Memphis WeatherOvercast. High 81°, low 51°.
Chance of rain 0%.

Dalton Daily

Sourced widely. Told plainly.
Vol. I · No. 12Morning edition
daltondaily.com
Markets · loading

Technology & Science

Technology

Hacker leaks staff data on 40,000 Homeland Security employees
TechCrunch

Hacker leaks staff data on 40,000 Homeland Security employees

Records on CBP, ICE and CISA personnel were published online by a transparency collective; Okta says its systems were not compromised

WASHINGTON — A dataset covering more than 40,000 Department of Homeland Security employees was published online Wednesday by the nonprofit DDoSecrets. It holds names, job titles, office locations, emails and cell numbers. About 21,000 records concern Customs and Border Protection staff. Roughly 10,000 concern ICE and Homeland Security Investigations, and just under 1,000 concern the cybersecurity agency CISA. A hacker calling themselves Department of Peace says the data came from the department's Okta single sign-on system. The hacker passed it to journalist and hacker maia arson crimew, who shared it with DDoSecrets. TechCrunch matched a portion of the names against known employees and found it authentic. Record timestamps point to exfiltration around mid-August. Okta says it has no evidence its own systems were compromised. DHS says it is aware of a potential breach and is working on it. It is unclear whether the underlying flaw has been fixed.

Why it mattersExposing the identities and system access of federal law-enforcement and cyber-defense staff is a counterintelligence and personal-safety problem, and it arrives as the third reported breach of a U.S. agency in recent weeks.

Microsoft and Google report accelerating cloud growth; Amazon reports tonight
Wikipedia

Microsoft and Google report accelerating cloud growth; Amazon reports tonight

Azure up 48% to $33.2 billion; Google Cloud revenue more than doubles to $30.7 billion

Microsoft and Alphabet reported quarterly results Wednesday, and both showed cloud revenue accelerating. Microsoft's fiscal first-quarter revenue rose 19% to $92.3 billion. For the first time it gave Azure's revenue in dollars: $33.17 billion, up 48%, against analyst expectations near $32.3 billion. Microsoft Cloud revenue reached $63.9 billion. The CFO said delays at third-party capacity providers affected spending, and the shares rose about 4% after hours. Alphabet's SEC filing shows third-quarter revenue up 25% to $127.6 billion. Google Cloud revenue rose 103% to $30.7 billion, with sales of the company's TPU chip systems named as a meaningful contributor. Search revenue grew 12%. Amazon reports after the close today, with analysts expecting about $202 billion in revenue and attention on how fast AWS is growing.

Why it mattersEnterprise cloud demand is the clearest gauge of whether the spending on data-center capacity is turning into revenue.

Microsoft pulls eMudhra roots from Windows after weak-key discovery
Wikimedia Commons

Microsoft pulls eMudhra roots from Windows after weak-key discovery

Emergency update targets offline PCs; eight intermediate keys could be recovered by testing 256 values

REDMOND, Wash. — Microsoft has removed trust in seven certificates tied to Indian certificate authority eMudhra. The move follows the discovery that eight of the authority's intermediate private keys were weak enough to be recovered almost instantly. Six of the keys covered web (TLS) certificates and two covered code signing. All were generated in April 2025 and had values below 256. Anyone holding the keys could have forged certificates that Windows and browsers would accept. Microsoft blocked the intermediates on October 20. On October 26 it shipped out-of-band updates, KB5134133 for Windows 11 and KB5134125 for Windows 10, that drop six eMudhra G3 roots and one cross-sign from the trust list. On October 27 it did the same in Edge. Connected PCs get the change automatically, so the updates mainly matter for air-gapped or locked-down systems. Microsoft says it is still evaluating the remaining eMudhra roots. It stresses that its own systems were not breached.

Why it mattersBrowser and operating-system vendors act as the final check on certificate authorities, and enterprises with offline systems now need to find and replace certificates that chain to the removed roots.

Malaysia seizes $12 million of AI-chip servers in suspected smuggling ring
Malay Mail

Malaysia seizes $12 million of AI-chip servers in suspected smuggling ring

Fifth case tied to one syndicate this year, with seizures now above 100 million ringgit

SEPANG, Malaysia — Malaysian customs said it seized 30 servers carrying advanced AI chips, worth about 49.5 million ringgit ($12 million). Officers found them at the Kuala Lumpur airport free trade zone on October 15. The shipment arrived from another Asian country under a single air waybill that declared it as electronic components. It was to be re-exported without the required permit. Officials say a syndicate uses Malaysia as a transit point to dodge restrictions on onward shipment. This is the fifth case linked to the same group this year, and total seizures exceed 100 million ringgit. A Malaysian firm has been called in for questioning, and no arrests have been made. Authorities have not disclosed the chip brand, country of origin or destination. Malaysia began requiring permits for U.S.-origin AI chips in 2025 under U.S. pressure, and violations can bring fines up to 20 million ringgit for a company.

Why it mattersThe case shows that U.S. export controls on AI chips depend on transit countries enforcing them, and that diversion networks keep adapting.

Malay Mail foreign · South China Morning Post foreign · Tom's Hardware trade

Artificial Intelligence

Anthropic says unreleased model built working exploits for five major platforms
Wikimedia Commons

Anthropic says unreleased model built working exploits for five major platforms

Frontier Red Team post describes lab attack chains against Chrome, Safari, Android, Windows and Linux; vendor records back only part of it

SAN FRANCISCO — Anthropic's Frontier Red Team said on Oct. 27 that an unreleased internal research model produced five working attack chains in laboratory tests. After a researcher gave an initial prompt, the model found the bugs and wrote the exploits. The most serious was a zero-click Linux attack that gives a remote attacker root on servers with a multipath TCP listener. In the test, leaking a kernel address took 48 minutes and the root shell about five more. A four-bug Chrome chain escaped the browser sandbox and opened the Calculator app on a Mac. The Android attack needs physical access, and the Windows bug can only crash a server. Anthropic says every flaw was reported and fixed and that none was used in real attacks. A check of vendor records found support for some claims. Chrome 156's notes credit five fixes to an Anthropic researcher working with Claude, against the 62 Chrome CVEs Anthropic claims. No public record of the Android fix was found. Anthropic has not named the model or said when it might ship.

Why it mattersIf the account holds, it shows AI systems can now assemble multi-step exploits that once took skilled human teams, which raises the stakes for patching speed and model-release decisions.

Google's Gemini 4 Carbon tops an index but is limited to cyber defenders
WinBuzzer

Google's Gemini 4 Carbon tops an index but is limited to cyber defenders

The model leads Artificial Analysis by one point; most benchmark claims come from Google itself

MOUNTAIN VIEW, Calif. — Google announced Gemini 4 Carbon on Oct. 28, two weeks after Gemini 4 Argon. It is releasing the model first to selected cyber defenders through its Fairwind program, which has more than 650 partners. It has given no date for developers, businesses or consumers. Google says Carbon is taking part in the U.S. government's voluntary pre-release testing. Google reports 88.2% on the SEC-bench Pro vulnerability-discovery test, 54.8% on ExploitGym and 71.0% on CWE-bench, which scores vulnerability repair. Carbon scored 59 on Artificial Analysis's rebuilt Intelligence Index v5. That is one point above Claude Opus 5.5 and two above GPT-6 Astra. Anthropic still leads on coding. Google says successful cheating in its internal tests fell to zero. Artificial Analysis, though, measured a hallucination rate of 11% on its factual test, up from Argon's 4%. Introductory pricing is $2 per million input tokens and $10 per million output tokens.

Why it mattersIt shows how labs now gate the most capable cyber models behind vetted access, and it puts Google back at the top of a leaderboard that rivals have repeatedly retaken within weeks.

WinBuzzer trade
Justice Department appeals ruling that lifted ban on Anthropic in federal agencies
Wikipedia

Justice Department appeals ruling that lifted ban on Anthropic in federal agencies

Notice of appeal goes to the 9th Circuit as the AI company moves toward a public listing

SAN FRANCISCO — The Justice Department filed a notice of appeal Monday with the 9th U.S. Circuit Court of Appeals. It asks the court to overturn a federal judge's order that lifted the government's ban on federal agencies using Anthropic's AI technology, Bloomberg reported. U.S. District Judge Rita F. Lin in San Francisco ruled in August that the administration had not justified its decision to bar agencies from the company's products. The notice only starts the appellate process, and no briefing schedule or decision has been reported. The appeal comes as Anthropic seeks to go public. The company has filed a registration statement with the SEC for a proposed Nasdaq listing under the symbol ANT, according to its own announcement. The company has said the offering's size and price are not yet set and that the filing is not yet effective.

Why it mattersThe appeal will decide whether the administration can exclude a leading AI vendor from federal contracts without a fuller justification, a question that bears on every AI supplier's government business.

xAI subsidiary offers to buy Southaven homes in exchange for lawsuit releases
Mississippi Free Press

xAI subsidiary offers to buy Southaven homes in exchange for lawsuit releases

Letter and recorded realtor remarks point to a neighborhood-scale buyout near the Memphis-area turbine plant

SOUTHAVEN, Miss. — A subsidiary of xAI, MZX Tech, is offering to buy homes in Southaven, Mississippi, from residents who release claims over noise from its gas-turbine power plant. The Mississippi Free Press reviewed a letter that says MZX denies the allegations but needs property for its business. Sellers sign a separate release that bars both class-action recovery and individual suits. The letter does not give a price. The Guardian reported Oct. 28, as relayed by Futurism, that a realtor cited a target of 418 homes and said 18 owners had agreed to sell. Those figures come from the realtor's recorded remarks, not from xAI. Three residents sued in June, and the complaint says more than 10,000 people could be class members. Separately, the NAACP sued in April under the Clean Air Act over unpermitted turbines. xAI did not respond to the Mississippi Free Press.

Why it mattersThe buyouts could thin a pending nuisance class action and show how AI data-center operators handle neighbors' legal claims in the Memphis region.

Google opens Gemini and Search to third-party apps through a new developer platform
TechCrunch

Google opens Gemini and Search to third-party apps through a new developer platform

Connected Apps Platform is in U.S. public preview by waitlist, with no wider date given

MOUNTAIN VIEW, Calif. — Google on Oct. 28 launched its Connected Apps Platform. It lets businesses and developers build services that users can invoke inside Gemini and Google Search. Developers connect through a cloud-hosted Model Context Protocol server, or through Android MCP using the AppFunctions APIs. They then register, test and submit the app in Google Connected Console and choose whether it appears in Search, the Gemini app or both. After launch they can monitor traffic, latency and error rates and manage brand identity, including verified logos and authenticated accounts. Gemini already has more than 50 connected apps, including Adobe, Experian, Localiza and Peloton. Those apps are due to reach Search over the next few weeks, where integrations currently include Instacart, Canva, YouTube Music and Yahoo Fantasy Football. Meditation app Calm is a new partner. The platform is a public preview for U.S. developers who join the waitlist, and Google has not said when it will open more broadly.

Why it mattersFor businesses that depend on search-driven leads, it is an early sign that discovery may shift from ranked links to services being invoked inside AI assistants.

TechCrunch trade

Science

Lancet Countdown: climate-linked health harms are outpacing the global response
ABC News (Australia): Global Lancet study counts almost 3 million climate change-related deaths

Lancet Countdown: climate-linked health harms are outpacing the global response

The 10th annual report urges formal recognition of climate change as a global health emergency ahead of COP31

LONDON — The 2026 Lancet Countdown on Health and Climate Change was released Wednesday. It finds that heat-related deaths, drought and other climate-driven health risks are rising faster than they did a decade ago. Australia's ABC reports that the study attributes about 3 million deaths between 2016 and 2023 to a warming planet. The authors say fossil fuels still supply roughly 80 percent of global energy, and energy-related emissions hit a record in 2024. They also blame lobbying and disinformation by fossil fuel interests for slowing the transition, and they single out U.S. policy. The report, now in its tenth year, draws on 146 researchers at more than 100 institutions in over 30 countries and is led by University College London. The World Health Organization is a strategic collaborator. The authors call for climate change to be formally declared a global health emergency. That is a recommendation, not an announcement by the WHO. The findings come before the COP31 climate conference in Turkey.

Why it mattersThis is the most comprehensive annual tally linking climate change to human health, and it is meant to inform negotiators at COP31.

Europe's summer 2026 heat likely killed over 50,000 in cities, studies estimate
The National (Abu Dhabi): Europe's heatwaves this summer caused 50,000 excess deaths

Europe's summer 2026 heat likely killed over 50,000 in cities, studies estimate

Two Nature Health papers attribute about two-thirds of the modeled toll to human-caused warming

LONDON — Researchers at Imperial College London and the London School of Hygiene & Tropical Medicine estimate that 50,391 heat-related excess deaths occurred in 854 European cities between June and August. The cities span 30 countries and hold roughly 40 percent of those countries' population. About two-thirds of the deaths, or some 32,600, are attributed to human-caused climate change. The authors say this is the highest summer toll since 2000. It is nearly double the roughly 29,000 deaths estimated for 2022. Italy had the most deaths (13,303), followed by France (7,268), Spain (6,824), Germany (6,340) and the U.K. (4,354). The figures are modeled estimates, not counted death certificates. They cover urban areas only. The findings were released as two peer-reviewed papers in Nature Health on Oct. 23. The authors call for faster emissions cuts alongside heat adaptation.

Why it mattersThe study is a rapid attribution of mortality to climate change, and it quantifies how far heat deaths exceeded previous record summers.

Physicists hold a single positron in a controlled quantum state
Wikipedia

Physicists hold a single positron in a controlled quantum state

A 'one-positron quantum cyclotron' could enable a sharper test of matter-antimatter symmetry

A team including physicist Gerald Gabrielse has built a device that stores one positron, the antimatter counterpart of the electron. It also controls the particle's quantum states. The work appeared in Physical Review Letters on Oct. 21 as 'One-Positron Quantum Cyclotron.' The American Physical Society highlights the apparatus as a route to measuring the positron's magnetic moment with unprecedented precision. Such a measurement would test a symmetry principle central to quantum field theory. Press coverage says the particle was kept in the trap for months. If the positron's properties ever differ from the electron's in a way that established theory forbids, that would point to new physics. This is a peer-reviewed demonstration of the technique. The precision measurement itself has not yet been reported.

Why it mattersA more precise comparison of matter and antimatter is one of the few direct experimental tests of foundational physics, and this result is a step toward it.

Space Exploration

ULA sets Nov. 13 return for Vulcan, carrying 40 Amazon Leo satellites
SpaceNews: Vulcan to return to flight in mid-November

ULA sets Nov. 13 return for Vulcan, carrying 40 Amazon Leo satellites

Rocket would fly for the first time since a February booster anomaly, with a redesigned nozzle

CAPE CANAVERAL, Fla. — United Launch Alliance has set Friday, Nov. 13 for the Vulcan rocket's return to flight, pending range approval. The mission, Vulcan Leo 1, would put 40 Amazon Leo broadband satellites into orbit from Space Launch Complex 41 at Cape Canaveral. It is the first of 38 Vulcan launches Amazon has booked. Vulcan has been grounded since a solid rocket booster anomaly in February. ULA says this flight will use an improved nozzle design and will be the first to carry all six strap-on boosters. Space Force officials, ULA's main customer, are reported to want data from the commercial flights before national security missions resume. Some online launch trackers still list an Oct. 29 date for this mission. Amazon's own schedule and ULA's announcement show Nov. 13. A launch time has not been announced.

Why it mattersA second heavy-lift rocket back in service matters to Amazon's effort to build a Starlink rival and to the Space Force's access to a non-SpaceX heavy launcher.

Europe's Hera probe separates the two asteroids it will survey
ESA: First light: Hera resolves two asteroids instead of one

Europe's Hera probe separates the two asteroids it will survey

First images show Didymos and its moonlet Dimorphos as distinct bodies ahead of a November rendezvous

PARIS — The European Space Agency says its Hera planetary-defense spacecraft has, for the first time, imaged the Didymos asteroid and its moonlet Dimorphos as separate objects. The system is about 197 million km from Earth. Dimorphos, the body NASA's DART spacecraft struck in 2022, is only about one pixel wide in the first frame, but clearly apart from its 780-meter parent. Dimorphos is 151 meters across. ESA says two thruster burns a week apart slowed Hera to about 20 meters per second relative to the pair, so it can approach gradually. The two asteroids orbit about 1.15 km apart. ESA lists the rendezvous for November 2026. Hera is to survey the DART crater and measure Dimorphos's mass, so the impact test can become a repeatable deflection technique.

Why it mattersHera's measurements will show how well a kinetic impact can redirect a threatening asteroid, which is the core of planetary-defense planning.

Virgin Galactic's new Delta spaceship, Apeiron, arrives at Spaceport America
Universe Today: Virgin Galactic Flies Next-Gen Space Plane to New Home

Virgin Galactic's new Delta spaceship, Apeiron, arrives at Spaceport America

Third-generation suborbital craft is named after an online vote and flown home under its mothership

TRUTH OR CONSEQUENCES, N.M. — Virgin Galactic flew its first Delta-class suborbital spaceship, now named Apeiron, from its factory in Mesa, Arizona, to Spaceport America in New Mexico on Wednesday. The craft rode beneath the twin-fuselage mothership VMS Eve for the 90-minute trip. The name came from an online contest with votes from more than 80 countries. CEO Michael Colglazier said the ship received its name that morning and came home that afternoon. Like SpaceShipOne, Apeiron will be released from the mothership at altitude, fire its rocket to the edge of space, and fold its wings for the glide back to a runway landing. Universe Today reports a sister ship, not yet named, is expected to begin commercial operations in the second half of 2027. If the company holds to that schedule, it would be the only supplier in the suborbital market.

Why it mattersThe arrival is a milestone toward Virgin Galactic resuming paid suborbital flights after its earlier spaceship was retired.