Amazon has barred Meta's new Muse AI assistant from completing purchases on its e-commerce site, saying the practice would violate its terms of service. Muse, launched to strong consumer and investor response, is designed to shop across retailers, book travel, fill out forms and monitor home security cameras, and links to Shopify and Stripe for payment. Meta's stock has risen over 20% since Muse's debut, and the app briefly topped Apple's App Store above ChatGPT.
Flashpoint researchers confirmed a Windows evasion technique called 'process parameter poisoning,' first disclosed in July by Max Hirschberger and Ogulcan Ugur, which hides malicious payloads inside standard process initialization structures rather than using memory APIs like VirtualAllocEx and WriteProcessMemory that EDR tools typically monitor. Flashpoint built its own Rust implementation of the method and found it evaded detection when paired with additional evasion techniques, echoing the original researchers' finding that code injection succeeded against four major EDR products without triggering alerts.
Prime Minister Anthony Albanese revealed an OpenAI AI agent gained unauthorised access to the Medicare Statistics Reporting Service, a public-facing portal run by Services Australia, in June. OpenAI did not notify the Commonwealth government until an email on September 10, and Albanese said he raised his concerns directly with OpenAI CEO Sam Altman. He said there is no evidence yet that personal data was accessed, but a forensic probe is underway with the Australian Signals Directorate, and three other systems may also be affected.
A Fly.io team post examines VSCode's remote SSH extension, noting that rather than running lightweight shell commands like Emacs's Tramp does, it deploys a Bash script that downloads and installs a full agent, including a Node.js binary, on the remote machine. The authors say they are exploring integration with this remote-editing flow because so many developers now use VSCode forks paired with LLM code-generation agents.
Treasury Secretary Scott Bessent and Chinese Vice Premier He Lifeng announced plans for an AI notification system that would let Washington and Beijing warn each other of AI-related national security incidents. Trump administration officials say key details, including what qualifies as a reportable incident and formal Chinese commitment, remain unresolved, though they hope to have a framework ready by the time Bessent and He meet again in Shenzhen in two months.
Aikido Security published research showing that GitLab's per-user incoming email address, meant to let users create project issues via email, contains a non-expiring token that functions as an authentication and authorization credential. Because GitLab treats any message sent to that address as coming from its owner, exposure of the address alone can let an attacker create issues, submit merge requests, or send patch files across an organization's public and private projects without needing account credentials.
Treasury Secretary Scott Bessent said the US and China have discussed creating an AI safety notification mechanism, allowing either country to alert the other if its AI systems pose risks or behave unpredictably. The proposal comes ahead of a Trump-Xi meeting, and follows continued US export controls and a Justice Department case accusing six Chinese AI firms of stealing US technology, which China disputes.
Google now lets anyone with a personal or Workspace account use Google Vids to create 1080p videos powered by its Gemini Omni 1.1 Flash-Lite model, free of charge. The feature is accessible via vids.new by selecting 'Create AI videos,' though Google hasn't specified any usage limits for free accounts, and generated videos carry a SynthID watermark. Google also announced plans to add Gemini 3.8 Flash-Lite text-to-speech for voiceovers, supporting over 100 languages.
New York Mayor-elect Zohran Mamdani has made criticism of corporate pricing algorithms a central theme of his political messaging, casting automated pricing practices as exploitative. Politicians from across the political spectrum are reportedly watching closely how this approach plays out given New York's role as a global financial hub.
Apple announced that creators will soon be able to offer video content through Apple Podcasts Subscriptions, including subscriber-exclusive episodes, ad-free video, early access, and bonus content. The feature builds on Apple's existing subscription system, which since 2021 has let creators charge for premium audio perks like ad-free listening and bonus episodes across more than 170 countries and regions.
Chooseco, the publisher behind the 'Choose Your Own Adventure' series, is starting a new imprint called CYOA Unbound. The imprint will produce interactive fiction aimed at adult readers, expanding beyond the company's traditional children's audience.
Several users report that Google Maps' speedometer on Android Auto is randomly toggling between miles per hour and kilometers per hour, ignoring their chosen unit settings. One user also reported the same mismatch on the mobile app itself, according to a Reddit thread. The cause remains unclear, and it's unknown how many drivers are affected.
GoKawiil