Tech News This Week: Agent Sandboxes, AI Chips and Deepfake Laws

This was a busy week in tech, from October 5 to 10, 2026, and most headlines were about money. Under the funding numbers were a few changes that affect how developers work: a sandbox for AI agents on Windows, a laptop that runs very large models locally, and a bug bounty closed by AI spam. Here is what happened and why it matters if you write software. Python 3.15, the Django security release and GPT-6 each get their own post, linked at the end.

Microsoft puts AI agents in containers#

On October 7 Microsoft made Microsoft Execution Containers (MXC) generally available on Windows 11. An organization writes a policy that says which files and networks an agent may reach, and Windows enforces it while the agent runs. The isolation can be light, such as a separate process or session, or heavy, such as WSL containers, a virtual machine or Windows 365 for Agents. GitHub Copilot, OpenAI Codex, Replit and LM Studio already support it, and Claude Code support is announced but not out yet.

This matters because coding agents now run shell commands, edit files and call APIs on real machines. Until now the main guard was a permission prompt in the agent itself. MXC moves that boundary into the operating system, where a confused or manipulated agent cannot talk its way past it. If your team is unsure about letting agents loose on developer laptops, this is the kind of control security teams have been asking for.

A laptop for 120-billion-parameter models#

The same day, Satya Nadella and Jensen Huang presented the Surface Laptop Ultra in San Francisco. It is built on Nvidia RTX Spark with up to 128 GB of unified memory, and Microsoft says it runs models with more than 120 billion parameters locally. It starts at $2,599.99. Windows Central and Engadget report $5,899.99 for the top model with 128 GB and 1 TB. Pre-orders opened on October 7 and it ships on October 16.

For developers, the point is local inference. A model of that size on your own machine means private code never leaves it, there are no per-token bills, and you can work offline. It is still a lot of money, but it puts on a laptop what needed a workstation a year ago.

AI spam pauses a Google bug bounty#

Google paused new product-vulnerability reports to its Open Source Vulnerability Reward Program, which covers projects such as Go, Angular, Bazel, Protocol Buffers and Fuchsia. According to BleepingComputer, Google cited a surge of automated submissions, "the vast majority of which are not valid". Supply-chain reports and anything submitted before October 1 are not affected, and Google expects to give an update in the first quarter of 2027.

The chip numbers keep climbing#

AI demand showed up in every hardware report this week. TSMC filed its September revenue with the SEC on October 8, and Foxconn reported its third quarter on October 5.

The GlobalFoundries deal says the most about supply. GPUs for AI need advanced packaging, and that packaging is a bottleneck. New capacity in Malta, New York, only ramps in the first half of 2028, so expect GPU capacity in the cloud to stay tight and expensive for a while.

In Japan, Rapidus launched Rapidus CORE, an ecosystem around its planned 2 nm foundry. Its first group of 17 design firms, including Cadence, Synopsys, Infosys and Wipro, will help customers start designs early.

The money: funds, debt and one cancelled IPO#

• SoftBank is seeking up to $100 billion from Gulf investors for a new fund that would buy established companies and improve them with AI and robotics. This rests on one Financial Times report that Bloomberg and Reuters passed on, and the talks are described as early.
• SpaceX is reported to be raising about $40 billion to buy Nvidia chips: roughly $10 billion in bank loans and $30 billion in debt, with Apollo expected to lead. The report comes from the Financial Times and Reuters sources, and no company has confirmed it.
• Firmus Technologies, an Australian AI infrastructure company backed by Nvidia, withdrew its roughly $5 billion IPO on October 9, citing "recent market volatility". It will look for private capital instead.
• Butterfly Effect, the company behind the Manus agent, raised more than $500 million in its first round since China ordered Meta's acquisition unwound.
• Schneider Electric agreed to buy PTC, the maker of Creo, Windchill and Onshape, for $205 a share in cash, about $22.6 billion in equity value. It expects to close by the third quarter of 2027.
• Deutsche Telekom said it expects AI to cut its indirect costs by about €2.5 billion by 2030 compared with 2023.

Put together, money for AI is still easy to find in private deals and harder in public markets. The Firmus withdrawal is a small sign that investors are starting to question AI infrastructure valuations.

Regulators push back in Europe#

Finland stops work on two Google data centers#

Finland's environmental regulator ordered Tuike Finland, a Google subsidiary, to suspend preparatory work at its planned data center sites in Muhos and Kajaani until environmental impact assessments are done, Yle reported. That work includes removing trees and topsoil, building roads and drainage. Police are also looking into suspected illegal logging at Muhos. Google said it had "fallen short of our own high standards". The sites are part of a €13 billion investment in Finland.

Denmark wants your face and voice to be yours#

Denmark introduced a bill on October 8 that changes its copyright law to ban sharing realistic deepfakes of a person's face or voice without their consent. It covers ordinary people, not only artists, and exempts satire, parody and criticism. It is a bill, not yet a law, and the culture minister hopes it takes effect at the start of 2027.

If you build anything that generates or hosts synthetic faces or voices, plan for consent records and fast takedowns now. Other countries tend to copy rules like this one.

Apple's October 13 event#

Apple's marketing chief Greg Joswiak posted "Welcome home. October 13" on October 8, and Apple has invited press to an event in New York. Apple has not named a product. Bloomberg's Mark Gurman reports that it is the long-delayed smart-home hub with a display of about six inches, delayed because it depends on the new Siri. For developers the interesting part will be any new home and App Intents APIs, so watch the developer notes rather than the keynote.

The rest of the week on this blog#

• GPT-6 and Intelligent UI: what OpenAI changed in ChatGPT this week and what it means for developers.
• Python 3.15 for Django developers: lazy imports, frozendict and the other changes worth knowing.
• The Django 6.1.2 security release: what it fixes and how to upgrade a REST Framework project.
• AI coding agent trends: skills, memory, agent teams and AI code review.

Frequently asked questions#