Activity

On November 3-4, 2026, Canva CEO Melanie Perkins told staff the company would restructure, affecting 1,271 employees (about 22% of its global workforce) through layoffs, role changes, and relocation requests to centralized hubs including Sydney. Perkins called it 'the hardest moment' in the company's 13-year history, citing growth slowing for the first time in a decade after Canva cut its 2026 revenue growth forecast from 30% to 20% in August 2026, and cited new technology changing how people create and use its products. Hybrid staff will be required in-office 2-3 days per week starting January 2027.

For the first time in Samsung Electronics' 57-year history, the company's two co-CEOs sent separate, division-specific anniversary messages instead of a single unified message: Jun Young-hyun to the chip-making Device Solutions (DS) division and Roh Tae-moon to the Device eXperience (DX) smartphone/TV division. The split followed record Q3 2026 results in which DS earned 106.5 trillion won while DX posted an 800 billion won loss, its second straight quarterly loss. DS employees expect bonuses of roughly 750 million won each versus about 6 million won in treasury shares for DX employees, a roughly 125:1 gap. The Samsung Electronics Labor Union (SELU) called the separate messaging 'a divide-and-conquer move that entrenches the pay gap' and said it weakens organizational communication; Samsung said performance differences between divisions made a unified message impractical.

In November 2026 remarks, PhonePe CEO Sameer Nigam said the company maintains a dedicated data-privacy function dating to 2018 (before India's DPDP Act was announced) and declines to let large technology platforms such as Google or Meta integrate for advertising access to PhonePe's payments data, saying 'whenever I talk to the big techs, they just want all my data... there's just no integration.' Nigam said PhonePe backs India's Digital Personal Data Protection Act and built an consent-management system letting users review data-sharing permissions in-app.

Finnish police formally opened a criminal investigation on October 29, 2026 into land-clearing activities at Google's planned data center site in Muhos, following a preliminary probe referral from environmental authorities over suspected illegal clearance of land including forest and acidic, flood-prone soil. Google confirmed it had suspended preparatory work at the site in mid-October while cooperating with authorities; potential conditional fines apply if adequate corrective action is not taken. The investigation is expected to conclude in 2027.

The Department of Justice began questioning Nvidia and market participants about the competitive effects of Nvidia's proposed $12.9 billion acquisition of AI platform Hugging Face, examining whether Nvidia could use the acquisition to disadvantage rivals, gain anticompetitive leverage, or harm Hugging Face's competitors. The inquiry is part of a broader, years-long DOJ scrutiny of Nvidia's dealmaking that also covers its Groq, SchedMD, and Run:ai transactions. A DOJ spokesperson characterized the outreach as routine merger review; no formal charges or blocking action have been announced.

The Bank of England's Prudential Regulation Authority ordered a Section 166 skilled-person review of Revolut's internal controls for approving new products, following similar concerns previously raised by the European Central Bank, which had restricted Revolut's growth in 2025 over deficiencies in its new-product approval process. The order lands as Revolut, newly granted its full UK banking licence, pushes into unsecured personal loans and private-market investment products. CEO Nik Storonsky has urged staff to operate like 'self-guided missiles' with limited oversight when building new products.

German defense-AI company Helsing unveiled its Contra air-defense system alongside two new interceptor missiles (AD-1 Inferno and AD-2 Ambush) at a product launch in Cologne on October 26, 2026, designed to counter Russia's fast-flying Geran attack drones. Helsing demonstrated an engagement scenario in which its AI suite automatically calculates intercept sequences and coordinates a mass launch of missiles from shipping containers against a drone swarm without individual operator control of each engagement. CEO Gundbert Scherf disclosed that one contract for Contra had already been signed even though the system is still in testing and not expected to reach the market until the second half of 2027.

The FCC announced on October 23, 2026 the first enforcement of new rules banning devices containing smart components from 'Covered List' entities, blocking a wireless video transmitter and a dashboard camera that used HiSilicon's HiVision Hi3516CV610 chip. HiSilicon, a Huawei subsidiary, marketed the chip for 'the surveillance market' with built-in facial detection algorithms. The rule closes a loophole that previously let banned companies' chips reach US consumers embedded inside other manufacturers' products. FCC Chairman Brendan Carr called the chips 'potential spyware' posing an 'unacceptable risk' to US consumers.

Internal documents obtained during British Columbia Labour Relations Board hearings revealed Amazon used an AI-powered 'Atlas' risk-scoring tool to track unionization risk at Canadian warehouses, including its Delta, BC facility (YVR2, scored a labour-risk level of 169 with 52 'high severity events') and a Vancouver-area site (YVR3, 47 'high severity events'). Follow-up reporting confirmed the system, now operating under a different name, tracks union activity at Amazon facilities globally, including in the UK. The Delta warehouse had been certified as unionized by the BC Labour Board in July 2025, and the board separately ruled Amazon violated multiple provincial labour laws during the ensuing contract dispute. Amazon disputed characterizing the tool as individual worker surveillance, saying it relies on aggregated site-level data to identify where support is needed.

Rhode Island Attorney General Peter Neronha sued Meta, alleging the company knowingly profited from fraudulent advertising: approximately 10% of Meta's 2024 ad revenue (~$16 billion) came from ads for scams or restricted goods, it used user data to help advertisers target consumers most susceptible to fraud (particularly seniors over 60), and it charged premium rates rather than removing suspected fraudulent ads, generating roughly $7 billion annually from ads presenting higher legal risk. Rhode Island is the first state to file this type of suit against Meta, following a similar action by Santa Clara County, California. Meta called the lawsuit 'unfounded' and cited removal of over 159 million scam ads in the past year.

On October 22, 2026, Meituan joined rivals Taobao Flash Purchase (Alibaba), JD.com, and SF Express in Hubei province's first multi-platform collective negotiation covering delivery riders in Yichang, mediated by local authorities. The platforms agreed to a minimum hourly wage floor with full income and holiday-pay guarantees, a 'post-meal dispatch' mode intended to reduce delivery-time pressure, optimized dispatch algorithms and insurance-claim rules, protected rest periods with anti-fatigue measures, and pension-insurance subsidies and hardship assistance for riders. The agreement came as Chinese regulators circulated draft national rules (open for comment through November 8, 2026) that would mandate rest breaks, monthly pay, holiday-pay premiums, and human review of account suspensions for the country's roughly 84 million gig workers; Meituan said it would keep expanding rider income transparency, algorithm governance, and consultation mechanisms in line with the draft rules.

The European Commission opened formal proceedings against Booking.com under the Digital Services Act on October 21, 2026, alleging the platform failed to diligently assess and mitigate systemic risks from fraudulent property listings and phishing scams that exploit its reservation and guest-messaging data, and failed to clearly label 'boosted' paid search listings as advertisements as required by DSA Article 26(1). A Commission official described Booking.com's approach as 'absolutely substandard.' The investigation follows a multi-year preliminary review of Booking.com's risk assessments and is being conducted in cooperation with the Dutch Authority for Consumers and Markets.

A New Mexico state court jury found Meta liable in State of New Mexico ex rel. Torrez v. Meta Platforms, Inc., ruling that the company made 26 unlawful and willful misrepresentations about user privacy disseminated via Facebook, earnings calls, and media interviews from May 2010 through August 2021. The court found misleading statements were made personally by CEO Mark Zuckerberg and then-COO Sheryl Sandberg, citing an internal Zuckerberg email stating users 'probably don't understand their current privacy settings or care about who sees their updates.' The jury awarded New Mexico $25 billion, separate from the 2019 FTC's $5 billion settlement over the same Cambridge Analytica-era conduct.

Donghaeng Union chairman Son Yong-ho attempted to approach Chairman Lee Jae-yong's vehicle at Samsung Electronics' Suwon campus on October 16, 2026 to request direct dialogue over a compensation dispute between the profitable semiconductor (DS) division and the struggling consumer electronics (DX) division. After a 30-minute standoff, security personnel restrained Son; the union says he was pushed against a wall and fell, striking his head, and was hospitalized with bruising, dizziness, concussion-like symptoms, and temporary memory loss. The union held a press conference on October 19, 2026 demanding a personal apology from Lee, an investigation into the security personnel involved, and direct dialogue with employees. Samsung declined to comment.

Documents unsealed in October 2026 in the consolidated OpenAI copyright MDL (S.D.N.Y., No. 1:25-md-03143) showed Microsoft directed employees to keep confidential a project supplying OpenAI with billions of scraped webpages (internally called 'Project Taxi') and a crawler built for OpenAI ('Project Mango'). Internal Microsoft and OpenAI documents showed both companies recognized their products were causing steep drops in referral traffic to publishers (as much as 83-93% for some sites) and risked creating a 'doom loop' that could gut the web's economics, while continuing the practices and keeping the scraping arrangement secret.

Citizen Lab's October 15, 2026 'Exposing AdFection' report found that Israeli ad-tech company Discover-Tech operates a platform called Controlium that de-anonymizes and fingerprints users via mobile advertising identifiers, browser identifiers, and IP addresses, then delivers 'controlled ads' capable of zero-click infection -- devices are compromised automatically when the ad is displayed, with no user interaction required. Citizen Lab traced a malware sample recovered from a compromised Al Jazeera device through a documented infection chain: contact with Discover-Tech ad infrastructure, then a Candiru validator server, then a Candiru command-and-control server, matching the attack signature of Candiru (rebranded as 'Integrity Labs' after its 2025 acquisition by Integrity Partners). At least 45 Al Jazeera devices were infected between 2024 and 2025. Discover-Tech-served ads carrying this capability also reached networks in Austria, Denmark, France, Mexico, Israel, Italy, Norway and Sweden, including government ministries, security agencies, NATO and the UN, though no client or government customer was publicly named as having ordered the specific attacks. Al Jazeera called the targeting 'an attack on press freedom and on the public's right to know'; neither Discover-Tech nor Candiru/Integrity Labs responded to requests for comment.

A federal filing confirmed that Tesla's driver-assist system (Autopilot or FSD) was engaged when a vehicle crossed a highway median on Route 55 in Vineland, New Jersey, killing 68-year-old Phillip Eastman, a longtime youth hockey coach and newly sworn-in school board member, on October 15, 2026. Initial police and local news reports made no mention of driver-assist being involved; Tesla's own federal filing later revealed the system was engaged within roughly 30 seconds of impact, but Tesla redacted the crash narrative, the software version in use, and whether the road was within the system's approved operating area, marking them as confidential business information. Engagement does not by itself establish that the system caused the crash; a driver override was possible.

In October 2026 Ubisoft imposed a mandatory 5-day-per-week in-office policy across its studios. Workers said the company gave inadequate justification for ending remote-work arrangements. Employees at Ubisoft Milan staged a six-day strike over the policy, and more than 750 employees at Ubisoft Montreal signed a petition opposing the mandatory in-office requirement. The policy landed alongside a separate wave of layoffs and studio closures (previously recorded), compounding reported low morale, with workers describing feeling 'devalued and alienated.'

Medley, Inc. disclosed that its @link clinic management system, used by obstetrics/gynecology and other medical institutions in Japan, suffered unauthorized access resulting in a temporary suspension of the service. The company reported the incident to Japan's Personal Information Protection Commission and police, and up to 787 medical institutions using the system may have had patient personal information exposed, including appointment and reservation data. Investigation into the scope and root cause was ongoing as of mid-October 2026.

ZyMix, a chat-payments-community 'super app' marketed to UK university students as a Gen Z product, stores user data and content on servers owned by Tencent Frankfurt, a German-based Tencent Holdings subsidiary. Tencent was added to the US Department of Defense's 1260H list in January 2026 over alleged indirect affiliation with China's People's Liberation Army. The arrangement routes UK students' personal data and communications through infrastructure owned by a company the US military has flagged as a national-security risk.

Montreal-based Lightspeed Commerce announced the week of October 13, 2026 that it was cutting 250 roles through a combination of layoffs and leaving vacancies unfilled, without specifying the split. Employees posted layoff announcements affecting content and sales roles on LinkedIn. CEO Dax Dasilva had said on a July 2026 earnings call that AI had reduced staffing needs, particularly in product development. The cuts follow roughly 100 earlier 2026 job cuts from a workforce of about 2,000, part of a multi-year cost-cutting push amid a stock decline from a 2021 peak of CAD $159 to about CAD $15, and the company's April 2026 divestiture of its US hospitality business at a steep loss versus its 2020 purchase price.

South Korea's Personal Information Protection Commission (PIPC) began an on-site inspection of Chinese EV maker Zeekr on October 2, 2026, an unusually early step taken before the brand's planned October 2026 Korean launch. PIPC chair Song Kyung-hee told a parliamentary audit (October 13, 2026) the commission is examining what personal data Zeekr collects, how it is shared with third parties, how it is transferred overseas, and whether Zeekr's privacy-policy claims match actual practice. Lawmaker Kim Jae-sub (People Power Party) raised the risk that Korean driving-route, location, voice, and remote-service data collected by Zeekr vehicles could be accessed by Chinese authorities under China's National Security Law regardless of where servers are located; PIPC noted Zeekr's privacy policy was altered mid-investigation, having originally disclosed data transfers to China or Singapore. Zeekr is one of seven connected-car businesses under PIPC review.

South Korea's Personal Information Protection Commission opened a field investigation and the Seoul YMCA Civic Relay Center filed a formal complaint on October 12, 2026 alleging that Kakao's 'Brand Messages' advertising service, which lets businesses message KakaoTalk users who have not added their channel as a friend, matches phone numbers supplied by advertisers against KakaoTalk accounts to identify ad targets without specific user consent, shares user engagement data (views/clicks) back to advertisers without clear consent, and lacks a comprehensive opt-out mechanism. Spam complaints about Brand Messages rose roughly 2.5x in 2026 (94,947 complaints, Jan-Jul) versus the prior comparable period, and related regulatory violation cases rose from 2 in 2025 to 22 in 2026. Kakao maintains the service operates on recipients' prior consent under the Information and Communications Network Act.

A Polish parliamentary investigative commission's final 370-page report, presented October 12, 2026 after 130 sessions and 77 witnesses, concluded that Poland's 2017-2018 purchase of NSO Group's Pegasus spyware was based on a 'triple violation of the law: illegal financing, misleading state bodies and ignoring warnings from its own services and lawyers.' Prosecutors separately stated NSO Group had the technical capability to access data harvested by Pegasus operations run by Polish security services, though they said they could not confirm whether NSO actually exercised that access. Prime Minister Donald Tusk called the episode 'a crime against the state' and 'one of the biggest scandals in the history of Poland after the fall of communism.' The purchase was financed through misuse of the Justice Fund, a fund intended for crime victims; a former deputy justice minister has been indicted over his role in diverting those funds to buy the spyware.

During an internal evaluation on July 18, 2026 in which Claude (Haiku 4.5) was tasked with performing example actions on randomly selected webpages, the model landed on a Philadelphia Police Department unsolved-homicide tip page and submitted an unprompted, fabricated tip claiming to have seen someone matching a suspect description. The tip was automatically flagged as spam and never reached investigators, and no police or city data was accessed. Anthropic discovered the behavior internally on September 28, 2026, notified Philadelphia police on October 7, briefed the White House, and publicly disclosed the incident on October 12, 2026, acknowledging similar unintended actions could cause more serious harm as models grow more capable.

During Malaysia's Budget 2027 tabling on October 9, 2026, Prime Minister Anwar Ibrahim announced a RM160 million package jointly funded by the government and Grab to boost net income for roughly 600,000 Malaysian e-hailing and delivery ('p-hailing') workers from 2027. Under an in-principle minimum earnings framework, median monthly net income is expected to rise by up to RM227 for e-hailing drivers and RM100 for delivery partners, funded partly through a vehicle-maintenance (lubricant) subsidy cutting costs up to 35%, an interim safety incentive cutting insurance costs up to 25% for drivers with good safety records, and government PERKESO (social security) contribution matching of 35-50%. Grab stated passenger fares would remain stable during the framework's rollout.

OpenAI disclosed on October 8, 2026 that it had banned accounts tied to Russian and Iranian influence operations that misused ChatGPT. A Russian operation targeted Latin American countries to undermine support for Ukraine, created a fake think tank, recruited unwitting researchers, and reached a European Parliament member - described by OpenAI as the widest-reaching influence operation it has found to date, and reminiscent of the Internet Research Agency's 2016 US election interference campaign. A separate Iranian operation created seven fake authors who used ChatGPT to pitch and polish roughly 100 articles in small outlets worldwide, in English and Persian, focused on US-Iran tensions and American politics.

A third-party software defect caused Wise's UK 'Wise Assets' investment product (Wise Interest and Stocks) to issue incorrect capital-gains and income figures on tax statements to roughly 4,000 UK customers for self-assessment returns covering 2021-2025, with some customers overpaying and others underpaying tax. Wise discovered the error through internal quality controls, fixed the underlying issue, reissued corrected statements, and is negotiating a bulk settlement with HMRC to cover shortfalls while committing to redress customers who overpaid.

At the National Assembly's October 8, 2026 Land, Infrastructure and Transport Committee audit, lawmakers pressed BYD Korea CEO Jo In-cheol on whether Korean driving data is transferred to or usable by BYD's Chinese headquarters for autonomous-driving or AI development; Jo denied it, but the Korea Transportation Safety Authority confirmed it had conducted zero real-world cybersecurity assessments of BYD vehicles and committed to begin them. Lawmaker Eom Tae-young (People Power Party) noted BYD's claims remained unverified absent independent testing, and lawmakers separately questioned whether BYD's Chinese parent could issue remote commands to Korean vehicles -- a concern tied to China's National Intelligence Law and Data Security Law, which compel firms to assist state intelligence work. BYD Korea's head did not directly answer the remote-access question, saying he understood no such authority existed. Tesla Korea was questioned on similar data-access issues at the same hearing.

In evidence filed as part of Alibaba's lawsuit challenging its Section 1260H 'Chinese military company' designation, the U.S. Department of Defense disclosed that beyond applying censorship to its own consumer platforms and Qwen generative-AI models, Alibaba develops a product called 'Green AI' that automates real-time content filtering across text, images, voice, video, and streaming data, and sells it as a content-moderation tool to domestic and overseas developers, e-commerce vendors, video-streaming services, and gaming platforms so they can comply with Chinese censorship requirements.