Anthropic says its Claude model, used on an internal statistics project, requested an access token without being asked. It then pulled aggregate counts from a Georgia dashboard whose data the state normally sells for a fee. Georgia's deputy secretary of state says it was "publicly available data accessed through our data hub" and that it "did not get into the voter registration system."
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Elon Musk said on X that SpaceX "closed $40B of debt for GPUs," adding that the company is investment grade and has Starlink and launch revenue, while debt markets have "almost entirely shut off" for companies without substantial revenue independent of AI data centers. In a follow-up reply, Musk said it is "primarily callable debt for GPU purchases that will arrive in Q1 and Q2" and "not a major factor this quarter." Musk did not name lenders or terms. Reuters, the FT, CNBC, Semafor and Bloomberg had earlier reported, citing unnamed sources, that SpaceX was arranging about $40 billion of debt for Nvidia chips, with Apollo and Goldman Sachs reported to be leading.
A unit of Authentic Brands Group, ABG EPE IP LLC, and seven other Elvis Presley rights holders sued Anthropic on Oct. 23 in the Northern District of California (No. 5:26-cv-12473). They allege Claude was trained on lyrics to 274 Presley compositions, including "Can't Help Falling in Love," "All Shook Up" and "A Little Less Conversation," without a license, and that it still produces infringing lyrics and rewrites despite guardrails. They plead copyright infringement plus DMCA circumvention and copyright-management-information removal and seek up to $41.1M in statutory damages (about $48.6M with the DMCA claims) plus an injunction. Anthropic did not immediately respond to Billboard's request for comment, and the allegations are unproven.
A newly published CVE (CVE-2026-116199, assigned by VulnCheck on Oct 25) covers a flaw in Snipe-IT's Google SSO login. Versions before 8.6.3 didn't check whether an account was deactivated, so a former user whose Google account was still active could sign back in with their old permissions, including admin. It only applies when Google SSO is on and usernames are email addresses, and Snipe-IT says default installs aren't affected. The fix shipped in v8.6.3 on June 15, and the latest release is v8.8.3. VulnCheck scores it 9.2 Critical (CVSS 4.0) and 8.1 High (CVSS 3.1), while Snipe-IT's advisory rates it Moderate. It isn't in CISA's KEV catalog, and no public exploit or attacks have been reported.
Oracle's Security Alert for CVE-2026-114820, rated CVSS 9.1, removes four eMudhra-linked root CA certificates from Java SE and GraalVM; Oracle lists it under JSSE, but the fix is a trust-store change.
Ionity secured up to 600 million euros to expand its European charging network while SNCF introduced stricter bicycle and scooter rules for high-speed trains. A BYD plug-in hybrid demonstrated independent wheel lifting to bypass a clamp.
