AIOSEO fix, Firefox 158 JPEG XL and ChatGPT’s new sources

SAP fixes CVSS 10 flaw CVE-2026-89111 in its Cloud SDK for Python

SAP’s October patch day fixes 20 flaws, and one has the top score of CVSS 10. CVE-2026-89111 is in the SAP Cloud SDK for Python, which people use to build apps and AI agents on SAP BTP. An attacker with no login can steal OAuth2 client credentials.

The attacker abuses the tenant_subdomain value to send token requests to their own server. SAP also fixed critical flaws in NetWeaver Visual Composer (CVE-2026-89110) and Manufacturing Integration and Intelligence (CVE-2026-89108). The report does not say any of them are under attack yet.

Why it matters Attackers love SAP. CISA has listed 14 SAP flaws as exploited since 2021. If your apps use the SDK, install SAP’s fix now. If you can’t, check tenant_subdomain against an allowlist of your own tenants before any SDK call.

Read the full story on BleepingComputer

Firefox 158 adds JPEG XL images and CSS typed arithmetic

Firefox 158 came out on 13 October. It can now show JPEG XL images, which usually compress better than WebP, JPEG and PNG. In CSS, calc() now lets you multiply and divide units.

There is more for developers. The Notification navigate option sets the page that opens when someone clicks a notification. WebAuthn conditional UI now works with autocomplete="webauthn" on its own. PerformanceResourceTiming.deliveryType can now report cache, and scrolling is smoother on high-resolution screens.

Why it matters Smaller images load faster and help your Core Web Vitals. JPEG XL does not work in every browser yet, so serve it inside a picture element with a fallback.

If LCP still confuses you, my guide to Core Web Vitals in plain English explains why image size matters so much.

Read the release notes on Firefox

Meta launches Muse Wonder, its first frontier AI model

Meta released Muse Wonder and Muse Wonder Full on 12 October. They are Meta’s first frontier models, built for harder jobs like coding. Meta’s model card says they score close to Fable 5.1 and GPT-6 Astra on benchmarks.

Muse Wonder costs US$4 per million input tokens and US$20 per million output tokens through the Meta Model API. Muse Wonder Full is only for Muse Code subscribers. Meta is pushing “active memory”, the model’s ability to remember things about you over time.

Why it matters Another strong model means more choice and more pressure on prices. If you build AI features, add it to your test list and compare it with what you use now.

Read the full story on TechCrunch

Gemini 4 Argon now powers AI Mode in Google Search for paid users

Google is rolling out Gemini 4 Argon in AI Mode in Search, around the world. It is for Google AI Pro and Ultra subscribers. Google says it handles multi-step tasks better and follows instructions better in a conversation.

Argon arrived in the Gemini app about two weeks ago. Google’s Robby Stein said it “brings big improvements” for multi-step tasks in AI Mode.

Why it matters AI Mode is getting better at long, detailed questions. Clear pages that answer real questions in full have the best chance of being used and cited.

Read the full story on Search Engine Roundtable

ChatGPT now cites original sources more, Ahrefs data shows

ChatGPT is citing more primary sources and fewer sites that summarise them. Ahrefs compared millions of US ChatGPT answers from March and September 2026. PubMed rose from 64th to 4th, while WebMD fell from 18th to 79th.

Reddit was cited in 19.1% of answers in March, but only 2.3% in September. Wikipedia fell from 14.1% to 2.9%. Only 14.4% of free, logged-out answers searched the web at all.

Why it matters Rewriting other people’s content is losing value in AI answers. Original research, your own testing and real product facts are what get cited. Ask ChatGPT about your main topics and note who it cites.

My post on how AI search finds your site covers the technical side, so the bots can reach that original work.

Read the full story on Search Engine Journal

Bing Webmaster Tools adds a Topics Portfolio to its AI report

Bing Webmaster Tools has a new beta feature called Topics Portfolio in its AI Performance report. It groups the AI grounding queries where your site appears into broad topics. It only shows up when Bing has enough data for your site.

Each topic shows its size, how many sites get cited and how many queries it covers. A “Top Opportunity Queries” list shows queries where other sites get cited but yours does not. There is no click data yet.

Why it matters Few tools show you where AI answers skip your site. That opportunity list is a ready-made content plan, so check it this week.

Read the full story on Search Engine Roundtable

AWS Lambda Web Functions run normal web apps with no rewrite

AWS has launched Lambda Web Functions, a new way to run normal HTTP web apps on Lambda. Your server listens on a port, so the same code runs on your laptop and on AWS. Express, Hono, Fastify and Next.js all work.

Each environment can handle up to 128 requests at once. You pay for the CPU time your code uses, so waiting on a database costs very little. At launch it runs Node.js 24 on Arm in five regions, including Tokyo but not Sydney.

Why it matters Moving an existing Node app to serverless just got much easier. Australian sites should test the speed from Tokyo, or wait for a Sydney region.

Read the full story on the AWS News Blog

Apple’s HomeView smart display costs US$299 and ships 13 November

Apple’s “Welcome home” event brought three new products. HomeView is a 7-inch square smart display with Siri AI, for a table or a wall. It costs US$299 and ships on 13 November.

The new Apple TV 4K has an A19 chip, Wi-Fi 7 and three microphones for hands-free Siri. It costs US$299 for 128GB and also ships on 13 November. The HomePod mini 2 costs US$149 and arrives on 30 October. HomeView will not be sold in the EU. Apple says it launches in eight countries, but the reports I read don’t name them.

Why it matters Apple wants a Siri screen in every kitchen. Some AI features need a paired iPhone or iPad with Apple Intelligence, so check what you own before you buy.

I like that HomeView can dim to 0.3 nits for a bedroom. The jump in Apple TV price is harder to love.

Read the full story on MacRumors