Jensen Huang, CEO of Nvidia. Bloomberg/Getty Images Nvidia's communications operation has been reshaped as the company became the face of the AI boom. Roughly 15 staffers have left the lean team since 2025 as Nvidia reorganized its communications org. Former employees described growing workloads as responsibilities expanded. Nvidia's communications organization has been reshaped as the company became the face of the AI boom, with multiple teams brought under new leadership and a string of departures. Business Insider identified roughly 15 communications employees who have left Nvidia since 2025, based on LinkedIn profiles and interviews with former employees. The organization now numbers roughly 70 to 80 people globally, and has more than doubled in size since Mylene Mangalindan joined as vice president of corporate communications in 2023, according to a person close to the company. The departures have also included newer hires. Anna Soellner, who was recruited to lead corporate communications, left after roughly four months, Business Insider previously reported. Nvidia is known for high retention. It reported companywide turnover of 3.7% in fiscal 2026, up from 2.5% the prior year, and well below the tech industry average of 21.9% cited in its latest sustainability report. Mangalindan succeeded longtime communications chief Bob Sherbin, who retired in 2024. She previously worked at the advisory firm Brunswick Group. She was brought in to "bring fresh blood" and "upgrade the team" to meet Nvidia's growing profile, one former employee said. At the end of 2024, Nvidia restructured its communications organization. It brought enterprise public relations under Mangalindan's leadership alongside the corporate communications team she already led, according to two former employees. Corporate communications focuses on Nvidia's reputation and major media outlets, while enterprise handles product and industry messaging, including for its data center business. One former employee said the consolidation reflected the growing importance of Nvidia's data center business, which sells chips and systems that power AI and had become its biggest revenue driver. Analyst relations, social media, and influencer marketing also moved under Mangalindan's remit this year, another former employee said. Three former employees said Nvidia's communications team had long operated with relatively lean staffing, even as workloads grew alongside the company's public profile, leaving staff juggling multiple responsibilities. These employees said they experienced long hours, difficulty taking time off, and pressure to respond quickly to emails and Slack messages. A person close to Nvidia said the company's lean staffing allows employees to move quickly and also requires long hours. The person said Mangalindan encourages staff to take vacation, though the team's small size can make scheduling time off difficult, particularly in the summer. Nvidia is widely known for its demanding work environment. CEO Jensen Huang has emphasized operating at the "speed of light" and is known for fostering a culture of constant accountability. Have a tip? Contact this reporter via email at gweiss@businessinsider.com or Signal at @geoffweiss.25. Use a personal email address, a nonwork WiFi network, and a nonwork device; here's our guide to sharing information securely. Read the original article on Business Insider

The three most recent White House press secretaries, from left to right: Kayleigh McEnany, Karoline Leavitt, and Katie Zacharia. Alex Wong/Getty Images ; Tom Williams/CQ-Roll Call, Inc via Getty Images ; Chip Somodevilla/Getty Images President Donald Trump has had six White House press secretaries across his two presidential terms. Sean Spicer, Stephanie Grisham, and Kayleigh McEnany held the role for less than a year. Katie Zacharia succeeded Karoline Leavitt, but is "transitioning out" after five days on the job. The new face at the White House podium didn't last long. Katie Zacharia held her first briefing as the new White House press secretary on Tuesday after President Donald Trump chose her to succeed Karoline Leavitt, who left the White House in August to spend more time with her young children. By Friday, a White House official confirmed to Business Insider that she is "transitioning out" of the role. Zacharia was the sixth White House press secretary Trump has hired across his two non-consecutive presidential terms, and the fourth to serve for less than a year. It's not unusual for presidents to go through several press secretaries due to the demanding nature of the role. President Barack Obama had three press secretaries during his two terms in office. Former presidents Bill Clinton and George W. Bush had four. Here's a look at all of the White House press secretaries who have represented the Trump administration. Sean Spicer WASHINGTON, DC - APRIL 24: White House Press Secretary Sean Spicer talks to reporters during the daily press briefing at the White House April 24, 2017 in Washington, DC. Spicer was joined during the briefing by U.S. Ambassador to the United Nations Nikki Haley and Treasury Secretary Steven Mnuchin. (Photo by Chip Somodevilla/Getty Images) Chip Somodevilla/Getty Images Sean Spicer's time as White House press secretary spanned 182 days — the shortest tenure of all of Trump's press secretaries. After leaving the White House, he appeared on season 28 of "Dancing with the Stars." He now serves as a political contributor at NewsNation and hosts several podcasts, including "Full Court Press with Sean Spicer" and "The Sean Spicer Show." Sarah Huckabee Sanders White House Press Secretary Sarah Huckabee Sanders speaks during a press briefing at the White House in Washington, DC, March 11, 2019. (Photo by SAUL LOEB / AFP) (Photo by SAUL LOEB/AFP via Getty Images) SAUL LOEB/AFP via Getty Images During Trump's first term, Sanders served as White House press secretary for just under two years, from July 2017 to July 2019. In the final months of her tenure, Sanders largely stopped holding formal White House press briefings. Sanders is the daughter of former Arkansas Gov. Mike Huckabee, who now serves as the US ambassador to Israel in the second Trump administration. After her time as press secretary, Sanders was elected governor of Arkansas in 2022. She is running for reelection in the 2026 midterms. Stephanie Grisham White House Press Secretary Stephanie Grisham listens as US President Donald Trump speaks to the media aboard Air Force One while flying between El Paso, Texas and Joint Base Andrews in Maryland, August 7, 2019. (Photo by SAUL LOEB / AFP) (Photo credit should read SAUL LOEB/AFP via Getty Images) credit should read SAUL LOEB/AFP via Getty Images Grisham served as White House press secretary for less than a year, from July 2019 to April 2020. Throughout her tenure, she did not hold a traditional press briefing. Grisham went on to become Melania Trump's White House chief of staff, then resigned from the role following the January 6, 2021 insurrection. She has since become a vocal critic of Trump and spoke about her time working in the Trump administration at the 2024 Democratic National Convention. Kayleigh McEnany WASHINGTON, DC - OCTOBER 1: White House press secretary Kayleigh McEnany, speaks during a press briefing in the Brady Press Briefing Room of the White House, on Thursday, October 1, 2020, in Washington, DC. (Photo by Oliver Contreras/For The Washington Post via Getty Images) Oliver Contreras/For The Washington Post via Getty Images McEnany served as Trump's 2020 campaign press secretary before Trump chose her to replace Grisham as White House press secretary. She held the role for less than a year, from April 2020 until Trump left office in January 2021. McEnany resumed formal White House press briefings after Grisham's tenure. McEnany now hosts "Saturday in America with Kayleigh McEnany" on Fox News, and co-hosts another Fox News show, "Outnumbered." Karoline Leavitt White House Press Secretary Karoline Leavitt speaks during a press briefing at the White House in Washington, D.C., the United States, on Jan. 15, 2026. U.S. President Donald Trump is keeping all options on the table for responding to Iran's unrest, White House Press Secretary Karoline Leavitt said Thursday. (Photo by Li Yuanqing/Xinhua via Getty Images) Li Yuanqing/Xinhua via Getty Images Leavitt served as White House press secretary from January 2025 to August 2026. At 27 years old, when she started the role, she was the youngest person ever to hold the position. Leavitt established a "new media seat" in the White House briefing room, highlighting podcasters, independent journalists, social media influencers, and other non-legacy media sources. She was also the first-ever pregnant White House press secretary, and gave birth to her second child while in the role. Leavitt resigned shortly after returning from parental leave, citing her desire to spend more time with her family. She will begin working as an on-air contributor for Fox News starting November 1. Katie Zacharia UNITED STATES - OCTOBER 13: White House Press Secretary Katie Zacharia conducts her first briefing where she addressed issues including the resignation of Kimberly Guilfoyle, U.S. ambassador to Greece, on Tuesday, October 13, 2026. (Tom Williams/CQ-Roll Call, Inc via Getty Images) Tom Williams/CQ-Roll Call, Inc via Getty Images Trump named Zacharia as Leavitt's successor, writing in a Truth Social post on October 9 that Zacharia "has an unblemished record of support, and has been a loyal and brilliant supporter, right from the beginning," and calling her "a devoted fan and member of MAGA." Zacharia previously worked as a senior communications advisor at Trump Media and Technology Group, which runs Truth Social. She held her first briefing on Tuesday, but after a rocky five days as White House press secretary — during which Zacharia's briefing performance and legal qualifications were widely criticized — a White House official told Business Insider on Friday that she was leaving the role. Read the original article on Business Insider

Then-White House press secretary Katie Zacharia held her first press briefing Tuesday. Win McNamee/Getty Images Questions about now-former press secretary Katie Zacharia's legal credentials put résumé claims in the spotlight. Recruiters share how they've caught candidates inventing jobs, faking degrees, or exaggerating their past. Nearly 4 out of 10 Americans admit to putting inaccurate information on their résumés, a survey found. For corporate recruiters like Martha Heller, asking questions about a job candidate's credentials — like the kind that swirled around now-former White House press secretary Katie Zacharia this week — is par for the course. When a background check failed to verify an executive candidate's college degree a few years ago, Heller inquired about the discrepancy. The candidate, who was being considered for a job at a California insurance company, claimed a flood at his school had destroyed the records from the year he graduated. Skeptical, Heller called the college and learned that no such event had occurred. "It was like detective work," she said, adding that the problem wasn't whether the candidate had a college degree. It was that he misrepresented his education and then doubled down when questioned, she said. White House controversy Zacharia's self-described legal career has been the subject of intense scrutiny in recent days following her appointment as White House press secretary. When asked by a reporter what state she passed the bar exam in, she responded, "When I moved to China." Business Insider reviewed records for all 50 states and the District of Columbia and found no evidence that Zacharia had been admitted to any state bar in the US after she graduated with a law degree from Pepperdine University in 2011. Zacharia later defended calling herself a lawyer, saying that after failing the bar exam the first time, she did not take it a second time. On Friday, a White House official confirmed that she is "transitioning out" of the role. Vetting résumés One of a recruiter's jobs is to vet a candidate's background. Research suggests it's not uncommon for candidates to exaggerate their credentials. Some 37% of Americans said they've put inaccurate information on their résumés, according to a June report from Novorésumé, an online résumé-building service. Nearly 7% said they'd claimed a degree, certification, or other credential they didn't possess, while 6.1% said they'd listed a job that didn't exist or was substantially fabricated. The findings are based on a May survey of 2,000 US adults. Brian Fink, a managing partner at tech recruiting firm The ReWork Group, can relate. Last year, a candidate for a senior marketing job at a cybersecurity company was on the verge of being hired when a background check failed to confirm that he'd worked for a company listed as a past employer on his résumé and LinkedIn profile. Fink said he gave the candidate an opportunity to provide evidence supporting his claim, but the man refused. "I had no choice but to rescind the offer," said Fink. "If you're willing to lie about your education, what else are you willing to lie about?" Background checks Recruiters typically wait until a job candidate is a finalist to conduct a background check because the task is time-consuming and costly. They also tend to hold off contacting references early on to avoid tipping off the person's current employer that they're job hunting. Early in the process, though, some recruiters will look for potential red flags by probing inconsistencies or gaps in candidates' work histories. Doug Johnson, CEO of executive search firm Valor Partners, said he asks candidates at the end of an interview if there's anything embarrassing or potentially damaging in their past that might come up during a background or reference check. He tells them that disclosing it now gives them a chance to address the issue with a prospective employer, while discovering it later could cost them the job. Most candidates say there's nothing to be concerned about, said Johnson. But some subsequently fall off the radar, and others suddenly report receiving a raise or finding a better opportunity elsewhere. "It worries people who have a conscience," he said. Update: October 16, 2026 — This article has been updated to reflect Friday's news that Zacharia is out of the role. Read the original article on Business Insider

Lindsay Clark / The Register: The PostgreSQL Global Development Group delays the general availability of PostgreSQL 19 after LLM-assisted code reviews uncovered architectural defects  —  Core devs revert up to 10 features, push release to November, and blame better tooling rather than vibe coding

Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.

The new Nemotron 3.5 models show how the AI giant is focusing on reinforcing its own GPU infrastructure while supporting the open source community.

Startup investors aren’t exactly hitting pause, but they did scale back on giant rounds this past week, with just two startup financings in the multiple hundreds of millions.

In a research post published October 16, 2026, Anthropic reported that its Claude Mythos 5 model, working in a closed loop with an automated evaluator and largely on its own, designed quantum circuits that improve on the best previously published circuits across eight computational primitives, in some cases by an order of magnitude or more. The primitives, the basic routines from which larger quantum algorithms are built, span chemistry, optimization, quantum simulation, number theory, and…

The agents got in through credentials and connection settings left exposed in app configurations, public code repositories, and overly permissive cloud roles.

Dylan Sloan / Bloomberg: Three CoreWeave co-founders have sold $3.3B in stock since its March 2025 IPO, including $2.4B in 2026 alone; CoreWeave stock fell 60%+ from its June 2025 peak  —  Three CoreWeave Inc. co-founders have sold $3.3 billion in company shares since last year's initial public offering …

FDA scientists said none of the popular drugs have been proven safe or effective.

Microsoft’s October 2026 Patch Tuesday is the year’s largest release, with 1,408 CVEs requiring customer action, 72 of them rated critical. September, the previous high, carried 963. One CVE is already exploited: CVE-2026-96951, a Windows Shell flaw that bypasses Mark of the Web. Two were publicly disclosed before release, in the .NET Framework and the MessagePack-CSharp library. Separately, on 25 September Microsoft reported attacks against CVE-2026-65660, a SharePoint Server flaw fixed in August. Readiness recommends a Patch Now scheduling for Windows, Office, Exchange and the developer tooling, and a standard release schedule for SQL Server. The Readiness team has published an infographic summarising deployment risk by product family. Known issues On 14 October, Microsoft added a known issue to this month’s Windows 11 updates, KB5127648 for versions 24H2, 25H2 and 26H2, and KB5127646 for 26H1. Non-admin users might be unable to open Remote Desktop connections to devices that have Administrator protection enabled, with error 0xC000000D. The issue started with September’s non-security preview update. The Windows 11 security baselines enable Administrator protection by default, so test remote access to managed hosts before broad deployment. Microsoft’s mitigation is to turn off Administrator protection temporarily through your policy management tool, and a fix will follow in a future update. Two issues remain open: Some USB Audio Class 1.0 devices might fail to start or produce no sound. The 14 September out-of-band update resolved part of this, and for the remaining symptoms Microsoft directs IT administrators to Microsoft Support for Business. Windows Server Update Services still does not display synchronisation error details on Server 2025 and Server 2022. Microsoft removed the function to address CVE-2025-59287 and offers no workaround. And three are now closed: The incorrect “Microsoft Defender Antivirus is turned off” notifications, still open when we published in September, were fixed by Defender Antivirus update 4.18.26080.4, released on 17 September. On Windows 11, the October update fixes Explorer failing to start after sign-in on multi-user systems such as Azure Virtual Desktop with FSLogix, which left users at a black screen. On Windows 10, Windows 11 23H2 and Server 2016 and 2019, it fixes File History failing to back up or restore and showing a false “Reconnect your drive” message. Major revisions and mitigations Between the September and October releases, from 9 September to 12 October, Microsoft’s Security Update Guide notifications covered 111 entries for Microsoft’s own products, not counting Chromium republications for Edge. Of those 111, 90 are true revisions rather than new entries. September’s window had one. On 17 September, 84 of September’s CVEs gained Office for Mac updates. Each revision note tells customers running affected Mac software to “install the update for their product to be protected”. On 16 September, Microsoft corrected the scoring of three critical SQL Server remote code execution flaws from September, CVE-2026-67378, CVE-2026-67631 and CVE-2026-67643. The scores now record that “an attacker does not require any privileges”. Microsoft calls this an informational change. On 25 September, Microsoft revised CVE-2026-65660, a SharePoint Server remote code execution flaw fixed in August, to state that it “had reliable evidence of observed attacks against exploitation of this vulnerability”. CISA added it to its list of known exploited vulnerabilities the same day. The Security Update Guide still shows “Exploited: No” for this CVE, so a report filtered on that flag will miss it. If any SharePoint server lacks the August update, install it now. Of the 21 new entries, 18 are critical cloud-side flaws in Azure, Microsoft 365 Copilot, Dataverse and Fabric, all marked “Customer action required: No”. Two are Edge flaws, and one is CVE-2026-96940 in Exchange Server, published on 2 October and covered below. Microsoft has published no mitigations and no workarounds in the October release. Windows lifecycle and enforcement updates These support milestones passed with this release on 13 October, as scheduled: Office 2021 retail and Office LTSC 2021, including Skype for Business LTSC 2021, reached the end of support. Windows 10 Enterprise 2016 LTSB and Windows 10 IoT Enterprise LTSB 2016 reached the end of extended support. Extended Security Updates for Windows Server 2012 and 2012 R2 ended. Year three was the last, so the October update is the final one for both. Windows 11 Home and Pro version 24H2 reached the end of updates. Windows Server 2022 moved to extended support, which runs to 14 October 2031. The next milestones fall on 10 November 2026, the date of November’s Patch Tuesday. .NET 8 and .NET 9 reach the end of support, as do PowerShell 7.4 and 7.5. Windows 11 Enterprise and Education 23H2, and IoT Enterprise 23H2, reach the end of updates, and Microsoft says November’s update “will be the last update available for these editions”. Microsoft also starts or tightens several enforcement changes with this release: Windows 11 24H2, 25H2 and 26H2, and Windows Server 2025, now restrict NTLMv1-derived credentials for single sign-on by default. Where Credential Guard is off, Microsoft warns this “might affect Wi-Fi, Ethernet and VPN connections that use MS-CHAPv2-based authentication” (KB5066470). AD FS Distributed Key Manager container permissions move into enforcement mode. Supported servers remediate automatically, but Server 2012 and 2012 R2 need manual remediation (KB5121391). ReFS volumes on removable media enter an audit phase, and blocking is enabled by default from the January 2027 update (KB5130741). The Windows Production PCA 2011 Secure Boot certificate, used to sign the Windows boot loader, expires on 19 October. Devices without its replacement, Windows UEFI CA 2023, keep starting and updating normally, but they stop receiving new early-boot protections (KB5062710). Microsoft’s test guidance for this release runs to 496 Windows entries, 41 of them flagged as high risk, against 466 and 55 in September. Printing, scanning and font rendering account for 31 of the 41. The Readiness team recommends these testing priorities: Printing. Print documents with mixed fonts from 32-bit and 64-bit applications to physical and virtual printers. Add network printers by discovery and by IP address, and print through a shared print server, a USB printer and a PostScript driver. Downloaded files. The exploited Shell flaw bypasses Mark of the Web, so open files and shortcuts downloaded from the internet and confirm the SmartScreen and security warnings still appear. Remote access. Test Remote Desktop with a non-admin account against hosts that have Administrator protection enabled, and test Wi-Fi and VPN connections that use MS-CHAPv2. Application installs. Install, repair and uninstall a representative set of MSI packages, including packages with script custom actions. Windows Installer takes 38 fixes this month. Network servers. Run DNS servers (52 fixes) and DHCP servers (18) under load, and confirm leases, zone transfers and conditional forwarders behave as before. Each month, we break down the update cycle into product families, as defined by Microsoft, with the following groupings. Browsers For the third month in a row, Microsoft’s Patch Tuesday release lists no browser CVEs. Edge security fixes arrived between releases instead. Between 9 September and 12 October, Microsoft published 414 CVEs for Microsoft Edge in the Security Update Guide: 409 republished from Chromium and five specific to Edge. None carries an exploited flag, and no Edge release in that period reported an exploit in the wild. Microsoft Windows Windows takes 1,122 CVEs this month, 42 of them critical. Elevation of privilege accounts for 617 entries, information disclosure for 200 and remote code execution for 179. Of the 42 critical entries, 31 are remote code execution, nine are elevation of privilege and two are spoofing. The exploited flaw is CVE-2026-96951, a Windows Shell security feature bypass that evades Mark of the Web defences. An attacker must convince a user to open a crafted file or follow a link. CISA added it to its list of known exploited vulnerabilities on 13 October, with a remediation date of 16 October. DHCP takes 18 fixes, six of them critical remote code execution: five in DHCP Server and one in the DHCP client. DNS Server takes 52, 10 of them remote code execution, though none is critical. Critical remote code execution also affects Hyper-V, Message Queuing, Microsoft QUIC, the Remote Desktop Gateway, Windows Deployment Services, Active Directory Domain Services, NDES and the multicast transport driver. In file and image handling, the Raw Image Extension has three critical fixes, one of them a CVE assigned by Cisco Talos, and the PostScript printer driver takes three more. Text shaping takes two, and Media Foundation, the codecs library, the video decoder, GDI+, the graphics component and the Windows PDF component take one each. The virtualisation-based security enclave takes eight fixes, five of them critical elevation of privilege. The most-patched areas are DNS Server at 52, Win32k at 48, the Windows Kernel at 46 and Windows Installer at 38. Add this Windows update to your Patch Now schedule. Every client needs the fix for the exploited Shell flaw, and DHCP servers and Hyper-V hosts need the critical server-side fixes. Microsoft Office Microsoft released 180 Office CVEs this month, 26 of them critical, and remote code execution accounts for 107. Client updates on Windows are Click-to-Run only, for Microsoft 365 Apps, Office LTSC 2021 and Office LTSC 2024. Office for Mac updates ship in the same release this month, rather than nine days later as they did in September. Excel takes 69 fixes, 11 of them critical. Word takes 22, Access 13, Outlook 10 with five critical, PowerPoint nine with four critical, and Visio three, all critical. SharePoint Server Subscription Edition takes 34 CVEs in KB5002927, two of them critical. SharePoint Server 2016 and 2019 left extended support on 14 July 2026, and two of this month’s flaws list them as affected with no update: CVE-2026-69943 for both versions and CVE-2026-97783 for 2019. Office Online Server takes 43 CVEs in KB5002928. Skype for Business Server takes three, in KB5132779 for 2015 CU13, KB5131693 for 2019 CU8 and KB5131692 for Subscription Edition CU1. Add these updates to your Patch Now schedule, because 25 of the 26 critical entries affect Excel, Outlook, PowerPoint, Visio and Word. Microsoft Exchange and SQL Server Exchange has one critical entry this month and SQL Server has none. Exchange Server has seven CVEs across 2016 CU23, 2019 CU14 and CU15, and Subscription Edition: one critical remote code execution, CVE-2026-70571, five elevations of privilege and one spoofing flaw. Six are fixed by the 13 October updates: KB5128895 for Subscription Edition, KB5128896 for 2019 CU15, KB5128897 for 2019 CU14 and KB5128898 for 2016 CU23. The seventh, CVE-2026-96940, was published on 2 October. Microsoft lists it against a separate set of updates released that day, KB5129955 to KB5129958, not against the 13 October updates, so confirm both sets are installed. Microsoft rates both CVE-2026-96940 and the critical entry as “Exploitation More Likely”.. SQL Server has 22 CVEs, none of them critical: eight remote code execution, seven elevation of privilege, four information disclosure and three denials of service. Each supported branch gets a cumulative update and a GDR: 2025 (KB5126967, KB5128492), 2022 (KB5126934, KB5128493), 2019 (KB5128494, KB5128495) and 2017 (KB5128496, KB5128497). Exchange goes on the Patch Now list. SQL Server goes on the Schedule list because none of its 22 entries is critical. If September’s SQL Server update is still outstanding, install it first. Microsoft Developer Tools Microsoft released 66 CVEs across its developer tooling this month: two critical, 63 important and one moderate. Remote code execution accounts for 18 entries and elevation of privilege for 13. Both critical entries also affect Windows. CVE-2026-105016 is a remote code execution flaw in Microsoft QUIC that needs no authentication or user interaction, and it affects .NET 8, 9, 10 and 11 on Windows and Visual Studio 2022 and 2026. CVE-2026-96222 is an AD FS certificate validation flaw that Microsoft lists against both the .NET Framework and Windows Server. Two entries were publicly disclosed before release. CVE-2026-108398 in the .NET Framework lets an authenticated attacker bypass Windows Defender Application Control. CVE-2026-92707, a denial-of-service vulnerability in the MessagePack-CSharp library assigned by GitHub, affects Visual Studio and the ASP.NET Core SignalR MessagePack protocol. Visual Studio Code has 10 fixes, five of them security feature bypasses, and PowerShell 7.4, 7.5 and 7.6 take two. Add these updates to your Patch Now schedule, starting with the .NET updates that carry the QUIC fix. Adobe (and third-party updates) Adobe published 11 security bulletins on 13 October, covering 175 CVEs across ColdFusion, Experience Manager, Commerce, Photoshop, Bridge, FrameMaker, Dimension, the Substance 3D tools and the Content Credentials SDK. None is rated priority 1, and Adobe is not aware of exploits for any of them. No Acrobat or Reader security update for this month. I mentioned last month that we are in for a few months of extraordinary patch releases. Harking back to 2003 (when I started work on the nascent field of Microsoft patch management), with Microsoft releasing just  51 updates, anything over a 1000, much less 1400 CVE entries would have been unimaginable. I don’t think that we are at a “patch maximum” yet — but I hope that things calm down soon.

AI agents are changing how software gets built. Developers have gone from writing every line of code by hand to directing agents that write most of the code. As... AI agents are changing how software gets built. Developers have gone from writing every line of code by hand to directing agents that write most of the code. As a result, the current workflow is split across a laptop, a cloud model API, and a cloud VM. NVIDIA RTX Spark is built for AI development. Thanks to the NVIDIA GB10 system-on-a-chip and large unified memory, developers can run local… Source

Long before Taco Tuesday became part of the pop-culture vernacular, Tuesdays were synonymous with security — and for anyone in the tech world, they still are.  Patch Tuesday, as you most likely know, refers to the day each month when Microsoft releases security updates and patches for its software products — everything from Windows to Office to SQL Server, developer tools to browsers. The practice, which happens on the second Tuesday of the month, was initiated to streamline the patch distribution process and make it easier for users and IT system administrators to manage updates. Like tacos, Patch Tuesday is here to stay. Patch Tuesday coverage has long been a staple of Computerworld’s commitment to provide critical information to the IT industry. That’s why we’ve gathered together this collection of recent patches, a rolling list we’ll keep updated each month. In case you missed a recent Patch Tuesday announcement, here are the latest six months of updates. October Patch Tuesday: 1,408 CVEs, 1 exploited flaw and a SharePoint surprise Microsoft just shipped 1,408 vulnerabilities in one month, and a SharePoint flaw it marked “not exploited” is actually under attack right now. Our expert recommends a Patch Now scheduling for Windows, Office, Exchange and the developer tooling, and a standard release schedule for SQL Server. Get more info on the October 2026 Microsoft security updates. September Patch Tuesday: 963 CVEs, 2 exploited flaws, 1 message September’s Patch Tuesday is Microsoft’s biggest of 2026, with 963 CVEs, two exploited flaws and a clear message: prioritize Windows, Office and SQL Server. Two vulnerabilities are already exploited: CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in Advanced Local Procedure Call. Nothing in this release was publicly disclosed ahead of the patch. Readiness recommends a Patch Now scheduling for Windows, Office, SQL Server and the developer tooling, and standard patch release for Exchange. Get more info on the September 2026 Microsoft security updates. August’s Patch Tuesday is a monster: 751 fixes, with an exploited Windows flaw Microsoft’s August 2026 Patch Tuesday closes at 751 CVE entries (across all product families), with 108 rated as critical. One flaw is already exploited, CVE-2026-68820, an elevation of privilege in the Windows WinSock driver (afd.sys). Two more were disclosed but not exploited. This security-only release earns Patch Now for Windows, Office and Exchange; no SQL Server updates this month. Unfortunately, several critical issues affect server roles: Windows DNS Server carries a cluster of critical RCEs; Windows DHCP Server is the most-populated Microsoft product family at 14 entries. Testing should lead with printing and fonts and the Remote Desktop client, then a WinSock smoke test given the exploited afd.sys flaw. Get more info on the August 2026 Microsoft security updates. July’s Patch Tuesday sees an end-of-support collision amidst a massive, record-setting patch wave Microsoft addressed 722 CVEs this month once the 427 Chromium upstream relays are set aside — roughly three times a normal cycle and one of the largest single months in recent memory. Two vulnerabilities arrive under active exploitation: an elevation of privilege in Active Directory Federation Services (CVE-2026-56155), and an elevation of privilege in SharePoint Server (CVE-2026-56164). A third, a BitLocker security feature bypass (CVE-2026-50661) is publicly disclosed but not yet exploited. The July 2026 Patch Tuesday earns Patch Now recommendations for Windows, Office, Exchange, and SQL Server. SharePoint has two critical RCEs on top of its exploited zero-day, and Exchange Server returns with a critical on-premises spoofing flaw. Adding to our (dear) administrator’s efforts, SharePoint Server 2016/2019 and SQL Server 2016 all reach end of support today. More info is available here on Microsoft Security updates for July 2026. For June, Patch Tuesday means an IT scramble Microsoft this month released 206 updates affecting Windows, Office, Exchange Server, and its developer tools — including three Windows vulnerabilities already publicly disclosed. That trio includes an elevation of privilege in the Collaborative Translation Framework (CVE-2026-45586), a denial of service in HTTP.sys (CVE-2026-49160), and a BitLocker security feature bypass (CVE-2026-50507). At the moment, none appear to be under active exploitation, but all three are rated “Exploitation More Likely.”  Even without an exploited zero-day, the June 2026 Patch Tuesday release requires Patch Now recommendations for Windows, Office, and Exchange. The latter is back in the patch picture with a consolidated security update that Microsoft recommends installing “as soon as possible.” More info is available here on Microsoft Security updates for June 2026. For May, Patch Tuesday means 139 updates — but no zero-days Microsoft this month released 139 updates affecting Windows, Office, .NET, and SQL Server (though there were no updates for Microsoft Exchange Server). Despite the absence of zero-days, the May Patch Tuesday update still requires Patch Now recommendations for Windows and Office.  The combination of three unauthenticated network RCEs (Netlogon, DNS Client, and SSO Plugin for Jira and Confluence), four Word Preview Pane RCEs, the large TCP/IP vulnerability cluster, and the carry-over BitLocker recovery condition (still active on Windows 10 and Windows Server) warrants an accelerated deployment release schedule.  More info is available here on Microsoft Security updates for May 2026.

Tesla unveiled a new iteration of the Roadster that can travel upside down. Tesla Elon Musk's Tesla unveiled its new car, the Roadster, on Thursday. In its demonstration, the car took flight using thrusters and performed kickflips. Here's what smart people in tech and business have to say about it. Tesla’s long-delayed Roadster finally made an entrance — by flying off a ramp. At a livestreamed event Thursday night, the sports car climbed a curved ramp until it was upside down, launched into the air, flipped, and landed on its wheels, apparently aided by thrusters beneath the vehicle. “Well, it worked,” Elon Musk said during the livestream. Musk said Tesla and SpaceX engineers collaborated on the car, which uses high-pressure air and thrusters to lift itself off the ground. Tesla also showed a recorded demonstration in which the Roadster reached 60 mph in 0.81 seconds. While the legality of such a device on public roads remains in question, the tech world is reacting to Musk's new creation with awe. Here is what the leading voices in business and tech are saying about the new Roadster. Jason Calacanis Bloomberg/Getty Images Angel investor Jason Calacanis said in an X post that the videos of the flying car looked like "science fiction," and they're real, although they don't seem to be. He seemed enthused by the demonstration, asking that while the car was only airborne for a couple of seconds, "what if it could keep you in the air for five minutes? Or ten? Or 30?" Gene Munster Brian Ach/Getty Images for LocationWorld 2016 Gene Munster, the managing partner at Deepwater Asset Management and a longtime tech analyst, wrote his two takeaways from the Roadster event on X. First, that "it was an engineering flex with no commercial value beyond embarrassing traditional car makers." And the second was that it signaled Musk's ambition to merge his two publicly traded companies, SpaceX and Tesla. John Carmack John Carmack said he's happy to get the Roadster without the thrusters. credit should read GABRIELLE LURIE/AFP via Getty Images John Carmack, the former CTO of Meta's virtual reality division, politely rejected the flying car. "That demo involved a non trivial chance of embarrassing failure!" he wrote on X. He added, "I'm only going for the baseline model. At this point in my life, rocket bunny hops are out of my comfort zone." Marques Brownlee MKBHD Chance Yeh/Getty Images for HubSpot Tech YouTuber Marques Brownlee, better known as MKBHD, appeared incredulous at Tesla's claims about the new Roadster. "They really just got on stage and said this newly designed 4000+ pound car can do flips and go half the speed of sound (380+mph) and will ship in 2028," he wrote on X. "This is a prank, right?" Alexandr Wang Alexandr Wang, Meta's chief AI officer, has been trumpeting Muse. Bloomberg/Getty Images Meta's chief AI officer, Alexandr Wang, had one burning question after watching Tesla's Roadster demonstration. "wait who the hell was driving the tesla," Wang wrote on X, sharing footage of the car speeding down a dark track. Dan Ives Dan Ives. Astrida Valigorsky/Getty Images Dan Ives, an analyst at Yorkville Ives and a longtime Tesla bull, said the Roadster reveal was "a statement about where the Tesla and SpaceX engineering stacks are headed together." He wrote that the car's SpaceX-developed hardware was "a small example of the synergies between Tesla and SpaceX." Still, he said, "The Roadster will not move the volume or revenue needle," but would "restore the brand halo at the top of the market." David Marcus David Marcus. Bloomberg/Getty Images David Marcus, the former PayPal president and Meta executive, credited Musk with bringing a sense of awe back to technology. "The thing I’m most grateful to Elon for is bringing back an age of wonder and excitement to humanity," Marcus wrote on X, sharing Tesla's Roadster demonstration. "That was jaw-dropping awesome! Screams and mouths wide open in the audience. Nuts." Sam Altman OpenAI CEO Sam Altman at the company's DevDay conference on Sept. 29, 2026. Bloomberg/Getty Images Sam Altman, the CEO of OpenAI, appeared to momentarily set aside his long-running beef with Musk to congratulate the Tesla boss. "Wow the new roadster looks quite amazing, good job @elonmusk," Altman wrote in a Friday X post. Altman had reserved an earlier version of the Roadster but said in October 2025 that he had canceled it after waiting 7.5 years, prompting a public exchange of barbs with Musk. Musk was a cofounder and early financial backer of OpenAI, but he left the company's board in 2018 and has become critical of Altman's leadership. Read the original article on Business Insider

This week, we discuss a new pod setup, video games, and Elon's spending habits.

Matt Marshall / VentureBeat: Reflection AI releases Apache 2.0-licensed weights for Beam, a 501B-parameter model, trained with RL that penalized unnecessary tokens  —  Reflection AI today released the weights of Beam, its first open model, and is pitching it against the Chinese open models that many U.S. companies …

Vinod Khosla wants a new chief of staff who can handle 12-hour workdays. Steph Chambers/Getty Images Billionaire VC Vinod Khosla is hiring a chief of staff to help evaluate investments and work with founders. The role requires a three-year commitment, 12-hour days, and availability on nights and weekends. The opening comes amid growing demand for chiefs of staff and an AI-fueled venture capital boom. One of the biggest names in venture capital is looking to hire a new right-hand person. Vinod Khosla, founder of Khosla Ventures, said on X Thursday that he's seeking his next chief of staff, a job that offers a rare opportunity to work in close contact with the billionaire investor whose Silicon Valley firm is known for its early bets on OpenAI, DoorDash, and Instacart. "What matters is how quickly you learn, the questions you ask, and whether you can think from first principles," Khosla wrote. "You'll help evaluate opportunities and work with founders building consequential companies." The opening comes as demand for chiefs of staff is growing at a fast clip, with the role offering a potential path to senior leadership. For the person Khosla hires, it also offers a front-row seat to an AI-fueled venture capital boom. A hot job Job postings for chiefs of staff on Indeed were nearly 90% above pre-pandemic levels in September, far outpacing management jobs and postings overall. In the San Francisco Bay Area, the median advertised salary for the role is $175,000, compared with about $152,000 nationally, according to Indeed. Through the first three quarters of this year, US VC deal value reached $516 billion across an estimated 14,199 deals, according to PitchBook. That is already the highest total in the research firm's dataset and roughly 44% above the prior record, set in 2021. Most chiefs of staff in the US stay in the same profession when they change jobs, but some move into senior leadership roles, according to a March study from LinkedIn. Becoming a chief operating officer was the second most common career move, accounting for 2.9% of transitions. Another 3.7% became founders or cofounders, while 1% became CEOs. Close contact Khosla's new chief of staff will work directly with him to evaluate investment opportunities, meet founders, research emerging technologies, and support portfolio companies, according to the job posting. As the person earns Khosla's trust, they'll also lead conversations on his behalf and help determine which opportunities to pursue. "It will suit someone who wants significant responsibility and is comfortable with ambiguity," the ad says. Compensation isn't listed. The posting says the position comes with a three-year commitment and long hours. The successful candidate must work in person in Menlo Park, California, generally from 8 a.m. to 8 p.m., and be available nights and weekends when needed. The potential payoff? Previous chiefs of staff have gone on to start companies, launch investment firms, and take leadership roles at Khosla Ventures, according to the listing. Applicants shouldn't, however, count on becoming a VC. The posting says the job is "not a dedicated investing seat or a guaranteed path to one." Read the original article on Business Insider

Gintare Rimolaityte is the CEO and co-founder of Trendos, the AI search visibility platform that helps brands understand and optimize how they appear across LLMs. She gained early experience at Oxylabs in 2020, first as Business Development Manager and then as Head of Commerce, where she led Sales, Business Development, Account Management, and Customer Success teams for one of its business units. From 2022 until 2025 she served as CEO of engagement platform JumpTask. Prior to co-founding…

Amulya Vishwanath, who spent seven years leading product marketing for NVIDIA’s robotics platforms, says robotics is currently in its “Lego era,” with the basic building blocks like actuators, robotic hands, software, and safety standards still being rebuilt.  This view runs counter to those who believe that robotics, powered by a general foundation model, is about to have […]