Ofcom finds no significant overall change in UK children’s exposure to harmful content
Ofcom’s assessment of the first nine months of UK child-safety duties found no significant overall change in children’s exposure to harmful content. Agencies put SafePay’s breach total at at least 600 organizations across four continents in an advisory identifying known software flaws and compromised logins as entry points. Greece’s parliament approved a social-media ban for children under 15 that takes effect on January 1, 2027.
Written by AveNews superintelligence (SI) from AveNews articles and their sources.

Table of contents
Software
UK regulator finds children’s exposure to harmful content largely unchanged
Ofcom found no significant overall change in children encountering harmful content, or evidence that the severity of harm changed, during the first nine months of the UK’s child-safety duties. It reports reductions on some platforms, while the government plans an under-16 social media ban from spring 2027.
SafePay breaches at least 600 organizations, agencies say
SafePay has breached at least 600 organizations across four continents, the agencies say. Their advisory identifies known software flaws and compromised logins as entry points for attacks that spread through networks before stealing data and deploying ransomware.
Greece’s parliament bans social media for children under 15
Greece’s parliament has approved a social-media ban for children under 15. Minister Dimitris Papastergiou says the Kid’s Wallet app communicates only whether users are over or under 15, offering an age-checking approach ahead of the ban’s January 1, 2027 start.
Quest Diagnostics reports breach of test-ordering system
Quest Diagnostics disclosed unauthorized access to its test-ordering system and said it believes some patient records were accessed. Quest has stopped Quanum LSM and recommends paper requisitions or Quanum eLabs for ordering tests and receiving results.
Wikimedia, Archive.org and 4chan pause services for PHP2Shell fixes
Wikimedia services, Archive.org and 4chan temporarily went offline for PHP2Shell updates, 404 Media reported. Cloudflare reported millions of exploit attempts, not confirmed break-ins. Governments instructed operators to patch affected services immediately or take them offline if they could not be fixed.
Singapore police warn of Android malware scams costing S$989,000
Singapore police warn of an Android malware scam linked to at least 62 reported cases and S$989,000 in losses since April 2026. The force says callers falsely invoke compromised devices, bank accounts or criminal activity to persuade victims to hand over assets or information.
Superintelligence
US Homeland Security Department orders civilian agencies to remove DeepSeek
The US Department of Homeland Security has ordered DeepSeek technology removed from federal civilian systems. Issued in July and made public on October 19, the order extends earlier agency-level restrictions across civilian agencies, requiring removal of covered third-party tools as well as DeepSeek’s own products.
Consumer Tech
US regulator bans two devices over Huawei subsidiary’s chips
The US communications regulator has banned two devices containing HiSilicon chips, Tom’s Hardware reports. The action turns the regulator’s concern about potential surveillance into sales and marketing restrictions, showing how covered components can bring other brands’ equipment within reach of the rule.
Infrastructure
Updated
Ukrainian strikes disrupt Yandex services, 404 Media reports
Ukrainian strikes disrupted Yandex services in Russia. Fortune reports a further strike on a facility serving VKontakte on 18 October and continuing disruption to businesses and courts. Yandex says most key cloud services recovered, while experts cited by Fortune predict repairs to damaged infrastructure could take months or years.
Updated since this editionUS enacts law requiring rules for satellite emergency alerts
The US has enacted the Mystic Alerts Act, requiring federal rules for emergency alerts sent by satellite. Eligible carriers may choose whether to participate, but cannot charge separately if they do; the regulator must publish proposed rules within six months.
Updated
Texas regulator suspends 17 data-center stormwater permits
Texas’s environmental regulator suspended 17 data-center stormwater permits used for ground preparation, 404 Media reported on 22 October. The regulator also temporarily disabled automatic authorizations through its filing portal, which says staff must review applications for links to data centers.
Updated
US communications regulator grants Intel a one-year robot waiver
The US Federal Communications Commission has granted Intel a one-year waiver from restrictions on some foreign-made advanced robotics. Intel had sought relief to maintain transport vehicles in its chip factories; the FCC says the temporary exception is intended to protect manufacturing services for Intel’s customers.
Also today
Software
Capcom discloses breach affecting 11.7 million email records

Meta’s Facebook test caps links on some government and nonprofit pages

US cyber agency confirms PHP2Shell exploitation and sets patch deadline

The Browser Company to shut down Arc browser on December 22

ConnectWise suspends Cloud Backup after unauthorized sign-ins

Node.js patches Brotli flaw and blocks reportedly compromised certificate keys

US voting and privacy groups sue Homeland Security over voter data

Pillow’s October 16 update fixes image-processing security flaws

Security firm V12 identifies three x402 flaws it rates critical

Visual Studio requires Agent Preview to bring your own model, GitHub says

Researcher demonstrates partial jailbreak of Nintendo’s Switch 2

Trend Micro group reports two critical Linux KSMBD flaws

PHP team releases emergency fixes for two critical flaws

GitHub urges Actions users to check network access rules

GitHub says it is enforcing Copilot feature defaults

Microsoft began blocking EWS access in Exchange Online

Chrome Holding Co. agrees to pay California $6 million over 23andMe breach

LiteLLM 1.107.0 carries credential stealer and backdoor

Laravel patches TokenGuard flaw that could allow account takeover

Genesys discloses breach affecting customer information

Google extends Chrome’s HTTP permission prompts to all users

Bluesky says phishing attack compromised over 4,500 accounts

PingCAP discloses theft of source code and customer records

Superintelligence
Google adds an ad-targeting exception for connected personal data

Moonshot says Kimi K3.1 Pro and Highspeed are available

US trade regulator investigates OpenAI and Anthropic, The Decoder reports

Meta removes clause on using website content to train its AI

Google to end AI Plus Pro model selection on 13 November

US banks detect unauthorized AI agents, Axios reports

Meta’s Muse passes 10 million US downloads, Sensor Tower estimates

OpenAI opens Decisions API to all customers

DeepSeek releases Flash-1017 and public search APIs

Meta restores Muse sharing and replaces old artifact links

Canva releases Craft image-generation model to all users

Apple announces Intelligent Assistant for Pages, Keynote and Numbers

Consumer Tech
Google unveils Fitbit Edge with a replaceable battery

Google Wallet starts adding passports from Estonia, Ireland, Italy and Spain

OnePlus starts stable ColorOS rollout in India

Nvidia’s RTX Spark leads two local-model tests published on 15 October

New Mexico judge orders Meta to pay $25 billion

YouTube rolls out custom feeds for signed-in US viewers

Rhode Island sues Meta over alleged failures to stop scam ads

Infrastructure
Microsoft to end Windows Server 2016 security updates in January 2027

PwC confirms cyber incident involving employee-learning vendor

Kombit shuts Denmark’s national school communication platform

Cable theft disrupts InstaVolt and EnBW charging networks

Eleveight AI plans $2 billion expansion to 40 MW by 2027

32 UK government websites go offline as a precaution, Guardian reports

SpaceX mobile network would cost over $80 billion, TD Cowen estimates

Railway urges all users to replace credentials after possible breach

Google pledges full property taxes for new data-center campuses

Arista patches exploited VeloCloud Orchestrator flaw

Microsoft removes seven eMudhra-related certificates from Windows trust

Amazon releases TorchNeuron beta for PyTorch on Trainium

Nvidia fixed AIStore host-takeover flaw on October 13, researcher says

Reports on this date
AveNewsChinese state media report at least 16 deaths in Tibet’s magnitude 7 earthquake
BBC and DW report 65 injuries from the Tibet earthquake, including 11 serious cases, while blocked roads and damaged infrastructure hinder rescue crews. Russia and Ukraine have confirmed an Oleshky ceasefire agreement intended to allow aid and voluntary evacuations. Agencies say SafePay has breached at least 600 organizations across four continents.
Daily report · covering
4 min63 sources
ScienceTibet earthquake, Taiwan’s typhoon, India’s cancer drug margin cap
Chinese state media report at least 16 deaths after a magnitude 7 earthquake in Tibet, while rescue crews face blocked roads and damaged infrastructure. Forecasters expect Taiwan’s typhoon rain to continue through the evening of 24 October. India’s Department of Pharmaceuticals projects price cuts of up to 70% after the extension of its cancer medicine trade-margin cap.
Daily report · covering
5 min57 sources
BusinessDisrupted trade and domestic charges raise electronics costs in Iran
A Tehran teacher told Al Jazeera she would need to sell her current phone, use savings and borrow from her parents to buy a replacement. Ofgem has approved an agreement to preserve winter gas import capacity through a Belgian pipeline. EU leaders have commissioned work on a proposed power to block China’s EU market access without adopting restrictions.
Daily report · covering
4 min17 sources
CultureFrance’s Culture Ministry plans four Paris museum closures for October 24
The ministry says the closures aim to protect visitors, staff and artworks during demonstrations. A US appeals court has upheld Apple and M. Night Shyamalan’s Servant copyright victory. Armenia’s government has approved funding to acquire two manuscripts for the Matenadaran.
Daily report · covering
4 min19 sources
SportsBBC reports Bukayo Saka could be sidelined for at least six weeks
BBC reports that the injury against Bayern Munich could keep Saka out of England’s Nations League matches against Croatia and Spain. Noah FC’s lawyer disputes the Armenian football federation’s interpretation of a court decision and plans to appeal. Nottingham Forest has banned a supporters’ chant and warns that continued use could expose the club to sanctions.
Daily report · covering
5 min28 sources
PoliticsRussia and Ukraine agree to an Oleshky ceasefire for aid and evacuations
Russia says its halt will start at 01:00 GMT on 27 October, earlier than the White House’s announced 29 October date. The Guardian reports a temporary court halt to demolitions in Hebron. England’s care regulator says 80,000 children and young people have waited over a year for community healthcare.
Daily report · covering
4 min55 sources
