauty products. In September, Reddit expanded the test to include the Home & Garden and Fashion & Apparel categories as well. Now, the company says Reddit Reviews is rolling out to all U.S. users on iOS, Android, and web, with an initial selection focused on around 10,000 products. Over time, it will roll out to more categories and expand beyond the U.S.

To use the feature, Reddit users can search for a product or category in the app's search bar or click on a highlighted product name they see in someone's comment. From there, the user is taken to a screen where important conversations are summarized under a "what people are saying" heading. This will also include a visual breakdown that shows how many of those comments are positive, negative, or mixed, and what sort of things people said they liked or disliked about the item.

An anonymous reader quotes a report from Reuters: The European Union must rethink security to take into account challenges and risks posed by the growing power of major technology companies that go beyond traditional competition concerns, European Commission Executive Vice-President Teresa Ribera said on Monday. "We need to review and to deepen our concept of security, including cybersecurity," Ribera told reporters in Lisbon, arguing that testing and monitoring devices connected to critical infrastructure was no longer sufficient and that security means also ensuring that the Big Tech companies are "governed by democratic and transparent patterns." "We need to be quite quick in the deployment of these new approaches ... This is one of the most critical topics for security, for democracy, and for (our) values," she said.

Uber is launching Uber Parking, integrating technology from its SpotHero acquisition to let users find and reserve parking garages and lots directly through the Uber app. "You can also filter your results based on criteria like whether you want to self-park or use a valet, or other specific amenities," adds Engadget. From the report: To book a spot, you'll need to provide the make and model of your car and a license plate number. Depending on your lot, Uber will then provide a QR code or you'll be able to enter the garage through license plate recognition. If you need to cancel, the company says the majority of parking options can be canceled for free up to the start time. Parking reservations can also be extended through the app. Uber One subscribers get 10 percent back in Uber credits on eligible reservations.

When it announced its acquisition, Uber said SpotHero offered garages and lots across more than 400 cities in the US and Canada, but the company isn't offering all of them at launch. For now, Uber says Uber Parking will be available in Chicago, Nashville, San Francisco, Atlanta, Austin, Boston, Dallas, Denver, Los Angeles, Miami, New York City, Philadelphia, San Diego, Seattle and Washington DC. The company also plans to experiment with using lots as a staging area for the autonomous vehicle fleets offered byÂUber's self-driving partners.

Boston Dynamics has equipped its Atlas humanoid with wheels, allowing the robot to rapidly roll across flat terrain while still using its articulated legs to navigate obstacles and uneven surfaces. "The 'experiment' combined classical model-based motor control with whole-body reinforcement learning to maintain dynamic stability across unstructured, real-world terrain," reports The Robot Report. From the report: In addition to learning how to move with wheels for feet, Atlas also performs pirouettes and various aggressive actuation maneuvers. This demonstrates that Atlas can smoothly switch between fast rolling on flat terrain and articulated legged motion over obstacles or irregular surfaces.

[Andy Wu, controls engineer for Atlas at Boston Dynamics] trained the system in sim. The system learned all of the behaviors in sim and executed them in real life, with surprising accuracy, according to Wu. Wu said converting Atlas' locomotion style was "wonderfully simple." A single custom adapter mounts an off-the-shelf scooter rim onto Atlas' existing ankle actuator, and that's the only new part in the whole build. Because Atlas was designed from the start to be produced at high volume and to be easy to service, Wu said the retrofit was about as involved as swapping a wheel on a bicycle. The software side was just as straightforward, he said. Each wheel is modeled as an "ankle" that can spin continuously, so all Wu had to do was take the baseline robot model and swap the feet out for wheels.

The next question that Wu intends to answer is the policy response to failed actuators. This is key to safety and to understanding how the system will respond to a system failure. The primary takeaway for Wu and the controls engineering team at Boston Dynamics is to understand control synergy. The video demonstrates that merging classical motor controls (for baseline stability) with whole-body RL (for reactive adaptation) yields superior real-world agility compared to using either method alone.

An anonymous reader quotes a report from NBC News: The Food and Drug Administration said Monday that GLP-1 drugmakers must add a warning label about a rare eye condition that can cause sudden blindness. The condition, called nonarteritic anterior ischemic optic neuropathy, or NAION, affects the optic nerve, which carries signals from the eye to the brain. When blood flow to the nerve is reduced or blocked, it can cause sudden vision loss. The condition is permanent with no known treatment. The FDA said "there is a potential increased risk of rare NAION" in people taking GLP-1 drugs. The agency's requirement applies to all GLP-1s, including Novo Nordisk's Ozempic and Wegovy and Eli Lilly's Mounjaro and Zepbound, as well as several older GLP-1 diabetes medications. [...] Previous research has found that GLP-1 use may increase the risk of NAION, and Lilly has said it was aware of studies on the potential link.

The FDA said it began looking into a possible link after a 2024 study published in JAMA Ophthalmology that found diabetes patients prescribed semaglutide were four times as likely to develop NAION as those not prescribed the drug. The agency said it reviewed reports of side effects submitted to its adverse event monitoring system and analyzed data from multiple clinical trials. Cases of NAION have been reported for all currently marketed GLP-1 drugs, the FDA found. However, FDA scientists were not able to identify a mechanism for how the drugs could increase the risk of the eye condition. Risk factors for NAION can overlap with conditions seen in people taking GLP-1 drugs, including Type 2 diabetes, obesity, sleep apnea and hypertension. "Patients and caregivers should be aware of a potential increased risk of NAION, a rare condition that can result in acute, painless, decreased vision in one eye, including permanent vision loss," with GLP-1 use, the FDA said in the release.

Microsoft is testing a Windows 11 option that lets users permanently disable the Sticky Keys and Filter Keys activation prompts directly from the pop-ups themselves, ending a 31-year-old annoyance without requiring a trip into Settings. Windows Latest reports: Sadly, the dialog is still the same aging Win32 window, but we spotted Microsoft's design boss replying under an X post reply about this, saying he is working on modernizing legacy dialogs. The popup might be annoying, but did you know that it exists because of a pinball game from 1995? [...] The change is in Build 26340.9882 (Experimental) and Build 26320.9876 (Beta), both released on November 6 and based on Windows 11 version 26H2. Microsoft says you can "choose not to be asked again" from the Sticky Keys and Filter Keys dialogs, but it's a Controlled Feature Rollout in Experimental, so you may not see it yet.

President Donald Trump says the FBI is investigating Nvidia CEO Jensen Huang's affair with a woman alleged by U.S. intelligence to have gathered information for Beijing. "I know the FBI is looking into it in terms of something else, and I think that he'll be in good shape," Trump said at a White House briefing. The Associated Press reports: Trump suggested the extraordinary step of directly involving himself in a counterintelligence investigation, a sign of his friendly relationship with Huang and the possible geopolitical stakes. "I did speak to him today just to see if he's feeling all right, how you're doing," Trump said. "He said he had absolutely no idea that the person in question was a spy."

Trump is slated to meet next week with Chinese leader Xi Jinping in Shenzhen, China, at the Asia-Pacific Economic Cooperation summit, but he was noncommittal about bringing up the situation with Xi. "No, I don't think so," Trump said. "I mean, maybe. I'm sure President XI will ask me about it. I just know Jensen very well. I just think he's a very honorable man." Nvidia has launched its own independent investigation into whether Huang was targeted by a foreign intelligence operation. Meanwhile, China has denied the allegations. "The so-called Chinese spy allegation is unsubstantiated. It is nothing but smears against China," Chinese Foreign Ministry spokesperson Guo Jiakun said during a regular news briefing Monday.

Further reading: Commerce Dept. Chip Inquiry Was Halted After Nvidia Intervention

Epic Games says it plans to support its new Linux launcher on as many distributions as possible, specifically naming Fedora, SteamOS, CachyOS and Omarchy. GamingOnLinux's Liam Squires-Hand reports: Speaking to Jake Jones, Communications Director at Epic Games, they said: "Hey Liam! The new Epic Games Launcher is still in Preview and we plan to support as many Linux distributions as possible, including Fedora, SteamOS, Cachy, Omarchy, and more. We're testing and evaluating packaging formats for distribution, and we'll restore AppImage this month."

With that in mind, until things settle down, you might see different packaging types appear or disappear until they decide firmly how they plan to support different distributions each with their own different packaging formats. Or, perhaps they might see the Flatpak light and just put it up officially on Flathub. Would make it even easier for SteamOS then too with Flathub, since it would just be a quick pop to Desktop Mode to install it directly in the Discover app.

France has accused Iran's Islamic Revolutionary Guard Corps of being behind last month's cyberattacks on fridges and freezers across the country. French Foreign Minister Jean-Noel Barrot said the attack was "unprecedented in both its scale and its level of aggression," adding those who were responsible would be hit with sanctions "at the European level." The BBC reports: The cyber-attack last month saw fridges and freezers in hundreds of supermarkets across France heated up, which spoilt fresh and frozen food estimated to be worth millions of euros. Then last week, dozens of supermarkets across several other European countries were also impacted by a cyber-attack that targeted fridges and freezers. It is not known if the instances are linked.

Barrot said the attack on France's supermarkets "marks the first large-scale cyber-attack aimed at sabotage on our national territory, and it constitutes a major attack on the nation's interests and the security of the French people." He said the government had summoned the Iranian ambassador to Paris to "lodge a very strong protest against this extremely grave act." France will take "any other necessary and proportionate measures" to respond to the incident and "deter anyone who might seek to repeat it," Barrot added.

Separately on Monday, the Paris prosecutor said an investigation had been opened into the head of an offensive cyber unit associated with Iran's Islamic Revolutionary Guard Corps (IRGC) as well as his two deputies. Laure Beccuau named the unit as Shahid Kaveh, which she said had an affiliation with the electronic and cyber centre of the IRGC. Shahid Kaveh is the name given to a cluster of hackers thought to be directly employed by the Iranian regime. [...] The French government has not said how it reached the conclusion that Iran was responsible, and attribution of cyber attacks is extremely hard as hackers are able to hide their locations.