Latest News

Kpler's series in The Wall Street Journal is the non-Iranian Middle East total. In the week through 18 October that total, counting the Strait of Hormuz and the bypass routes, averaged more than 24 million barrels a day, compared with 23.3 million before the war. Hormuz plus ship-to-ship transfers in the Gulf of Oman ran near 14 million barrels a day, about 82 percent of the prewar Hormuz flow. Last month the Saudi East-West pipeline and the other bypasses carried about 40 percent of that non-Iranian Gulf crude, compared with 17 percent before the war. U.S. and Israeli strikes on Iran began on 28 February 2026. A Reuters tally dated 22 October put October Middle East exports at 17.3 million barrels a day, compared with 16.9 million in the two months before the strikes, and put October Hormuz flows at 11.7 million after 9.75 million in September and an April low under 1 million. Iran International said the chart put crude and condensate through Hormuz, the ports of Oman and Fujairah, and the Red Sea near 17 to 18 million barrels a day. Tanker rates from the Middle East to China are near $1.4 million a day.

The Census Bureau released the figures on 15 September 2026 from the Current Population Survey Annual Social and Economic Supplement. The official poverty rate is 10.2 percent, down 0.5 points, covering 34.5 million people. The three reports are Income in the United States: 2025, Poverty in the United States: 2025 (P60-290), and Health Insurance Coverage in the United States: 2025. The Supplemental Poverty Measure is 13.1 percent, a change the bureau called statistically flat from 2024. Full-year uninsured people number 26.7 million, or 7.9 percent. Child poverty is 13.4 percent, a low for that series. Hispanic poverty is 13.9 percent, down 1.2 points, the lowest since that series began in 1973. The 2024 real median was $85,210, and the 2025 figure of $87,460 carries a margin of plus or minus $1,040. Post-tax median income is $76,060, plus or minus $712, up 3.1 percent from $73,760 in 2024. The 2020 and 2021 post-tax medians sit higher, in years when stimulus payments were inside the series. The 90th percentile is about $261,300 and the 10th is about $20,010. The top quintile received 52.4 percent of household income. The income series runs back to 1967.

Judge Marcelo Martínez de Giorgi of Federal Criminal and Correctional Court No. 8 issued the 60-page ruling on Friday under article 336(3) of the Código Procesal Penal de la Nación. The dismissal covers Milei, Presidential Chief of Staff Karina Milei, Mauricio Novelli, Manuel Terrones Godoy, Sergio Morales, Hayden Davis, Julian Peh of Kip Protocol, María Alicia Rafaele, María Pía Novelli, Camilo Rodríguez Blanco, and Orlando Mellino. Prosecutor Eduardo Taiano had asked for the dismissal. None of them had been called to an indagatoria. Milei promoted the token on X in February 2025 and later deleted the post. The price moved from cents to nearly $5 and then collapsed. A few wallets withdrew about $100 million, and more than 40,000 buyers lost money. Davis said he held close to $100 million. The judge wrote that institutional standing can amplify a post, and that the investigated facts do not constitute fraud, abuse of authority, or incompatible negotiations. The Anticorruption Office had concluded the post was outside an institutional act and used no state resources. On 3 July the judge removed the victim complainants, and Federal Chamber Sala I confirmed that step on 4 September.

The bug is also called node2shell and is CWE-787. Khai Tran and Sylvie Mayer of OpenAI Codex Security found it. Google's CVE numbering authority scored it 9.2 under CVSS 4.0, a critical rating. Node.js rates it high and says a remote attacker can run code. The Node.js security release on 21 October 2026 covers ten flaws, four of them high. Bun 1.4.4 is patched. Brotli library releases 1.2.1, 1.1.1, and 1.0.10 carry the fix. The repair was already in the Brotli source in February, ahead of a CVE and a library release, and downstream packages stayed on the older code. Node 20 reached end of life on 30 April 2026, and Node 25 is also at end of life. fetch() decompresses Content-Encoding: br, and Express 5 body parsing and axios request Brotli as well. The same Node release fixes CVE-2026-106069 and CVE-2026-105483, two TLS hostname bypasses, and CVE-2026-105482, a DNS truncation bug on a NUL byte. OpenAI named Envoy among the programs that decode Brotli. As of 23 October the project had no report of exploitation in the wild, and the CVE was absent from CISA's known-exploited catalog. A public proof of concept ran against the official Node 24.22.0 arm64 image, and one writeup of a standard build showed a crash and a limited memory read.

Justice Jonathan Beach of the Federal Court of Australia wrote a 235-page decision finding that Apple held a substantial degree of power in iOS app distribution and in in-app payment. Third-party app stores and web downloads for Australian Apple Accounts open on 1 March 2027. Apple may ask by 15 February 2027 for an extension to 3 May 2027. Fortnite's return is immediate once Epic files a written application, under the developer agreement and the review guidelines. Apple pays 85 percent of Epic's legal costs. Apple said it will seek a stay and an appeal. In May 2026 Fortnite returned to iOS on every storefront outside Australia. The March store date Epic named matches the court's 1 March 2027 opening for third-party stores.

The API price is $2 per million input tokens and $10 per million output tokens, the same posted rate as GPT-6.1 Sol and half the posted rate of Claude Opus 5.5. The high-speed tier runs two to three times faster at twice that price, with cache-hit input left at the base rate. Moonshot's own benchmarks sit near Claude Opus 5.5 and GPT-6 Astra. Artificial Analysis scores the model 55, ahead of Claude Fable 5.1, GPT-6 Astra, and Gemini 4 Argon at 53, and behind Claude Opus 5.5 at 58. The announcement lists a 1 million token context, 2.8 trillion total parameters, 104 billion active in the mixture of experts, and multimodal input. It is live on kimi.com, Kimi Work, Kimi Code, and the API at api.moonshot.ai. On the Artificial Analysis cyber index the score is 64 percent, seven points ahead of DeepSeek V4.1 Flash 1017 at 57 percent and five points behind trusted-access GPT-6 Sol Daybreak Blue at 69 percent. CyberGym end to end is 95 percent, at $2.81 a task.

The model takes audio in and returns audio out. Block trained it from scratch on one NVIDIA GB200 NVL72. It runs locally on a MacBook Pro with an M4 Max or a faster machine, and inference on that laptop is faster than real time. The lab sits inside Block, led by Ragavan Thurairatnam, who previously ran the Toronto startup Dessa, and it reports to Jack Dorsey. The named researchers are Louay Hazami, Hashiam Kadhim, Qi (Alex) Liu, Rayhane Mama, Aydin Polat, and Marc Tyndel. Safety researchers have early access. The project page is block.xyz/dessa. Every clip on that page is a live recording, and the subtitles were added afterward. The privacy notice is effective 21 October 2026.

The Hugging Face card is nvidia/NVIDIA-Nemotron-3.5-Bolt-E4B-BF16, and the weights went up on 23 October 2026 under OpenMDW-1.1. The Gemma 4 base stays under Apache 2.0. About 4 billion parameters are active. Context for input and output runs to 64,000 tokens, and the post-training data cutoff is May 2026. Reinforcement learning used GRPO with NeMo RL and NeMo Gym. A companion drafter is nvidia/NVIDIA-Nemotron-3.5-Bolt-E4B-BF16-DFlash-NVFP4, and a smaller sibling is NVIDIA-Nemotron-3.5-Bolt-E4B-4GB. On NVIDIA's NeMo Gym harness, MultiChallenge is 53.10 against 42.08 for Gemma 4 E4B-it and 51.76 for Qwen3.5 4B. RoleBench is 67.05 against 49.95 and 53.66. IFBench is 63.79 against 42.84 and 58.91. BFCL-v3 is 68.51, and Qwen3.5 4B scores 70.95. Tau2-Bench is 55.10, and Qwen3.5 4B scores 75.06. The technical report is on research.nvidia.com, and the model is also on build.nvidia.com. The card recommends temperature 1.0 and top_p 0.95.

The hospital will be named Intermountain Health Felicia and Ben Horowitz Children's Hospital. The Intermountain Foundation announced the gift on Friday 23 October 2026. The planned opening is 2030 at the UNLV Harry Reid Research and Technology Park in southwest Las Vegas, about 34 acres inside the 122-acre park. The project is described at about 200 beds and 2,000 to 3,000 caregivers, with a total above $1 billion, according to the Las Vegas Review-Journal. Groundbreaking is expected next week. The gift is part of the Nevada Campaign for Kids, co-chaired by Bill and Wendy Hornbuckle. Earlier gifts include $50 million from Canarelli on 6 October 2026 for an inpatient tower of 180 beds, expandable to 228, and $25 million from the Raiders in August, split as $10 million from the team and $5 million each from Davis, Durban, and Meldman. David Flood is chief development officer. Felicia Horowitz tied the gift to care their child received at Lucile Packard Children's Hospital Stanford.

Michael Levin's launch post is dated 23 October 2026. Each VTXO is capped at 50,000 sats. Settlement follows an Ark-style design. Users hold the keys and can exit to the chain. Lightning send and receive currently carry a 0.25 percent service fee plus routing fees. Restore uses the seed phrase. The client refreshes a VTXO at no charge inside a window of about two weeks, and funds in a wallet that stays offline past that window remain recoverable when the wallet comes back. A receive-only macaroon can request a payment and lacks the keys to sign or restore the wallet. L402 charges sats per request. The command wavecli mcp serve exposes the wallet as tool calls. The software is an alpha. The repositories are github.com/lightninglabs/wavelength and the Wavelength SDK.

Chi-Min Ho's group at Columbia used cryo-electron microscopy. The Cell paper is doi 10.1016/j.cell.2026.06.012. Joanna Thompson's Quanta article is dated 23 October 2026. Four proteins form each anchor: three make a wedge under the red-cell membrane, and a fourth links that wedge to the parasite. Invasion takes under a minute. The World Health Organization still puts malaria deaths near 600,000 a year. The lab used an AI protein-design platform, described in Nature at doi 10.1038/s41586-025-09429-6, to make an inhibitory protein, and that protein blocked invasion in test tubes. The same machinery appears in Toxoplasma and Cyclospora. Jake Baum of the University of New South Wales and Kirk Deitsch of Weill Cornell commented on the structure. The Simons Foundation funds the laboratory and Quanta Magazine.

Zhou posted the preprint on 22 October, and Patrick Hsu pointed to it on 23 October. An Arc Institute note on 20 October named the model Bolero, a cell-state-conditioned sequence-to-function model. The doi is 10.64898/2026.10.19.760026. Bolero-10M trains on 10.8 million cells from six mammals, including humans, across development and aging. The model takes DNA plus a cell-state embedding and predicts transcript abundance and chromatin accessibility for that state. Zhou is an Arc Science Fellow.

DTLS 1.3 brings faster handshakes, forward secrecy, post-quantum algorithms, and a shorter header. GREASE inserts random unused TLS extension values so stacks keep tolerating unknown extensions. The AVX-512 SHAKE x4 path speeds ML-DSA on x86_64, and a separate AVX-512 path speeds AES-CBC decrypt. The release retires Windows on Itanium and Windows CE. The tag on GitHub is openssl-4.1.0. Michael Larabel's writeup is at phoronix.com/news/OpenSSL-4.1-Released.

Michael Larabel's article is dated 23 October 2026. The release branch is git.ffmpeg.org release/9.1. Advanced Professional Video is a royalty-free codec, and the new encoder runs as GPU shaders. The filter vf_fruc_vulkan uses NVIDIA optical flow for frame-rate conversion. The same changelog adds ASTC through libastcenc with .astc and KTX 1.0 muxers and demuxers, a revised AAC encoder, an iTerm2 inline-image muxer, an LCEVC payload-merging bitstream filter, an MVR demuxer, a latticepal filter, a DVD-Audio LPCM decoder, AVFoundation input selection by unique ID and USB serial, H.264 data partitioning, a DSD encoder, Rhetorex ADPCM, ADPCM IMA Citrix, and Panasonic RW2. It also adds xHE-AAC through libfdk-xhe-aac, a jpegapp bitstream filter, an Infinity IMM6 decoder, and D3D12 DirectML zero-copy inference for the ONNX Runtime DNN backend. The release removes the asf_o demuxer.

The CEF jump covers more than two years of Chromium Embedded Framework. The release also restructures the plugin loader, adds preview snapping and spinboxes, picks up the newest NVIDIA Broadcast SDKs, and improves detection for fullscreen Game Capture. NVENC on ARM64 runs on NVIDIA GPUs. The project is retiring Ubuntu 24.04 LTS builds. The GitHub tag is obsproject/obs-studio 33.0.0. The writeup is phoronix.com/news/OBS-Studio-33.0.

Vicki Pfau of Valve wrote the series. It splits HID from a configuration interface on USB and Bluetooth. The first devices are Joy-Con 2, Pro Controller 2, and the GameCube controller sold through Nintendo Switch Online. Custom Bluetooth pairing and BlueZ sit outside this patch. The same pull adds hid-pulsar for Pulsar mice, including the X2 V2, X2H, X2A, and Xlite V3, plus the Kysona M600 ATK, VXE R1 SE+, and VXE Dragonfly R1 Pro, with battery, voltage, and charge reporting on wired links and on 1 kHz and 4 kHz dongles. It also adds AMD Zen 6 Sensor Fusion Hub SoCs, a power-management fix for the Apple Touch Bar, and a power-management fix for the ASUS ROG Ally. The article is phoronix.com/news/Linux-7.4-HID.

Hao Li wrote the sheaf-prefill change. On the will-it-scale mmap1 test, throughput rose 24 percent on the maple_node cache. The pull request is lore.kernel.org/lkml/atoJsKNb5KiE44jl@thinkstation/. Michael Larabel's summary is phoronix.com/news/Linux-7.4-Slab-Updates.