Skip to content

Source

Ars Technica AI

6 items

Reported technology journalism with a strong security desk. Explains mechanisms, not just outcomes.

arstechnica.com ↗

Toolsmedium signal

Google opens the SynthID detector to everyone, and it now reads OpenAI, NVIDIA, and Kakao watermarks too

On October 7, 2026, Google DeepMind made its SynthID Detector available to anyone, worldwide and in English, at synthid.com. The tool reports whether an image, video, or audio file carries a SynthID watermark from Google or from its partners OpenAI, NVIDIA, and Kakao, with Apple listed as coming soon. According to Ars Technica, you sign in with a Google, ChatGPT, or Apple account and get roughly 10 checks a day. A negative result does not mean the file is authentic.

Google DeepMindverified

AI Chatbot Assistants on Glass Blocks, Artificial Intelligence Technology Concept. Digitally generated image. 3d render.
Connectorsstrong signal

The same SSRF bug turned up in MCP servers at Google, JPMorgan, and two governments

An independent researcher reported one class of server-side request forgery to five organizations that share no code, and all five confirmed and fixed it. Google's MCP Toolbox for Databases carried a high-severity CVE until version 1.5.0. Five US federal servers are still open. If you run an MCP server with any tool that fetches a web address, the four checks at the end apply to you.

Ars Technicaverified

The Reddit logo, a white alien head on an orange-red circle, drawn with a glitch effect: pink and yellow copies of the shape are shifted sideways and the circle is cut by horizontal offsets, on a light gray background.
Toolsstrong signal

Reddit will close its public API in March 2027, and RSS feeds are due to end on November 13

Reddit's developer portal now asks owners of Data API apps to register them, and says access for unregistered apps and users will start to be removed on January 12, 2027. The remaining public API access ends in March 2027. Ars Technica and TechCrunch report that a Reddit staff post on September 30, 2026, also announced the end of RSS support on November 13, 2026, with no replacement for feeds from communities you do not moderate. If your site, bot, or monitoring tool reads Reddit through either path, you now have deadlines.

Redditverified

Modelsstrong signal

OpenAI ships GPT-6.1 Sol at GPT-6 Sol prices and adds a $500 Pro plan with Ultrafast

GPT-6.1 Sol costs $2 per million input tokens and $10 per million output tokens, the same as GPT-6 Sol, and its cached input drops to $0.10. OpenAI says the model comes close to GPT-6 Astra on coding and computer use at a fifth of Astra's price. The larger GPT-6.1 Astra did not ship. A new Pro 500 plan at $500 a month is the only Pro tier that includes Ultrafast, and Pro 200 returns with a smaller allowance.

OpenAIverified

Industrystrong signal

Appeals court upholds the Pentagon's exclusion of Claude from its supply chain

The US Court of Appeals for the D.C. Circuit denied Anthropic's petitions on September 25, 2026, in a 2-1 decision. The exclusion bars contractors from using Anthropic products in their work for the Department of War. A California district court had found a parallel designation unlawful, and the appeals court said that finding does not decide this case.

US Court of Appeals for the D.C. Circuitverified

Agentsstrong signal

A zero-day in Meta's Muse hands any local app the token to the whole account

Patrick Wardle found that any application or command on macOS can redirect where Muse sends speech for transcription. Pointing that address at an attacker's server delivers the token that authenticates the user to the account. Meta launched the agent on September 8, 2026 behind a security design it described at length, and it did not answer questions from Ars Technica. Amazon began refusing Muse on its own store on Sunday, September 20, 2026.

Ars Technicaverified