Security: the Shai-Hulud worm has made its first confirmed jump to AI infrastructure, compromising Tensorlake (The Register, Oct 8), a supply-chain attack vector aimed at the pipelines that train models. Separately, Let’s Encrypt will cut TLS certificate lifetimes to 64 days starting February 2027, continuing the industry’s push toward ever-shorter certs and more automation (Ars Technica, Oct 8). And Amazon has built its 1,000th satellite and says its Kuiper space internet service will launch by the end of the year, a milestone that puts it on schedule as Starlink’s first serious constellation competitor (Ars Technica, Oct 8).
Enterprise churn: IBM is offloading “hundreds” of its cloud VMware customers (The Register, Oct 8), the latest fallout from Broadcom’s licensing regime, following this week’s survey finding 90 percent of VMware customers exploring alternatives. AWS launched an open-source AI agent sandbox meant to prevent “YOLO mode” disasters, the always-on-agent safety tooling the industry has been slow to ship (The Register, Oct 7).
Odds and ends: Margaret Hamilton, the MIT software engineer whose code saved the Apollo 11 Moon landing, died at 90 (The Register, Oct 8). A fraudster was jailed for using 10,000 bots and AI-generated songs to outstream Taylor Swift (Ars Technica, Oct 7), a case study in streaming fraud at scale. And Asos confirmed a customer-data breach after hackers pushed a rogue app notification (TechCrunch, Oct 8).