HeadFlash

Daily tech-news flash

AI, privacy and security, caught up in five minutes.

A short email and matching podcast for each niche you pick, every weekday — what moved, why it matters, and where to read the full story. No noise, no hype.

Your niches

By subscribing you agree to receive the HeadFlash newsletter and accept our Privacy Policy. We use double opt-in — confirm via the email we send; unsubscribe anytime.

01

AI

  1. Gemini 4 Carbon tops AI index as Noyb files five GDPR complaints against Scale AI Google's new model leads benchmarks two weeks after Argon, while Noyb targets Scale AI over tracking of 900,000 Outlier workers.
  2. OpenAI cuts GPT-6.1 Terra API prices 50% as frontier training resumes OpenAI launches GPT-6.1 Terra at half the API price, Cathedral AI agents breach Anthropic in 12 hours, and DeepMind shows Genie 4.
  3. Anthropic files for Nasdaq IPO as OpenAI claims AI proof Anthropic files S-1 for a Nasdaq listing under ANT, OpenAI says its AI disproved a core complexity hypothesis, and a rogue agent hunts exposed LLMs.
  4. Anthropic's Claude generates 180 million lines of formal proofs Claude formally verified code from 123 open-source libraries, finding bugs that evaded testing for over a decade. Plus: IBM's open-weight bet and Ukraine's strikes on Russian data centres.
  5. China-linked ARTEX agents breached 2,250 Microsoft 365 tenants in under three hours Storm-0940 used an open-source AI agent framework to reach 2,250 M365 environments without breaking MFA, as banks and vendors race to contain autonomous agents.
More AI
02

Privacy

  1. DHS leak exposes 41,000 staff as Austria bets on Matrix for hospitals A transparency group published data on 41,000 Homeland Security workers, while Austria trials encrypted messaging to replace faxes in hospitals.
  2. noyb Files Five Complaints Against Scale AI Over Worker Tracking Privacy group targets Scale AI's Outlier platform in four countries, alleging illegal monitoring of freelancers who train AI models.
  3. Samsung TV telemetry, Johns Hopkins AI leak, and India privacy law fight A hacker finds Samsung TVs recording audio and screenshots for ads, 3,182 patient records went into an unapproved AI tool, and 21 Indian publishers sue over privacy law.
  4. OpenAI cuts its top models off from the live internet after security scares OpenAI locks advanced models offline, Google opens a Gmail ad loophole, and EU ambassadors agree six cookie purposes that skip consent.
  5. eMudhra exits TLS business after 8 weak-key certificates An Indian certificate authority quits global SSL/TLS after researchers found private keys crackable in milliseconds, plus Malaysia's key custody and a Flock map.
More Privacy
03

Security

  1. DHS breach exposes 41,000 staff; CISA orders Node2Shell patches Hacker leaks data on 41,000 DHS employees through Okta, while CISA confirms active exploitation of a critical Brotli flaw and sets a November 10 patch deadline.
  2. Apple patches 329 flaws, including silent camera access Apple's biggest security release in memory fixes 329 flaws, CISA flags PHP2Shell as exploited, and Pegasus hit Serbia's rector before the vote.
  3. Sandworm used Yggdrasil mesh network as C2 channel before wiping Ukrainian grain firm ESET documents first state-linked Yggdrasil C2, a fake ransomware recovery CEO indicted, and a 525,000-person breach at the University of Copenhagen.
  4. Hackers breach 70,000 firewall and VPN credentials; Midnight Mimosa malware found on cheap Android phones Group-IB links k0t to Fortinet and Palo Alto edge-device compromises, while Bitdefender finds preinstalled malware on MediaTek Android phones in 150 countries.
  5. GitLab patches maximum-severity flaw reaching back to 2014 GitLab fixes a CVSS 10.0 unauthenticated RCE, Railway tells all users to rotate keys, and Node2Shell hits Node.js.
More Security