Three weeks in tech: October 5–25, 2026 — AI, security and useful updates

October 5–25 brought new ways to work with documents and verify AI media, alongside security changes that deserve attention now. This catch-up edition covers ten developments across three weeks, from Claude in Google Workspace to critical PHP fixes. Each item explains who it affects and what to check next.

This edition follows our September 28–October 4 digest. It covers October 5–25, with information checked on October 26, 2026. Dates below identify an announcement or the start of a change; feature availability can still depend on your account and region.

The cover is an official Google SynthID Detector screenshot demonstrating an AI-video check. It is the developer’s example, not a result from our own testing.

What to check first

Windows users: check both version and edition, because 24H2 Home and Pro have reached the end of regular updates. Website owners: ask your host whether the October 21 PHP fixes are installed. AI users: review permissions and edit approvals before connecting work files. Other launches can wait until you have a clear task for them.

October 5–11: AI inside your files and tools for checking media

October 6. Claude arrives in Google Docs, Sheets and Slides

Anthropic opened the add-on’s public beta to paid Claude plans. The assistant runs beside an open document, spreadsheet or presentation, helping edit text, work with formulas and build slides. Separate connectors let users start working with Google files from inside Claude.

The practical attraction is less copying between tabs. Access and edit permissions still need attention: the default Ask before edits mode requests approval, and a work account may need administrator authorization. For an initial trial, we suggest a copy of a non-confidential file and one bounded task, such as explaining a formula or shortening a section. See our guide to the add-on and connectors.

October 7. SynthID Detector opens to the public

Google made SynthID Detector publicly available worldwide in English. It checks images, video and audio for supported watermarks, providing additional provenance information when a file was generated or edited by a compatible tool.

An absent watermark does not establish human authorship, and a detected mark does not verify a caption. Authentic footage can also be presented as evidence of a different event. Before sharing a sensational post, locate its original publication and compare its date, location and claim; treat the detector as one signal. Our SynthID explanation separates supported detection from broader judgments about a story.

October 12–18: Windows support, phishing infrastructure and a folding iPhone

October 13. Windows 11 24H2 Home and Pro reach the end of updates

According to Microsoft’s release-health notice, Home and Pro editions of 24H2 no longer receive monthly security updates. Enterprise and Education editions have a different deadline: October 12, 2027. Seeing “Windows 11” on a computer is therefore insufficient to establish its support status.

Check both fields in system information. If you have 24H2 Home or Pro, prepare a backup and open Windows Update. Avoid bypassing compatibility restrictions simply to obtain a newer version number: understand the restriction first, and contact your administrator for a managed laptop. Our upgrade preparation guide covers files, recovery information and the BitLocker key.

October 14. Microsoft and partners target phishing infrastructure

Microsoft and Health-ISAC announced action against YAM Store, CoGUI and Iron Man, services supplying criminals with accounts, impersonation sites and other resources. Microsoft estimates that the components enabled over a billion malicious messages since the start of the year. That is the company’s messaging estimate, not a count of confirmed compromises.

One scam pattern can arrive wearing many brands. Treat urgent demands to pay a delivery fee or rescue an account as something to verify separately. Open the service through a known address or app. If you already disclosed a password, use our account-protection checklist; deleting the message alone does not restore control.

October 15–16. Apple opens iPhone Duo preorders

Apple’s October 15 announcement named October 16 as the start of preorders for the folding iPhone Duo. Its design combines a compact outer display with a larger workspace when opened. Apple also describes adaptations in iOS 27 for the format, including multitasking.

A larger inner display is most relevant if you actually read documents, work across windows or consume substantial content on a phone. Before buying, check local availability, service arrangements, warranty terms and the apps you need. Durability and battery claims in a presentation are the manufacturer’s claims; we have not tested this device ourselves. Our iPhone Duo article provides more context for that decision.

October 19–25: work tools and updates worth prioritizing

October 20. Gemini adds tools for small businesses

Google announced a business landing page in Gemini, brand-style tools, financial-file analysis and connected services. The company described a global rollout starting in the following days, so the announcement does not establish that every feature is already present in every account.

Start with one recurring task, such as drafting product descriptions or explaining expense categories. Decide beforehand which data may be shared and who will review the output. A chart does not establish that the totals are correct: compare them with source rows, especially before making a budget decision. Our Gemini workflow article explores practical uses and constraints.

October 21. Critical PHP fixes require website owners’ attention

WordPress urged owners to check PHP updates following fixes for two critical vulnerabilities. The issue concerns the server’s PHP environment and extends beyond WordPress. Updating a theme or plugin alone does not establish that the server has received the patch.

In WordPress, find the PHP version under Tools → Site Health → Info → Server. Send that information to your host and ask it to confirm the fixes: operating-system packages can carry backported patches without changing the main upstream version number. Arrange a backup and checks of important site functions after the update. Our PHP2Shell checklist explains what to ask support.

October 21. PowerToys 0.102 improves everyday Windows tasks

The stable PowerToys 0.102 release adds Mouse Button Lock for dragging without continuously holding a button, plus CursorHide for hiding the pointer. Command Palette gains a quick-access shelf, while ZoomIt can attach dictated text to a screenshot using on-device transcription.

These small changes may help if you frequently move files or explain a problem with screenshots. We suggest enabling one feature first and checking its keyboard shortcuts against your existing apps. There is no need to adopt the entire collection at once. Our PowerToys overview connects the changes to practical tasks.

October 21. Chrome asks before an insecure HTTP connection

Google announced default HTTP warnings for all Chrome users. The browser asks before making an insecure connection, going beyond a label shown after a page loads. Exceptions exist for some local destinations, including addresses used by home routers.

If a warning appears before an email login or payment, go back and check the address. HTTPS protects a connection; it does not certify the honesty of a site’s operator, and phishing sites can have certificates too. Website owners should check HTTPS and redirects between their addresses. Our Chrome security explainer covers the protection and its limits.

October 22. Google and Voltus announce a 1 GW virtual power plant

Google and Voltus expanded their virtual-power-plant agreement in the US PJM grid region. The initiative coordinates flexible demand, batteries and other distributed resources that can support the grid during peaks. The announced scale increases from 100 MW to 1 GW.

This is a way to manage demand, not an announcement that a single new generator has started operating. One gigawatt measures power rather than stored energy or guaranteed continuous output. Outside PJM, the announcement is not an enrollment offer: it illustrates how technology companies are trying to fit demand within grid constraints. Read our explanation of how the system works.

How to use this roundup during the week

Separate maintenance from experimentation. Checking system support and server patches has a concrete outcome: you know what is installed and who owns the next step. A new AI service or keyboard shortcut becomes useful when it addresses a recurring task. For a hardware purchase, write down your requirements before watching promotional demonstrations.

Our practical suggestion is to choose one action and record its result: the version after an update, your host’s response or a conclusion from a trial document. That makes the next decision easier. This digest draws on official announcements and documentation. Suggested workflows are editorial recommendations, not a report of hands-on product testing.