Image: phonic.ai
Phonic released Phonic-1, which listens and responds in speech, on Oct. 29. Trained on more than 50 languages, it can use tools before a caller finishes speaking, potentially shortening waits for information or other actions. The company says it ranks first on Artificial Analysis's speech-to-speech benchmark and scored 83.2 on Sierra's multilingual voice benchmark.
Image: The Threshold Report/GPT Image 2.5
Developers can run and adapt SenseNova-Loop-9B-Preview, a text-and-image model released under the Apache 2.0 license on Oct. 30. SenseNova designed it for long inputs and automated workflows. It passes information through the same 24 processing layers twice, extending computation without storing separate learned settings for each repeated layer. Training included sequences of up to 262,144 tokens (small units of input processed by a model).
Image: rightnowai.co
RightNow's System Zero became available through an API and software development kits on Oct. 15. The model returns changing probability scores for choices as text, images, audio and other inputs arrive, supporting automated decisions while information is still coming in. RightNow says it scored 63.20 on the public test half of Artificial Analysis's decision benchmark; Artificial Analysis did not conduct the evaluation.
Curious whether AI can do something yet? Submit a question and we’ll track it for you.
• Christian H., Singapore
The AI stocks Wall Street fund managers are adding, trimming, or dropping.
Open the tracker for the latest holdings.
Open Market Watch
Image: The Threshold Report/GPT Image 2.5
AI Engine fixed a WordPress plugin flaw with version 3.8.7 on Oct. 23. GitHub and NVD published the advisory on October 30, 2026. An attacker without a login could register an app through MCP (a protocol connecting AI assistants to software tools) and obtain administrator-level tools if an administrator approved it. The attacker could potentially obtain approval through clickjacking, meaning tricking the administrator into clicking a control they did not intend to use.
Image: The Threshold Report/GPT Image 2.5
VicOne says AI-assisted research found 28 previously unknown security flaws in tools used to develop, test and operate robots. The initially validated findings include projects maintained by Google, NVIDIA and Meta; weaknesses in these tools can influence robot behavior and the evidence used to assess safety. VicOne plans coordinated disclosure, meaning it will work with affected vendors before releasing details. Vendor-notification dates and responses have not been established.
Image: parameter.ai
On Oct. 26, OpenAI fixed a ChatGPT share-link flaw that could expose a signed-in user's private conversations. Parameter researchers reported the issue on October 18, 2026, and OpenAI reproduced it and patched both affected web interfaces. In Parameter's controlled test, opening a malicious shared conversation ran code inside the user's session and accessed private chats.
Image: blog.talosintelligence.com
VOLTA, a Windows information-stealing program, is designed to send stolen victim data to commercial language models to identify assets worth monetizing, according to Cisco Talos. It can try other models if one refuses, potentially reducing attackers' work in prioritizing victims and assets. Talos published its analysis yesterday and recommends restricting Chrome launches without a visible browser window and revoking compromised credentials.
Image: github.com
Idol turns a single photograph or generated image into a 3D object locally on a consumer graphics card. Sperid Labs released the model files and a software development kit on Oct. 28. It produces a Gaussian-splat file, meaning a 3D representation built from many small blobs. Idol generates several levels of detail and fills in sides absent from the source image.
Image: The Threshold Report/GPT Image 2.5
A federal judge denied xAI's request to dismiss an NAACP pollution lawsuit today. The NAACP alleges that at least 35 turbines powering xAI's Colossus data center operated without required air permits. The judge rejected xAI's argument that the turbines qualified as mobile sources exempt from those permitting rules.
Image: theverge.com
Using Claude Code, a Verge reporter with no coding experience added features to a $50 Waveshare development pendant connected to Meta's Muse. The new functions included spoken answers and conversation history. The pendant also supported a remote phone-camera shutter and an animated pet game.
Announced or reported, but not yet real or available.
Waiting on: Construction - The contracted first building is part of Nscale's planned West Virginia campus, which remains under construction.
Waiting on: Factory expansion - Fujifilm's investment project is scheduled to run from fiscal 2026 through fiscal 2028.
Waiting on: Software release - Apple has scheduled the China features for an iOS 27.3 beta on November 4, 2026, followed by a full release in December 2026.
Get one short email on days your lanes have Real Progress.
Alerts go to this address.
By setting an alert, you agree to our Terms of Use
You already get the report, and it carries on as before. To get alerts only, turn the report off from Manage alerts in your first alert email.
You get alerts only, so the report stays off. To get it again, use Manage alerts in your alert emails.
Every alert email has a link to stop it or manage your alerts.
