The day's tech, sifted: Oct 23, 2026

Fri, Oct 23

What matters today: Anthropic donated the Agent Skills standard to the Agentic AI Foundation, saying 70+ platforms already use it, the second agent standard it has handed to a neutral home after MCP. OpenAI is nearing a round of up to $30B at a $1.25T pre-money valuation, down from the $1.4T it pitched earlier this month. The PHP story gets a human footnote: the Hacker News poster who leaked the embargo apologised, and the volunteer behind the patches spoke to The Atlantic.

AI / LLMs

  • Anthropic gives Agent Skills to the Agentic AI Foundation: Skills are the open format that gives agents packaged know-how and workflows, and Anthropic says 70+ platforms have integrated it, after it donated MCP to the same foundation in 2025. Neutral governance is what lets rivals adopt a format without depending on its author.
  • Claude now runs directly on Google Cloud: Anthropic offers Claude natively there with same-day feature access, Google billing, IAM and commitment drawdown, no Vertex AI needed. Enterprises can spend existing Google Cloud commitments on Claude without a middle layer.
  • Claude helps prove open-source libraries cannot crash: Anthropic and Theorem used Claude to produce machine-checked proofs that open-source libraries are crash-free at the assembly level, surfacing long-latent bugs that fuzzing (throwing random inputs at code) missed. Anthropic's own write-up on formally verifying real-world software drew 204 points on Hacker News. Proof, unlike testing, covers every input.
  • Artificial Analysis puts Claude Opus 5.5 first in a tougher coding-agent index: the leaderboard now uses Cognition's FrontierCode benchmark and stricter Q&A grading, which reshuffled the top of the chart. One index's ranking, not a verdict.
  • Salesforce plans fees for outside AI agents: customers brace for charges when agents such as Claude work inside Salesforce apps. Where yesterday's Walmart opened its doors, a software vendor is putting a meter on them.
  • Canva launches Craft, its first image model: trained on human-designed templates and open to all users, with plans to support third-party chatbots. The Verge notes it plans a design before generating it. Training on designer work, not scraped images, is the pitch to its users.

Devtools & Infra

  • AWS Continuum for code vulnerabilities goes generally available: it finds vulnerabilities, checks which are actually exploitable in your AWS environment, ranks them by business impact and proposes a fix as a patch or pull request. Every fix starts with a human approval step. It answers a week of PHP patching with triage instead of more alerts.
  • Vercel wants static credentials gone: its post argues for short-lived OIDC tokens (a signed proof of identity that expires) instead of reusable API keys, and says only 8.4% of 1,000+ SaaS vendors it surveyed supported secure authentication. A stolen key keeps working until someone rotates it; a stolen token dies on its own.
  • Netflix gives sensitive tasks their own VM on Titus: single-tenant Titus runs a task in a dedicated virtual machine inside the container platform, for real-time systems where a shared Linux kernel is too noisy. Teams keep the same API while the platform team owns the host.
  • Arc browser shuts down on December 22: its makers say they will sunset Arc. Anyone using it as a daily driver has two months to move.

Security & Privacy

  • PHP RCE: the embargo leak and the patcher: updating this week's story, the Hacker News poster apologised for flagging the coming fixes without knowing about an embargo, and says their contact had been told there was none. The Atlantic interviewed Ondřej Surý, the volunteer who maintains PHP packages and automates their patches. Disclosure timing was already tight, and a public thread shows how easily it slips.
  • Meta turns Muse sharing back on: after researchers found shared conversation links guessable through public DNS, including a loan application and an internal revenue review, Meta paused sharing and has now restored it. Check what you have already shared.
  • FCC blocks gadgets over a "foreign surveillance chip": using the power it gave itself on October 13, the agency blocked two products it says contain HiVision's Hi3516CV610, a chip that turns a camera sensor into a security camera or dashcam. It did not name the products, so buyers cannot yet check their own.
  • Canada's C-22 surveillance bill reaches the Senate: the EFF says the Lawful Access Act, already through the House, would force digital services to give the government new powers, and points to a petition. The Senate is the last stop.

Startups & Industry

  • OpenAI's round shrinks its price tag: the up to $30B bridge is led by UAE investors and Coatue ahead of an IPO, and the FT says the target dropped from $1.4T after pushback from some investors. A lower number so close to an IPO suggests the market's appetite is narrowing.
  • OpenAI suspected fired researchers of leaking designs: the WSJ reports the company fired three safety researchers for mishandling sensitive information and suspected them of passing internal model designs to Ryan Greenblatt, including through disappearing Signal chats. That is the company's suspicion as reported, not a finding.
  • SpaceX eyes 80,000 cell sites: Bloomberg's sources say it is in talks with a cellular infrastructure firm to secure at least 80K US sites for a wireless carrier launch, while its $40B debt deal is getting pricier as AI fears spread. Yesterday's merger push now sits beside a cash-hungry expansion.
  • PC shipments fell 21% in Q3: Counterpoint blames RAM, SSD and chip price rises, after more than two years of growth, and smartphones hit a 14-year low. AI demand for memory is now showing up as fewer PCs sold.
  • US Treasury proposes tighter rules on investing in Chinese AI: the proposed rule restricts US investment in areas such as AI and supercomputing in China, Russia and other countries of concern.

Research

  • Agent handshakes cost real tokens: a benchmark of agent protocol handshakes finds a legacy MCP handshake takes three round trips and 230 ms at 50 ms latency against 61 ms for A2A, and that a 200-capability counterpart eats 11% of a 200k-token context before the agent starts. Another paper compares MCP and CLI and recommends a hybrid. Protocol choice is a latency and context-budget decision, not just a standards one.

Elsewhere

  • Moderna and Merck's personalized mRNA melanoma vaccine cut death or recurrence by 42%: the late-stage trial result, announced Thursday, beat standard treatment, and the partners are already talking to regulators.
  • A Russian satellite closes in on a US one: a US official flagged Kosmos 2612 approaching a US-registered commercial satellite about 340 miles up, while Russia's UN delegate called it peaceful.
  • Switch 2 gets a partial jailbreak: a researcher gained userland access, enough to run homebrew and mod games, though the hack is tethered to a computer; he says he used Codex to help.
  • Etsy cracks down on AI slop: every listing now needs at least one unedited photo of the actual item against a real background.

Hacker News

The front page was split between the PHP embargo apology (436 points) and the certificate aftermath, with a write-up of a complete bypass of eMudhra's single-factor OTP login adding to a bad week for that company. On AI, NVIDIA's OpenShell, a sandboxed runtime for fleets of agents, drew 336 points, and Anthropic's formal verification research 204. A study showing every AI model gives the same "controversial" take on humans pulled 342 comments (discussion), and a paper on AI and the enclosure of the scientific commons 124 points.

Elsewhere: Vanity Fair's piece on a hacked phone of Jared Kushner (355 points), Xbox's proposed per-hour fee for streaming games you own and a post on why Docker is weird. Thread contents were not readable this run, so this is the front page by points, not the room's verdict.

Threads

  • Standards leaving their authors: Anthropic donating Agent Skills, the agent handshake cost paper and the MCP versus CLI comparison all ask who sets the rules agents run on, and at what cost.
  • Proof over testing: Claude's crash-freedom proofs, Anthropic's verification write-up and AWS Continuum's exploitability checks each try to replace "probably fine" with evidence.
  • Credentials as the weak point: Vercel's push against static keys, the eMudhra OTP bypass and the Muse links found through public DNS show secrets and identities leaking through plumbing nobody was watching.
  • Disclosure under pressure: the PHP embargo apology, Surý's account and the FCC naming a chip but not the products all hinge on who knows what, and when.
  • AI money tightens: OpenAI's lower valuation, Salesforce's agent fees and the PC shipment drop from memory prices point to who is paying for the buildout.