Meta’s updated commercial terms, scheduled to take effect October 30, authorize the company and entities acting on its behalf to use automated tools to access, index, cache, analyze, collect, retrieve, and crawl websites associated with business accounts on Meta platforms. The terms cover content on domains, pages, and URLs associated with a business’s products or services and say Meta may use collected content to provide, develop, improve, research, train, and maintain its products and services. Meta defines “AI at Meta” as one of those products elsewhere in its terms. The change affects businesses using accounts to manage Facebook pages, Messenger accounts, Instagram profiles, WhatsApp channels, advertising, marketing messages, groups, or Meta’s business dashboard. Legal experts who reviewed the language said it could enable Meta to argue that it has permission to scrape news publishers’ websites and train AI systems on the material. They also said the terms’ authorization to create “test credentials” could potentially let Meta access content behind registration walls, though Meta did not say whether such credentials would be used to bypass paywalls. Business users cannot opt out while retaining commercial access; the terms instruct users who disagree to stop using Meta products for business or commercial purposes. Meta said the language consolidates previously scattered crawling provisions, will not change its future crawling practices, and leaves content owners able to manage crawler access through robots.txt.

Waymo plans to launch its fully autonomous ride-hailing service in Toronto in 2028, marking the company’s first expansion into Canada. In the coming days, Waymo vehicles will begin manually driven operations on Toronto streets for high-definition mapping and validation tests, with trained autonomous-vehicle specialists behind the wheel. Waymo says the phased testing is intended to adapt its Waymo Driver system to Toronto’s local driving conditions. Waymo has partnered with Toronto-headquartered Element Fleet Management for end-to-end fleet management. The companies plan to invest in hundreds of jobs over time, including fleet maintenance, validation driving, customer service and operational roles. Waymo also cites existing Canadian relationships with Canada Pension Plan Investment Board, a long-term investor, and manufacturer Magna International. Waymo says its all-weather Driver could complement Toronto’s existing transportation options. Based on more than 400 million fully autonomous kilometers driven, the company says its vehicles were involved in 95% fewer crashes involving serious injury or worse than human drivers in the cities where it operates. Waymo is also working with accessibility and mobility groups including BALANCE for Blind Adults, CNIB, Community Living Toronto, Connected Canadians and Epilepsy Ontario as it prepares the service.

RPKI, the system that lets IP-address holders authorize which networks may announce their routes through BGP, classified 70.3% of routed Internet prefixes as valid on September 28, 2026, up from 54.0% a year earlier. Networks checking RPKI can reject unauthorized route origins, limiting mistakes and hijacks such as Pakistan Telecom’s 2008 YouTube rerouting incident. China drove much of the increase, moving from 3.7% to 83.0% of its IPv4 addresses in valid routes; Egypt, Kazakhstan and Mexico also made large gains. A typical valid route reached 596 public routing-data vantage points, while an invalid route reached only two. RPKI does not protect against all route hijacks. A forged route for a Hetzner address block passed RPKI validation on August 28, 2026 because Hetzner’s authorization permitted more-specific routes, enabling an attacker to obtain a TLS certificate and distribute a malicious Virtualizor update. IPinfo found that 16.2% of 855,217 RPKI-covered IPv4 routes had similarly permissive authorizations. ASPA, a newer mechanism for authorizing upstream providers and checking BGP paths, expanded from 131 publishing networks in September 2025 to 3,272 a year later. Only 3.5% of routing with paths longer than two networks could be positively verified by ASPA, while incomplete records at Syrian Telecom accounted for about one-quarter of observed mid-path ASPA failures.

Anthropic was assigned the highest junk credit rating in June, according to the Financial Times headline. The available page text provides no details on the rating agency, the specific rating level, the reasons for the assessment, or Anthropic’s financial condition. The page primarily displays Financial Times subscription offers, including a Standard Digital promotion priced at $299 for the first year instead of $540. It states that the offer ends on 28 October and that trial access is followed by a $75 monthly charge. The available text does not provide further information about Anthropic or the June credit-rating decision.

PostgreSQL 19 has been delayed until November after AI-assisted code reviewers identified more bugs than core developers could fix before the planned release. Core developers reverted as many as 10 features while preparing the release. Developers attributed the delay to improved review tooling rather than “vibe coding.” The findings prompted maintainers to remove or defer affected work instead of shipping the original feature set on schedule.

Deno’s team is joining Cloudflare, and the Deno runtime will wind down over the next year. Cloudflare will continue operating the JSR JavaScript registry on its infrastructure, while the team works to merge Deno’s celld technology into workerd, Cloudflare’s open-source runtime for Workers. Ryan Dahl announced the move two years after Deno 2 shipped; Bun joined Anthropic about 10 months earlier. Deno launched in 2020 with deny-by-default permissions, first-class TypeScript, web-standard server APIs, ES modules, a single executable and URL-based dependencies instead of npm packages and node_modules. It later added deps.ts, lock files, import maps and npm compatibility; Deno 2, released in October 2024, added full Node and npm compatibility. The source credits competing runtimes with accelerating Node additions including global fetch, WebSocket, Web Streams, Web Crypto, a stable permission model, type stripping, node:sqlite and require(esm). It also cites competition among package managers as contributing to deterministic lockfiles, workspaces, offline caches, smaller node_modules installations and changes to install-script defaults. GitHub announced in June that npm 12 would stop running install scripts by default after supply-chain worms. The source says a community Deno fork could test demand for an independent secure-by-default, standards-focused runtime.