AI
GPT-5.6 becomes default model in Microsoft 365 Copilot as OpenAI touts coding capabilities
OpenAI's GPT-5.6 has been named the preferred model in Microsoft 365 Copilot, deepening the companies' enterprise partnership. Sam Altman announced the integration directly, and the reception from users has been enthusiastic enough that Altman followed up noting how much people love the model, nicknamed Sol. Developers have been fielding questions about the release in a live AMA covering GPT-5.6, Codex in ChatGPT, and computer use features.
Observers are still working out how to best use the model, with developer Simon Willison noting that Sol on Medium reasoning effort may be a strong new default for coding tasks, potentially surpassing the previous favorite GPT-5.5 on extra-high effort. OpenAI also highlighted a real-world coding case where GPT-5.6 autonomously handled a nearly 1,000-line task for an engineer at Snorkel AI without repeated prompting.
OpenAI doubles bio bug bounty rewards to $50K in expanded biosecurity program
OpenAI is evolving its Bio Bug Bounty into a permanent private program and doubling the maximum reward to $50,000, as part of what the company describes as ongoing efforts to strengthen safeguards around advanced AI capabilities in biology. The expanded program will invite researchers with relevant expertise to probe the company's biological safety measures on a continuing basis rather than through a time-limited bounty.
Consumer Tech & Gadgets
Disney Plus exploring free ad-supported streaming tier
Disney Plus is reportedly considering launching a free, ad-supported streaming tier, a move that would make it one of the few major premium services to offer a no-cost entry point. Nearly every major streaming platform already offers an ad-supported paid plan, but a fully free tier would be an unusual step for Disney and could significantly expand its user base as the streaming wars intensify.
Apple gains expanded access to AI chips and data center equipment in UAE
The US government has eased restrictions on Apple's ability to access AI chips and data center equipment in the United Arab Emirates, a significant policy shift that could accelerate Apple's infrastructure buildout for artificial intelligence in the region. The move reflects broader efforts to position American tech companies competitively in the Gulf as global AI investment surges.
Design
Figma CEO Dylan Field fires back at critic, says he's "never been more bullish" on design
Figma CEO Dylan Field publicly challenged a skeptic named Jason — apparently bearish on both design and Figma — with a pointed taunt on social media, saying he looks forward to "proving you wrong. Again." The post drew over 1,200 likes and sparked a minor wave of reaction in the design community, with Jordan Singer echoing the sentiment hours later by urging designers not to let "design fear mongering" take hold.
Dev Tools & Infrastructure
Vercel opens zero-config import for Lovable apps, backed by Nitro runtime
Vercel and Lovable announced a direct deployment integration that lets developers import Lovable-built apps into Vercel with no additional configuration, simply by connecting a Git repo. Vercel CEO Guillermo Rauch noted that new Lovable apps are now backed by Nitro, the open-web runtime, framing the partnership as a path from AI-assisted prototyping to production-grade hosting with no ceiling on scale.
GitHub: rewriting Copilot code-review tool instructions cut costs 20% without sacrificing quality
GitHub's engineering team published a detailed post-mortem on a Copilot code-review regression caused not by bad tools, but by bad tool instructions. After migrating the review agent onto the same shared toolset powering Copilot CLI, reviews became more expensive and caught fewer issues. The root cause was that the instructions were written for general repo browsing rather than the focused, sequential flow of reading a pull request. Rewriting them to mirror how a human reviewer actually works — ask, narrow, read, decide — restored quality and cut average review cost by roughly 20%, a result GitHub described as a lesson that tool instructions are as load-bearing as API documentation for any agent.
Gaming
Assassin's Creed Black Flag Resynced hits 2 million sales amid DLC pricing backlash
Ubisoft's Assassin's Creed Black Flag Resynced has sold 2 million copies, a strong debut for the $60 remake. The milestone arrives alongside mounting controversy over the game's monetization: the title ships with eight $10 cosmetic packs and a $5 map pack add-on, prompting significant fan backlash. Ubisoft has pushed back, issuing a statement insisting that "the standard edition is the full, complete experience."
The 2 million copies sold figure underscores healthy commercial interest in the remaster despite the ongoing pricing controversy, suggesting the backlash has not yet dented sales momentum.
Xbox layoffs cut id Software team in half, studio now back to its 2016 Doom-era size
id Software has released a statement following a round of Xbox layoffs that eliminated more than half of the studio's staff, leaving it at roughly the same headcount it had when it made the critically acclaimed 2016 Doom reboot. The cuts are among the most severe disclosed in the latest wave of Microsoft gaming reductions, raising questions about the future scale of projects at the developer behind the Doom and Quake franchises.
God of War Laufey confirmed for release before January 2028
Sony's next God of War entry, God of War Laufey, has been given a release window of before January 2028, offering the first concrete scheduling signal for the title. No specific date or platforms beyond the implied PlayStation family have been announced.
Security
Progress ShareFile orders emergency shutdown of on-premises Storage Zone Controllers over credible threat
Progress has issued an urgent warning to ShareFile customers to immediately power down their on-premises Storage Zone Controller servers in response to what the company is calling a credible external security threat. Progress has already disabled affected ShareFile accounts as a precaution and says customers must manually shut down the servers themselves, as the company cannot do so remotely. Progress told reporters it has no current indication of unauthorized access, framing the move as a proactive measure while the threat is investigated.
WP-SHELLSTORM hackers exposed own operation for three weeks, revealing 1.4M-domain target list and mass backdoors
A threat group that compromised thousands of WordPress sites left its own command server completely open for three weeks, inadvertently exposing its entire operation. Researchers who found the exposed server discovered an arsenal of 27 known plugin vulnerabilities, a target list spanning over 1.4 million domains, and evidence of thousands of backdoors already planted across victim sites. The incident provides an unusually complete picture of how large-scale WordPress exploitation campaigns are industrialized.
Injective Labs' GitHub compromised, malicious npm package exfiltrated crypto wallet keys to external server
Attackers compromised Injective Labs' GitHub repository and published a trojanized npm package, version 1.20.21, containing code that silently transmitted crypto wallet private keys and seed phrases to an attacker-controlled server. The supply chain attack means any developer or application that installed that version may have had sensitive credentials stolen. Injective has released version 1.20.23 as the clean replacement and is urging all users to update immediately and rotate any secrets that may have been exposed.