The Entrepreneurs edition
This is a real edition from 27 October 2026, at the Practical level, in plain language.
This week is about an emergency update for PHP, the software behind many websites, and about AI tools that ask for more of your data.
Two critical PHP flaws: updating is the only fix
The makers of PHP released emergency updates on Wednesday. They fix two critical flaws. These flaws let attackers take control of a system remotely. The flaws are in all PHP installations that handle web requests, going back to PHP 5 from 2004. Only PHP 8.2 and newer still get official patches. Patches are repairs for flaws. Some distributions and vendors still make their own fixes for older versions. The PHP Foundation says there is no complete solution and updating is the only safe choice. WordPress, Drupal and Magento run on PHP. Cloudflare saw attacks before the flaws were public. Later the number of attempts grew to millions. Some governments took sites offline as a precaution, including the website of the port of Rotterdam. On Friday morning no successful attacks had been reported yet. Researchers at Calif and Wiz found the flaws with AI tools from OpenAI. Details leaked earlier than planned, so the announcement had to come quickly.
Ask your hosting provider which PHP version your site uses and whether that version still gets a fix. Do not share revenue figures or staff planning through the share link of an AI tool, because with Muse such conversations could be found. Only connect Gmail or Drive to Personal Intelligence once you have deliberately decided that customer data may be used in AI search.
Google makes the line between Gmail and ads less clear
On 16 October Google changed its privacy policy. Before, it clearly said Google does not show personalised ads based on your content from Drive, Gmail or Photos. That line is now less clear. Android Authority was the first to spot the change. It is linked to Personal Intelligence, a feature from early 2026. With it, you pass data from several apps to Google's AI products, such as the Gemini app and AI Mode in search. Ars Technica reads the new text as saying this data may count in personalised ads. Google says ads are not based directly on your inbox or photo library and that linking is voluntary. Google says it does not use sensitive information to tailor ads. Read more →
Shared Muse conversations were out in the open
Muse is Meta's new AI assistant. Users can share a conversation with a link. Researchers at security company Claroc found 6,800 links to shared conversations with a search query. They opened a few hundred links. These contained information that should not have been public, such as a small business owner's loan application, an internal revenue analysis from a marketing company, the leave schedule of dozens of employees and a property investor's report with addresses and amounts. Claroc told Meta on 8 October and got no reply. After questions from Ars Technica, Meta paused the sharing feature. Meta is reviewing the report and considering changes. This is about one tool. A share link feels private, but here it was not really protected. Read more →
Claude Duet contacts you by itself, but not yet in the Netherlands
Anthropic has launched Claude Duet, an AI assistant that contacts you by itself before you ask for anything. Duet connects to your apps. Every morning it sends a short briefing about important matters. Then it checks again every few hours and contacts you when something comes up. It does simple admin tasks and also more complex jobs, such as building web apps. Before sending a message, making a payment, signing a document or deleting a file, it asks permission first. Duet does not see passwords or login details, and a separate control system watches for leaks of sensitive information. Anthropic built it for professionals and small business owners who have too much to keep track of. It is a research preview with a waiting list, only for Pro and Max subscribers in the United States, on the web or in an iOS app. So if you work in the Netherlands, you cannot use it yet. The background checks count towards your subscription limits. Read more →
AI assistants you just text
More and more AI agents are used with a simple message, by SMS, iMessage or WhatsApp. You do not need to download a new app. The agent remembers what you said before. It can plan an appointment, organise a calendar, research a trip, send an email or book something. TechCrunch lists the most notable ones, an American list. Instinct is the best known, valued at 10 billion dollars. Ask Proxy costs 1 dollar per day. For companies it costs 23 dollars per employee per month, for teams under 49 people. Maverick is free in beta on iMessage, and the Pro version costs 27 euros per month. Ohai starts at 9.99 dollars per month and Tomo at 19.99 dollars. Wajo gives its agent Fo its own email address, phone number and payment card, so you do not have to hand over your own details. Underdog runs entirely on your own device. That beta is invite-only. Read more →
ChatGPT ads now in 89 countries
OpenAI is expanding ChatGPT Ads to 26 more countries. This makes the ads available in 89 countries. OpenAI started them just over eight months ago. Since then, more than 100,000 advertisers have run campaigns. New additions include 14 countries in Latin America, such as Argentina, Chile, Colombia and Peru. Countries are also added in Europe, the Middle East, Africa and Asia, such as Nigeria, South Africa, Serbia, Ukraine, Cambodia, Bangladesh and Pakistan. The examples named are outside Western Europe. Advertisers take part through technology partners or by themselves through Ads Manager. The ads only appear in the Free and Go plans. Plus, Pro and Enterprise stay free of ads. OpenAI says conversations stay private from advertisers and that it does not sell customer data. More ad formats, goals, buying options and measurement options will come later. More information is at ads.openai.com. Read more →
Companies look at free Chinese AI models
More and more companies are looking at open AI models. These can be downloaded for free and mostly come from Chinese companies, such as Alibaba, DeepSeek, Moonshot and Z.ai. Anthropic, OpenAI and Google charge money for their strongest closed models. The Amsterdam law firm Driven Lawyers runs a small version of Qwen on servers in Germany to summarise legal contracts. According to founder Arvid van Oorschot, the model is not as good as the big American models, but it is suitable for this task. For heavier tasks, a large closed model remains better. The firm does not want to send sensitive files to servers in America or China, and costs quickly add up with an expensive model. Philip Gast of The Stack sees a lot of interest, mainly because of the costs. In healthcare and the defence industry, information often has to stay within Europe. At OpenRouter, which offers many models, about 70 percent of usage came from closed models at the end of last year. Now 70 percent comes from open models. China is considering restrictions, such as a licence or a ban outside China. Under the current plan, this does not apply to models that are already public. Read more →
Canva Craft: own image model with readable text
Canva has released its first own image model: Canva Craft, made by its own research team. It has to compete with models from Google, OpenAI, ByteDance and Meta. It works in two steps. First it reads your request and makes a plan with the position, size and text of each element. Then it makes the image, up to 2K resolution and in 30 aspect ratios for different platforms. According to Canva, this makes the details correct, the text readable, and lets you change one element without changing the rest. All users find Craft in the Dream Lab tab. The model is also coming through the Canva API. Canva also wants to make image generation possible in chatbots like ChatGPT and Gemini. Two cheaper versions, Craftfast and Craft-ultrafast, are coming soon. Read more →
In Canva, open the Dream Lab tab and have a social post with text made. Then change one element and check whether the rest stays the same.
AI and tech, made simple.
This is a sample of the Entrepreneurs edition. Subscribers get it in their inbox every week.
Subscribe
inklaretaal · Amsterdam · © 2026
This is the generic Entrepreneurs edition. Subscribe and you get it made to measure: tuned to your level, your job and the topics that matter to you. That way every week gets a little more personal.
Start for free