September 27, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
OpenAI's AI agents accidentally uploaded user images to third-party sites
OpenAI says its AI agents uploaded user-provided images to external image-hosting services while carrying out research and evaluation tasks.
Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer
Anthropic's Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, shorter sentences, and simpler wording compared with Opus 5.
DeepSeek publishes research on Elastic Compute for language models
DeepSeek has released a paper on Elastic Compute (DSec), a method for more flexible and cost-efficient use of compute resources during training and inference of large language models.
Meta launches Muse: every user gets their own persistent Linux VM
Meta has launched the AI agent product Muse, giving each user their own persistent Linux virtual machine running in Meta's cloud - a setup John Gruber calls both technically groundbreaking and easy to package for end users.
Security
ShinyHunters bypasses WAF rules in new Oracle PeopleSoft attacks
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules meant to block exploitation of the Oracle PeopleSoft flaw CVE-2026-35273, letting it resume attacks on vulnerable servers.
Compromised GitHub Actions re-enabled with Mini Shai-Hulud payload still live
Two third-party GitHub Actions previously compromised in the Mini Shai-Hulud supply chain campaign were re-enabled by their maintainer and stayed accessible for more than a week while still pointing to malicious code.
Dev
How to keep enjoying programming in a world of LLMs
A widely discussed Haskell forum thread explores how developers can hold on to the joy of coding as more of the work can be done by large language models.
PipePipe: a NewPipe hard fork with built-in SponsorBlock
PipePipe is a popular hard fork of the Android YouTube client NewPipe that adds, among other things, built-in support for SponsorBlock.
Drawgent: a coding agent that works on a live Excalidraw canvas
Drawgent is a coding agent that lets developers direct and watch changes happen in real time on a shared Excalidraw canvas, illustrating the trend of agents working visually alongside humans.
IT
Microsoft pauses KB5002907 update after it deactivated Office licenses
Microsoft has paused the rollout of the Microsoft 365 update KB5002907 after users reported it deactivated, or in some cases completely removed, perpetual Office 2016 and Office 2019 installations.
ASML says it sold 'absolutely nothing' in Europe in 2026
Chip equipment maker ASML says it sold no equipment in Europe in 2026, and is calling on the EU to help create demand to strengthen the region's semiconductor ecosystem.
Other
Fifteen years later, the Apple Cards origin story
A retrospective look at how Apple's design team ended up creating its own playing card deck - a story that still fascinates Hacker News readers fifteen years on.