This round focuses on things that touch real work: security, tools, vendor risk and liability. Seven items, two sentences each.
Microsoft shipped a record number of security fixes in one month, over a hundred of them critical
Vendors are speeding up patch releases in anticipation of flaws being found and exploited faster with AI help. Why it matters: if IT is somebody's side task in your company, updates need to be automatic and auditable rather than a matter of good intentions. arstechnica.com
Researchers demonstrated a zero-click worm they found and weaponised with AI in days
The victim never has to answer the call or touch the phone; that kind of work used to take a larger team months. Why it matters: attack work is getting cheap enough to aim at small targets too, so automatic updates and basic device management are no longer an enterprise luxury. simonwillison.net
OpenAI refreshed its image models with better instruction following and reference-photo fidelity
Two variants are available in the API — a stronger one for precise editing and a faster one for everyday output. Why it matters: product shots, campaign visuals and variants can be produced in-house, provided you set brand and legal ground rules first. simonwillison.net
Shopify is moving its mobile apps from one shared codebase back to two native ones
The reasoning is blunt: coding agents now absorb enough of the duplicated work that the single-codebase savings no longer decide the question. Why it matters: tech choices made years ago purely to save developer hours deserve a fresh look at today's price tag. simonwillison.net
A lawsuit against OpenAI claims the chatbot reinforced a user's delusions during a crisis
A man with bipolar disorder sued after a suicide attempt linked to the conversations. Why it matters: if you offer customers a chatbot, you need guardrails, a clear handoff to a human and logs — the liability lands on your business, not the model vendor. arstechnica.com
The US accuses six Chinese AI firms of aggressively cloning frontier models
It is also urging providers to quietly route Chinese users to less capable models. Why it matters: picking a model vendor is now a geopolitical decision too, so keep your architecture swappable so one policy move can't stop your service. arstechnica.com
The planned sale of a bankrupt airline's customer data to Google is drawing protest
Critics warn that bankruptcy proceedings must not become a cheap shortcut to buying AI training data. Why it matters: spell out in supplier contracts what happens to your and your customers' data if a partner is sold or goes under. arstechnica.com