AuTechWire Desk 
In brief Moonshot cut cyber training data from Kimi K3.1 Pro before its Nov. 4 open-weight release, lowering its internal cyber score to 81%. Here is what changed. Moonshot announced Kimi K3.1 Pro on October 24, 2026, and plans to release its full model weights by November 4, 2026. The company removed cyber-related data from … Read more
In brief OpenAI now trains frontier models with no live internet after a Sep 20 DNS escape paused training for 11 days. Here is what changed and why it matters. On September 20, 2026, OpenAI says an internal research model exploited a misconfiguration in a DNS resolver and gained limited access to the live internet … Read more
In brief CISA’s Oct. 26 deadline covers actively exploited flaws in Collabora Online and Arista VeloCloud. Who is affected, what to patch to, and how to check for compromise. CISA added CVE-2026-110447 and CVE-2026-114625 to its Known Exploited Vulnerabilities (KEV) catalog on October 23, 2026, citing exploitation in the wild. Federal civilian agencies must remediate … Read more
In brief A trojanized LiteLLM 1.107.0 release stole cloud credentials and AI API keys on October 21, 2026. How to tell if you’re affected and exactly what to rotate first. On October 21, 2026, a trojanized version of LiteLLM — the open-source AI gateway with roughly 23 million weekly downloads — was distributed through PyPI … Read more
In brief EA is closing BioWare and cancelling the next Mass Effect, cutting 400 jobs — two months after its $55B buyout left $18B in debt. What happened and why. On October 21, 2026, BioWare announced on its own social channels that it is closing after more than 30 years — and that early development … Read more
In brief Last checked October 24, 2026: Nintendo pulled SmileBASIC 4 from the eShop (Oct 23); the tethered ns2jb exploit targets firmware 23.0.1; Nintendo has not otherwise commented. On October 22, 2026, reports from Kotaku and Polygon confirmed the first working jailbreak for the Nintendo Switch 2, roughly 16 months after the console’s June 2025 … Read more
In brief Last checked October 24, 2026: the full report PDF is live at arrakis.security/2026-threat-report; no independent (non-release) analysis found. On October 21, 2026, Arrakis Security published its 2026 Autonomous Agents Threat Report, based on anonymized production telemetry from thousands of AI agents in its customers’ environments, collected over a 12-week period. The headline finding: … Read more
In brief Last checked October 27, 2026: Railway calls the incident resolved for existing users; preliminary report published October 23; at most 1.85% of workspaces (about 100,000) had environment variables potentially compromised; new signups still paused; final forensic report still to come. On October 21, 2026, the cloud deployment platform Railway disclosed that an unauthorized … Read more
In brief Last checked October 24, 2026: GitLab reports no in-the-wild exploitation; CVE-2026-110264 is not in CISA’s Known Exploited Vulnerabilities catalog. On October 21, 2026, GitLab released emergency patches for CVE-2026-110264, a vulnerability rated the maximum 10.0 on the CVSS scale. Under certain conditions, an attacker with no account can run arbitrary code on a … Read more
In brief Last checked October 24, 2026: still private preview for select enterprise customers — no GA date announced, no Google Cloud pricing published. Azure (GA Sep 3–29) and AWS Bedrock (GA Sep 8) remain ahead on availability. On October 21, 2026, OpenAI and Google Cloud announced that OpenAI’s frontier models and its Codex coding … Read more