No. 124 · Sunday, 18 October 2026 · 9 stories

World

Trump waived nearly all of the Graham Act's Russia sanctions and tariffs two days before they were due to take effect

The executive order, signed on 16 October, formally raises duties on Russian goods by 500% and on the five largest buyers of Russian oil and gas by 100%, then waives those duties and the Act's sanctions provisions (sections 102 through 111 and 117) with no end date, certifying to Congress that the waiver "is in the national interests of the United States". The Act, which Trump signed on 18 September after passing the Senate 86–11, required implementation by 18 October; sanctions imposed under earlier executive orders stay in force, and the order follows a 9 October plan to buy Russian diesel under a Treasury licence that runs to 7 April.

why it mattersThe one statutory lever that would have forced tariffs on China and India for buying Russian energy is suspended at presidential discretion, so plan for Russian crude to keep flowing and treat congressional sanctions acts as signals rather than constraints.

World2 stories, lead above

UKMTO counted at least 12 ships attacked in or near the Strait of Hormuz in the week to 16 October, and said most attacked vessels were no longer reporting to it

Of the twelve, one sank (the container ship GFS Pride), two were disabled and three were damaged; 125 ships left and 129 entered the strait over the seven days, and CENTCOM said 400 ships and 100 million barrels of oil moved through under the US-coordinated escort system. On 17 October the IRGC said a supertanker carrying more than two million barrels hit a mine on an "unauthorised" route, which CENTCOM disputed, and UKMTO reported a tanker hit by a rocket-propelled grenade fired from a small boat 78 nautical miles northeast of Jubail.

why it mattersTransits are running at a fraction of normal under escort and the attack count is rising rather than falling, so keep $100-plus oil in your base case through the US midterms rather than treating last week's spike as a peak.

Ahead

AI for Software Development2 stories

OpenCode said attackers took stored provider API keys from about 1.4% of its Console users through a legacy system it was decommissioning

The company behind the open-source coding agent said on 17 October that unauthorised access to a system being retired exposed OpenAI, Anthropic and Google keys saved in user workspaces, that everyone affected had been emailed, and that the breach was tied to a "large scale distillation attack"; it is working with the three providers and called the incident ongoing. Affected users reported usage alerts and charges of several hundred dollars on keys they had used only in OpenCode before the notice arrived.

why it mattersIf you ever pasted a provider key into OpenCode Console, revoke it today and check usage; more generally, give agent tools their own scoped, spend-capped keys rather than the account's main one.

Anthropic reported that juniors fell from 27% to 9% of its technical hires as its agents' working hours overtook its employees'

The company's economics team published internal data on 16 October: agent hours passed human hours company-wide in March 2026 and reached six times their handlers' hours by August, commits per engineer are about five times the level of six months earlier, the junior share of technical staff fell from 21% to 14% since early 2025, and the median employee spends 20% more time in meetings than a year ago. The authors found no difference in how often agent-written and human-written code was later reverted.

why it mattersThis is one lab's workflow roughly a year ahead of most teams: expect fewer junior roles, hiring that grades judgment and a track record with agents over domain depth, and your own review time to become the bottleneck.

Ahead

  • 28 OctGitHub Universe 2026, San Francisco (28–29 Oct)
  • 29 OctLast day of the grandfathered 20x-Plus allowance for existing ChatGPT Pro $200 subscribers in Codex; drops to 10x from 30 Oct
  • 10 NovAI Engineer Code Summit, San Francisco (workshops 10 Nov, talks 11–12 Nov)
  • 16 NovGitHub Copilot retires Claude Opus 4.8, Claude Opus 5 and GPT-5.6 Terra

AI Research & Models3 stories

DeepSeek released V4.1-Flash-1017 under MIT, lifting its DeepSWE score to 77.0 and Terminal-Bench 4.0 from 31.2 to 42.3

The 763-billion-parameter checkpoint with a 1-million-token context went live on 17 October on Hugging Face, ModelScope and the API under the unchanged deepseek-flash name; DeepSeek calls it a minor update that improves on all eleven published benchmarks with shorter outputs and faster task completion, and its model card places it above Kimi K3, GLM-5.3, GPT-5.6 Sol and Claude Opus 5 on DeepSWE v1.1 while Opus 5 keeps the lead on Terminal-Bench 4.0 at 51.8. DeepSeek also opened paid Search and Fetch APIs at $0.75 per 1,000 calls, free through Claude Code, Codex and its own Harness until 31 October.

why it mattersA drop-in update to the cheapest strong agent model just closed a third of the gap to Opus 5 on terminal work, so rerun your cost-sensitive agent evals against it this week.

Anthropic said Claude traced the NIST elliptic-curve seeds to a 1990s C-library random generator, settling a decades-old question about whether the curves were backdoored

An internal research model noticed that the top bit of 20 words was zero in four of the seeds, odds of about one in 5,810 by chance, guessed the lrand48 generator seeded with a Unix timestamp, and recovered generator states by lattice reduction that match srand48 initialisations between May 1997 and April 1998 for P-192 through P-521 and five ANSI X9.62 example curves. Ten Anthropic authors published reproduction code on 16 October and say the result is not a weakness in ECDSA; the B-163 seed and most base points remain unexplained, and the $36,864 bounty for the seeds goes to the Internet Security Research Group.

why it mattersA model did, in one investigation, a piece of cryptanalytic archaeology the field had left open since 1999, so count frontier models as research collaborators rather than assistants and expect the "backdoored NIST curves" argument to fade from cryptography debates.

Reflection AI published the weights of Beam, its 501-billion-parameter coding model, on Hugging Face under Apache 2.0

The mixture-of-experts model with 23.4 billion active parameters and a 1-million-token context appeared on 16 October in BF16, FP8 and NVFP4 builds, eleven days after its announcement; Reflection reports 81.6% on SWE-bench Verified and 80.1 on Terminal-Bench v2.1, below Kimi K3 and DeepSeek V4.1 Flash on the latter, and claims GLM-5.2-level reasoning at three to four times less inference compute.

why it mattersA US lab's open-weight coding model is now downloadable for self-hosting, the option enterprises barred from Chinese weights have lacked, so benchmark it against the Chinese open models before settling a self-hosting choice.

Dev Tools & Releases1 story

The General Conference on Weights and Measures voted to stop inserting leap seconds into UTC from 20 May 2027

Resolution 5 of the 28th CGPM, adopted in Versailles on 15 October, makes UTC continuous from that date and lets the difference between UTC and Earth-rotation time UT1 grow to 3,600 seconds before any correction, enough for several centuries; the 2022 conference had set 2035 as the deadline, and the date was brought forward because a faster-spinning Earth made a never-tried negative leap second likely.

why it mattersAfter 20 May 2027 no leap second will ever be inserted again, so the leap-second and clock-smearing code paths in your systems become dead weight to remove rather than maintain.

Ahead

Money1 story

Brent crude settled at $109.86, up 3.7%, after trading above $110 for the first time since May

December Brent closed at $109.86 and November WTI at $101.41 on 16 October as the Hormuz shipping attacks, Houthi strikes on Saudi Arabia and Ukraine's strike on the Ryazan refinery removed the prospect of near-term supply relief; the US offered up to 17 million barrels from the Strategic Petroleum Reserve the same day without stopping the rally, and crude is up more than 75% this year. The Nasdaq fell more than 2% and Bitcoin dipped below $80,000 before recovering to about $82,000.

why it mattersWith September CPI at 3.7% and the Fed deciding on 28 October, $110 oil raises the odds of a hike or a hawkish hold, so stress your rate assumptions for another leg up rather than for the cut path.

Ahead

Bitcoin · weekly close vs 200-week moving average · log scale · last 8 years Price200-week average
$5,000$10,000$20,000$50,000$100,000 20192020202120222023202420252026 $80,809 $67,358
$5,000$20,000 2020202220242026 $80,809 $67,358

Price is 1.20× the 200-week average. Weekly closes, USD, as of 28 October 2026 · data blockchain.com.