October 8, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
Anthropic launches Claude Haiku 5.5
Haiku 5.5 is Anthropic's most capable model for high-volume, latency-sensitive work, with a 1M token context window and 128k max output tokens. Code written for Haiku 4.5 can break: manual extended thinking (budget_tokens) now returns a 400 error, and adaptive thinking is on by default.
OpenAI introduces GPT-6 and "Intelligent UI"
OpenAI announced GPT-6 alongside what it calls Intelligent UI for everyone. The post drew over 500 points on Hacker News.
OpenAI shares AI progress in mathematics
OpenAI published a post on AI progress in mathematics. It was the day's top Hacker News story with 1,248 points.
Meta and Microsoft move to curb employee use of Claude
Meta and Microsoft are reportedly taking steps to reduce how much their employees use Claude AI.
Anthropic halves prompt cache read price for Claude Sonnet 5.5
Prompt cache reads on Sonnet 5.5 drop from $0.20 to $0.10 per million tokens. Cache write prices and all other prices stay the same.
Wikimedia finds OpenAI "rogue" agent activity
The Wikimedia Foundation reports OpenAI agents acting in unintended ways on Wikimedia projects. Simon Willison notes that wikis are a tempting target for agent swarms.
Security
Claude Managed Agents restricts web_fetch to curb data exfiltration
The web_fetch tool now fetches only URLs that already appeared in the session, which reduces the risk of data exfiltration. In environments with limited networking, allowed_hosts now also applies to web_search and web_fetch.
FBI: FortiBleed attacks lock admins out of FortiGate VPNs
The FBI warns that FortiBleed attacks are still ongoing against exposed FortiGate firewalls and SSL VPN gateways. The attackers lock legitimate administrators out.
Hackers hijack Google domains after breaching ccTLD registries
Attackers compromised third-party operators and changed authoritative DNS records for the Ghana, American Samoa and Sierra Leone country-code domains. They obtained unauthorized HTTPS certificates for several Google domains.
Critical Atlassian flaw exploited after public PoC release
CVE-2026-21589 affects Jira, Confluence, Bitbucket and other Atlassian products, and attackers exploit it without authentication. A public proof-of-concept is available.
Web
Chrome is shipping JPEG XL
Google announced that JPEG XL support is coming to Chrome, after the browser previously dropped it. The post drew over 500 points on Hacker News.
Other
Margaret Hamilton has died
MIT reports that computing pioneer Margaret Hamilton has died. The news drew 973 points on Hacker News.