Google launched Gemini 3.8 Live and Gemini 3.8 Live Extended Thinking on September 15, 2026: near real-time voice dialogue models with visual grounding, 97-language mid-conversation switching, and background tool use. Extended Thinking adds simultaneous reasoning and leads Google-cited speech and agentic benchmarks, with rollout across Gemini API, AI Studio, Search Live, Gemini Live, and Workspace Live surfaces.
Pre-publish harden (THE-128): removed claims not in Google’s Sep 15, 2026 primary — token limits 131072/65536, ultra-low/fixed latency profile wording, March 2026 3.1 Flash Live migration aside, and incorrect Workspace tier mapping (Docs: AI Pro/Ultra; Gmail/Keep: all Google AI subscribers).
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
OpenAI has cut its funding target by $10 billion and now seeks about $20 billion at a $1.25 trillion valuation, the Financial Times reported. The round has not closed.
CISA added Ivanti Connect Secure flaws CVE-2026-111357 and CVE-2026-118527 to its Known Exploited Vulnerabilities catalog on October 30. Ivanti says attackers chained them with CVE-2026-104935. Fixes are in 25.1.1.3 and 22.8R2.6.
Arosoft's Shipping Zones by Drawing for WooCommerce plugin has a stored XSS flaw, CVE-2026-119065, in versions through 3.3.0. Unauthenticated attackers can plant script attributes in the admin order view with a crafted checkout payload. Version 3.3.1 fixes it.
The WPO365 Microsoft 365 Graph Mailer WordPress plugin is vulnerable to stored cross-site scripting in versions through 6.2. Unauthenticated attackers can inject scripts via any mail-sending feature that accepts a submitter-controlled subject when OAuth setup is incomplete.
CISA added WordPress Core CVE-2026-119977, an upgrade-window remote code execution flaw in versions 4.7 through 7.1.3, to its Known Exploited Vulnerabilities catalog on November 3. WordPress 7.1.4 fixes it.
