Brave published its second agentic-browser disclosure on October 21, extending its Comet prompt-injection work into hidden-text and screenshot vectors and reporting the same class of flaw across the entire category of AI browsers, with one further vendor's issue withheld at that vendor's request. The mechanism is unchanged: the browser forwards page content to the model without separating trusted user instructions from untrusted site text, so summarizing a hostile page or Reddit comment executes attacker text with the user's authenticated session as the blast radius. Traditional same-origin policy and CORS do nothing here, because the request is made by the assistant, not the page.

OpenAI did not contest the class of attack. In an October 22 post, chief information security officer Dane Stuckey described red-teaming, reward shaping to ignore malicious instructions, overlapping guardrails and new detection systems, then said plainly that prompt injection remains a frontier, unsolved security problem — a launch-week admission that Atlas ships with a known unfixed vulnerability class. Researchers reproduced injections against Atlas the same day, and by October 24 a clipboard-hijack demo showed agent mode clicking a malicious link and silently overwriting the user's clipboard.

Meta told employees on October 22 that it is cutting roughly 600 positions across Superintelligence Labs, the umbrella covering its AI infrastructure teams, its product AI groups and Fundamental AI Research. The cuts, announced in a memo from chief AI officer Alexandr Wang, do not touch the small group building Meta's next-generation foundation models — many hired this summer at compensation in the hundreds of millions — leaving Superintelligence Labs at just under 3,000 people. Affected staff get 16 weeks of severance plus two weeks per completed year of service.

The timing is the story. Reuters noted Meta had struck a $27 billion financing deal with Blue Owl Capital one day earlier — its largest-ever private capital agreement — to fund its biggest data center project. So the same week saw record infrastructure borrowing alongside a roughly 20% haircut to the research organization, which Meta attributes to organizational bloat accumulated during three years of fast AI hiring and a lukewarm developer reception to Llama 4 in April. Meta is keeping the newly hired researchers and cutting the legacy layers around them.

Alibaba's Qwen team completed the Qwen3-VL rollout on October 21 with the 32B and 2B dense models, in both Instruct and Thinking editions. The 32B is a dense 32B-parameter model — no mixture-of-experts routing, so you pay for all 32B per token — with an enhanced ViT encoder, interleaved-MRoPE positional encoding for interleaved image, video and text sequences, DeepStack multi-level feature fusion, native 256K context expandable to 1M, OCR across 32 languages, and second-level video timestamps. Benchmarks put the Thinking edition at 78.1 on MMMU, and the full line-up — 2B, 4B, 8B, 32B dense plus 30B-A3B and 235B-A22B MoE — ships under Apache 2.0 on Hugging Face with no gating.

The deployment maths is the point: the 32B fits a single 24GB card at Q4_K_M quantization, about 19.8GB, and the 2B runs on edge hardware, so multimodal agentic work that previously required a metered API — GUI element recognition, tool invocation, screenshot-to-code, document and long-video QA — can now run on hardware you already own, with no per-token bill and no data leaving the machine. The same window brought DeepSeek-OCR, an MIT-licensed 3B MoE with roughly 570M active parameters that showed 97% OCR fidelity at roughly 10x text-to-vision-token compression.

OpenAI launched ChatGPT Atlas on October 21, a Chromium-based browser built around ChatGPT rather than a search box. It runs worldwide on macOS for Free, Plus, Pro and Go accounts, with beta access for Business and, if a plan administrator enables it, Enterprise and Edu; Windows, iOS and Android builds are promised later. Three pieces matter technically: an Ask ChatGPT sidebar that reads the current page, optional browser memories that persist context across sessions and can be toggled per-site from the address bar, and agent mode — a preview for paid tiers — that takes actions in the user's own logged-in browser session instead of a remote sandbox.

The architectural claim is that the browser is the only surface holding your tabs, sessions and context at once, and OpenAI extended that logic the same week by acquiring Software Applications Incorporated, makers of the unreleased Mac agent Sky, and folding all twelve staff into ChatGPT. For anyone building web apps the practical consequence lands in two places: published ARIA tags on your pages now change how agent mode behaves on your site, and page visibility, memory and training opt-in are user- and publisher-controlled settings rather than server-side defaults you can assume.