Google Pauses OSS Bug Bounty, Mold 3.0 Rewritten in Rust, and More

AI

Google Suspends Open-Source Bug Bounty After AI-Generated Reports Overwhelm Reviewers

Google paused new product-vulnerability submissions to its Open Source Software Vulnerability Reward Program (OSS VRP) on October 1. A surge of low-quality, AI-generated vulnerability reports had overwhelmed its security engineers and maintainers, making the triage workload unsustainable.

The freeze is not a shutdown. Valid reports submitted before October 1 are still being processed, and supply-chain vulnerability disclosures remain open. Google plans to redesign its reporting framework during the pause and share a progress update in Q1 2027.

The incident highlights an emerging tension in security research. AI tools that automate vulnerability discovery also generate noise at scale, and the cost of filtering invalid reports can erode the value of bounty programs. Other organizations running bug bounties will likely face the same dynamic.

Safeworld Raises $12M Seed to Stress-Test GenAI Robots Before Deployment

Safeworld, co-founded by Dr. Ding Zhao, director of Carnegie Mellon University’s Safe AI Lab, has closed a $12 million seed round co-led by Shine Capital and a16z Speedrun. Box Group, Carnegie Mellon University Endowment, Innovation Endeavors, and SV Angel also participated.

The startup provides a third-party validation platform that uses simulation and generative AI to hunt for rare but critical failure cases in robotic control software. By discovering dangerous edge cases that manufacturers may not think to test, Safeworld aims to build a shared library of safety cases across the industry.

The timing matters. Humanoid robots are approaching commercial deployment, and generative-AI-controlled machines are inherently less predictable than rule-based predecessors. An independent safety verification layer could become as routine for robots as crash testing is for cars.

Big Tech

Deutsche Telekom Targets Billions in AI Cost Savings by 2030

Deutsche Telekom CEO Timotheus Hottges laid out the company’s AI roadmap at its AI Investor Day. The target: shave approximately EUR 1.1 billion in indirect costs by 2027 (relative to 2023) and EUR 2.5 billion by 2030 through AI and automation.

AI already flags cellular network traffic peaks earlier than legacy monitoring. In customer service, it assists agents to resolve issues on first contact. The company is expanding AI into software development and administrative workflows, and plans to reinvest part of the 2027 savings into fiber network expansion in Germany.

Beyond cost cuts, Deutsche Telekom is chasing AI as a revenue stream, targeting EUR 250 million in AI-related revenue this year and EUR 800 million by 2030. For telecom incumbents, AI adoption is shifting from an efficiency story to a top-line growth thesis.

Musk Confirms TSMC Talks for Texas Terafab Project

Elon Musk confirmed on October 3 that discussions are underway between his Terafab project and TSMC, the world’s largest contract chipmaker. The most likely arrangement would see TSMC own and operate a new fab in Texas, with SpaceX contributing equity or purchase commitments.

The move follows Musk’s struggle to build independent chipmaking capacity. Surging demand for AI and high-performance computing chips has made TSMC’s US expansion strategically valuable, and Terafab offers TSMC a committed anchor customer.

No contract has been signed, and the ownership structure and timeline remain undefined. TrendForce flagged the Terafab talks as a key theme ahead of TSMC’s upcoming earnings report.

Startups

Fleuret AI Raises EUR 4M Pre-Seed to Automate Penetration Testing

French cybersecurity startup Fleuret AI has closed a EUR 4 million pre-seed round led by RAISE Ventures, with Auriga Cyber Ventures, Wind, Better Angle, and sector angels participating.

Founded by CEO Yanis Grigy and CTO Augustin Ponsin, the company is building a platform that turns penetration testing from a one-off audit into a continuous process. It automates five areas: mapping exposed systems, identifying vulnerabilities, demonstrating exploitability, supporting remediation, and verifying that fixes hold.

Manual pen testing is expensive enough that most organizations run it once or twice a year. AI-agent-driven continuous testing could close the gap between assessments, catching vulnerabilities introduced by frequent deployments.

OneByZero Closes $20M Series A to Scale Enterprise AI in Asia-Pacific

Singapore-based enterprise AI company OneByZero has raised $20 million in a Series A led by Jungle Ventures. It marks the company’s first external funding after three years of deploying AI systems for large enterprises in regulated sectors including financial services, telecom, and retail.

OneByZero currently operates in nine markets spanning Australia, India, Indonesia, Singapore, Thailand, the US, and Vietnam. The funding will support expansion into Japan and development of its NEO AI deployment platform and AI Coworkers.

The company says revenue has more than doubled annually for three years running. As enterprise AI moves from pilots to production deployments, specialized players focused on regulated industries in specific geographies are carving out defensible positions.

Open Source

Mold 3.0 Ships Full Rust Rewrite, Aims to Replace GNU ld on Linux

The high-speed linker Mold has reached version 3.0, marking its complete rewrite from C++ to Rust. The release requires Rust 1.95+, drops the Intel oneTBB dependency, and switches from CMake to Cargo as its build system.

Developer Rui Ueyama explained the motivation: “We added linker script support so that mold can link essentially anything GNU ld can, including kernels and embedded programs.” The long-term goal is to get Linux distributions to adopt mold as their default linker.

The Rust rewrite improves safety when handling corrupted input files. The 3.x series will focus on closing remaining GNU ld compatibility gaps, with linker script support as the headline feature.

coucou: Monitor AI Coding Agent Sessions From Your Mac’s Notch

coucou, a lightweight open-source desktop app, has gathered over 2,400 GitHub stars within days of launch. It sits in the Mac notch (or the top of the screen on Windows and Linux) and monitors coding agent sessions in real time.

The app supports Claude Code, Cursor, Codex, Gemini CLI, and other agents. It shows what each session reads, edits, and runs step by step. For Claude Code specifically, permission requests appear directly in the notch with Allow/Deny/Always options.

Built by Louis Raille, coucou uses native Swift 6 and SwiftUI on Mac with zero third-party dependencies, and Tauri 2 on Windows. An animated mascot named Mochi can be dragged out of the notch to float on your desktop as a coding companion.

Gaming

Kingdom Hearts Collection [I-III] Launches Natively on Modern Platforms October 8

Square Enix is releasing Kingdom Hearts Collection [I-III] on October 8 for PS5, Xbox Series X/S, Nintendo Switch 2, and PC (Microsoft Store). The package includes HD 1.5+2.5 ReMIX, HD 2.8 Final Chapter Prologue, and Kingdom Hearts III with the Re Mind DLC.

On Switch 2, the collection replaces earlier cloud-streamed versions with native builds. Physical editions are available for PS5 and Switch 2, and the collection is priced at $75.

This marks the first time the full Kingdom Hearts saga is playable natively on current-generation hardware. The Switch 2 native builds are part of a broader industry shift away from cloud-dependent game delivery on Nintendo platforms.

Metro Redux Gets Free Next-Gen Update With 4K/120 FPS This October

4A Games and Deep Silver are delivering a free next-gen update for Metro 2033 Redux and Metro: Last Light Redux. The update lands on PC on October 22 and PS5/Xbox Series X|S on October 29.

On PS5 and Xbox Series X|S, players get true 4K at 60 FPS or upscaled 4K at 120 FPS. Platform-specific features include PSSR on PS5 Pro, TSR upscaling on Xbox Series X, and Spatial Audio on Xbox. PC gets DLSS support and uncapped frame rates.

The Metro franchise has crossed 50 million total sales. The next entry, Metro 2039, is scheduled for February 4, 2027. Offering existing owners a free visual upgrade builds goodwill and re-engagement ahead of the new release.

References

Google Tightens Open-Source Bug Bounty Rules After Surge in AI-Generated Vulnerability Reports — Cyber Security News
Google AI-generated vulnerability reports pause — Help Net Security
Can Safeworld convince people that gen AI robots won’t hurt them? — TechCrunch
Deutsche Telekom boosts growth, efficiency and quality through the use of AI — Deutsche Telekom Newsroom
Germany’s Deutsche Telekom targets EUR 2.5 billion in AI savings by 2030 — Yahoo Finance
Musk confirms talks with TSMC over his Texas chip factory project — DigiTimes
TSMC Earnings Preview: Terafab Talks, Price Hikes and A14-Intel Race — TrendForce
Fleuret AI raises EUR 4M to advance AI-powered offensive cybersecurity in Europe — Tech.eu
Fleuret AI Raises EUR 4M in Pre-Seed Funding — FinSMEs
OneByZero raises US$20 mil Series A led by Jungle Ventures — TechNode Global
OneByZero raises US$20 mil Series A to scale enterprise AI across Asia Pacific — Digital News Asia
Mold 3.0 High Speed Linker Released Following Rust Rewrite — Phoronix
Rui Ueyama — mold rewrite announcement — X
Louis-CFM/coucou — GitHub
coucou — GitHub trending stats and insights — TrendShift
Kingdom Hearts Collection I-III Launches October 8 — One More Game
Metro Redux Next-Gen Update Arrives This October — One More Game
Metro Redux gets a free next-gen update with 4K/120 FPS, DLSS, PSSR and more — G2A News