OpenAI is rolling out ChatGPT Images 2.5, its newest image generation model, and it brings a solid mix of speed and quality upgrades that should make your AI art sessions a lot less frustrating. People are already generating over 3 billion images every week across ChatGPT and the API, and this update is built to make that process faster and noticeably more accurate.

What makes Images 2.5 different?

The biggest wins here are sharper details, more natural lighting, and textures that finally look believable instead of plastic. The model is also much better at sticking to your reference photos, so if you’re turning a picture of yourself into a new scene or style, your face and features should stay recognizable instead of drifting into someone else entirely.

Editing gets smarter too. Ask for one change, like swapping a background or tweaking a product, and Images 2.5 should leave everything else alone. That consistency holds up across multiple rounds of edits, so your earlier tweaks won’t randomly get wiped out a few prompts later. And if speed is what you care about, generation is now up to 50% quicker than Images 2.0.

Sketch lets you draw your idea before AI finishes it

OpenAI added a feature called Sketch that lets you doodle your idea right inside ChatGPT, whether that’s a room layout or an outfit concept, and have the AI turn it into a polished image. Pair that with new templates for posters, flyers, and product shots, along with the option to leave comments directly on images for more precise edits, and you get a lot more control without needing any design skills.

People can also share the exact prompt behind an image now, so if someone creates something you love, you can recreate it using your own photos and details. On the developer side, OpenAI is also launching GPT-Image-2.5 Flare and Sunburst in the API, bringing the same speed and quality gains to apps and products built on top of it.

Images 2.5 is live now for all ChatGPT, ChatGPT Work, and Codex users across desktop, mobile, and web.

security

Adobe also brought goodies to the patch party and they deserve immediate attention

The vulnpocalypse is upon us, dear reader. Microsoft delivered a record number of patches to address 974 CVEs in its own products this month, including two bugs that Redmond says are already under exploitation.

September’s record-breaking collection of security updates come after Microsoft served up 421 fixes in August, and 622 in July. We’ve seen the new normal and we are not impressed. Thanks, but no thanks, AI. 

In addition to Microsoft’s massive patch drop, Adobe on Tuesday issued 10 bulletins addressing 172 CVEs, including a max-severity vulnerability exploited as a zero day in Magento and its successor product Adobe Commerce. Adobe on Monday shipped a hotfix for this one, tracked as CVE-2026-75650 and named StyleSmuggler, that gives unauthenticated attackers remote code execution. 

StyleSmuggler

If your organization has any type of online shop, prioritize this one first as it’s already being abused to compromise stores, according to e-commerce security shop Sansec.

Sansec discovered StyleSmuggler, and reports that attacks started on September 4. Every version of Magento and Adobe Commerce, from 2.4.4 up to and including 2.4.9, has the flaw. 

The bug allows attackers to inject malicious PHP code inside Magento templates using the “styles” properties to evade safety detections. In confirmed attacks, the payload then installs a backdoor that connects to a command-and-control server and waits for instructions. “So far, we have no indication that the backdoor has been weaponized,” the Sansec Forensics Team wrote.

Don’t wait to find out on this one. Put it at the top of your mitigation list.

Microsoft’s 974 CVEs

On to Microsoft’s record-breaking 974 CVEs, which according to Tenable is not many fewer than the 1,130 CVEs Redmond issued in 2025.

Two are already being exploited as zero-days.

First up: CVE-2026-85880, a privilege escalation bug in Windows Advanced Local Procedure Call (ALPC). Successful exploitation can result in the attacker gaining SYSTEM privileges.

“An attacker who can execute code in a low-privilege AppContainer could exploit this vulnerability locally to escape the sandbox and elevate privileges on the affected system,” Redmond warned. “No additional user interaction is required.”

No word yet on who is exploiting this bug, and to what end. The US Cybersecurity and Infrastructure Security Agency on Tuesday added CVE-2026-85880 plus a second Microsoft security hole (and the Adobe Commerce and Magento zero-day) to its Known Exploited Vulnerabilities Catalog, and set a September 22 deadline for federal agencies to fix both new Microsoft bugs and a September 11 deadline to patch the Adobe flaw.

The second Microsoft bug found and exploited as a zero-day is CVE-2026-81963, another privilege escalation vulnerability. This one affects the Windows Update Stack. We also have very little detail about this flaw, other than it also allows attackers to gain SYSTEM-level access.

“More likely is that this bug is being combined with a code execution bug to spread malware or ransomware,” opined Zero Day Initiative’s Dustin Childs, who advised users to “Patch this one quickly.”

While those are the only two (so far) under active exploitation, Childs rated CVE-2026-55007, one of nine Exchange Server flaws disclosed this month, as “the most important” patch for the messaging server. 

It allows a remote, unauthenticated attacker to execute code on a vulnerable Exchange server by sending an email with a malicious Visio attachment. No user interaction is required, and the code executes when the server processes the attachment during content indexing.

Redmond says it’s “difficult to reliably trigger,” but as Childs points out: “The attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.”

Childs also said he counts 20 patches for wormable bugs, so be sure to read his full Patch Tuesday review for those. “While some might be more exploitable than others, having 20 of them in a single release is something else.”

The missing CVE

While Redmond addressed nearly 1,000 security holes this month alone, it’s also worth pointing out one that isn’t this month’s Patch Tuesday roundup: CVE-2026-85046. Google patched this bug in Chrome on September 3, and at the time warned that it “is aware that an exploit for CVE-2026-85046 exists in the wild.”

The high-severity, type confusion flaw exists in the V8 JavaScript engine used in both Google’s Chrome and Microsoft’s Edge browsers. And yet Microsoft still hasn’t published a security advisory for CVE-2026-85046.

“If you’re patched, you are protected, but if you rely on advisories to know which vulns exist, you could miss this zero-day vulnerability altogether,” Adam Barnett, lead software engineer at Rapid7, told The Register.

“A patch without an advisory is perhaps marginally better than an advisory without a patch, but keeping track of exposures without reliable advisory materials is not straightforward,” Barnett said. “Chrome patched 11 other vulnerabilities at the same time as CVE-2026-85046, but it’s not yet clear if those are patched in Edge. Until Microsoft sets the record straight, the only safe assumption is that these vulnerabilities (e.g. CVE-2026-85045) remain unpatched in Edge.” ®

Alison J Derbenwick-Miller of the Association for Computing Machinery explores how, in a time of transformation, computing can be a significant force for good.

Deciding what you want to do with your future is no mean feat and often, when you are navigating your post-secondary education you can find that the subjects and career routes you envisioned are no longer aligned with your current interests. 

This was the case for Alison J Derbenwick-Miller, the CEO and executive director at the Association for Computing Machinery. During her senior year of university she happened to take a graduate level course on constitutional law and society, sparking an as-of-then undiscovered interest in how law and legal theory interact with social systems.

She told SiliconRepublic.com, “I ended up abandoning my initial plan to pursue a PhD in Soviet History to explore a potential career in law. My first post-college job was as a legal assistant at Oracle. 

“This was in the early 1990s, just as computing was becoming increasingly important in industry and society and I quickly realized that understanding the intersection of law, technology and society would be essential to shaping the future. 

“At the same time, I was struggling a bit with an internal need for my work to have meaning and do good in the world, which I sometimes found difficult to reconcile with the realities of working in a fast paced, for-profit industry.”

Eventually, she found herself in a graduate course, studying intellectual property law and public good and soon moved on to roles in Oracle’s philanthropy organisation and at the Association for Computing Machinery (ACM), which is reportedly the world’s largest educational and scientific computing society. 

She added, “That same desire to use technology in service of the public good is part of what drew me to ACM, whose global community works to advance computing as a science and profession and to ensure it benefits society.

“I built a career around pursuing things I cared about, seeking intellectual challenge, and learning to build sustainable organisations that prioritise the greater good.”

Building a better world

That is an element of her work that particularly motivates her, especially in a global landscape where “we’re facing unprecedented challenges and opportunities, and increasingly powerful computing and emerging technologies are giving us new ways to address them”. 

She added, “AI is an obvious example of this, but there are other very exciting advances happening across disciplines and industries in areas like quantum computing, advanced robotics, renewable energy innovation, genomic sequencing, and more.”

Derbenwick-Miller believes that the computing community, now more than ever before, has the power to create, innovate and be responsible for the kind of work that benefits humanity. 

She said, “That’s one of the reasons I’m so excited to lead ACM. Our organisation brings together researchers, practitioners, educators and students who are helping shape how computing develops and how it serves society now and into the future. I believe there is enormous potential in what that community can accomplish together.”

Staying skilled

But how can one person stay skilled enough to operate consistently at the intersection of research, education, professional development and scientific collaboration, when each moves at near lightning speed?

A self-confessed “endlessly curious, geeky generalist”, Derbenwick-Miller explained that a love of learning new things has kept her skilled and ready in a transforming landscape. 

She added, “I love talking with experts and working with really smart teams and I thrive on solving knotty and wicked problems. I’m never afraid to ask questions, and I enjoy thinking at a systems level to figure out how to best change or improve the bigger picture. 

“Ultimately, I think working at the intersection of any set of disciplines, fields, or industries is less about developing specific skills and more about how you approach learning and problem solving. Be curious. Be humble. Listen and communicate authentically and well.”

Cohesion and teamwork

Strong team leadership and a commitment to partnerships is also critical to maintaining a skilled and productive environment in computing. Derbenwick-Miller explained she once worked in an organisation that held the mantra ‘great people do great things’ and it has stayed with her all of her career. 

She said, “Leading is not about telling people what to do or how to do it. It’s about creating a collaborative and respectful culture, having a vision, setting clear goals, respecting what each person brings to the table and empowering the people around you to do what they do best to achieve those goals. 

“In a dynamic environment, being transparent and open about what is known and what is not helps create confidence and flexibility within the team to test, learn, adapt and iterate. The path to the vision may change, but the vision remains the north star that enables collaborative action.”

And this is all bolstered by the establishment of impactful partnerships across academia, industry and government, “at all levels, not just at leadership levels”.

Derbenwick-Miller said, “In many ways, computing technologies don’t recognise boundaries and borders and actions can have far-reaching and unintended outcomes. 

“This makes it difficult to act with lasting success within one’s own silo. It also presents a huge opportunity to develop deeper understandings of the needs of others and to imagine and build solutions that benefit more people more efficiently. 

“The more we can develop collaborative relationships and communities across sectors, the more we will understand each other and the more good we can do.”

For the people working within these close communities it is also critical that you understand your own limitations so that you can make use of the wider collection of shared skills and knowledge. 

“Even within close communities, we don’t always understand things the same way, use the same words the same way, or have aligned goals and incentives. It’s all too easy in today’s busy world to get focused on our own projects and to limit what we do, see and hear to what is easiest, most recent, or closest to what we already think. 

“Across the computing ecosystem, we have to build trust, work to understand where we can align and where we must act independently and maintain and foster the ability to communicate openly and honestly.

“We are living in a time of transformation and computing can be a force for tremendous good with a vital role to play. I’m honoured to be part of the computing community and ACM at such an exciting time, with the advent of generative AI, quantum computing, advanced robotics and smart health tech at a scale we’ve never seen.”

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Sometimes founders search high and low for the right startup idea, while other times it comes to them. Federico Felici and Jonas Buchli are two of the lucky ones.

Over and over again, they heard the same thing from fusion companies: “We would ideally buy many of the components to make our our control system, but there isn’t really anybody providing them — and especially there isn’t anybody who speaks the language of fusion,” Felici told TechCrunch.

For years, the two founders have worked to develop new ways to control experimental fusion devices. “We spent quite a lot of our time solving exactly the problems that our customers need to solve,” he said. “It felt like the right time.”

To capitalize on the opportunity, Felici and Buchli founded Lausanne-based Fusionality this year and quickly raised a $3.7 million (CHF 3 million) pre-seed round from Founderful and Playfair. Felici serves as the company’s CEO, Buchli its CTO.

Fusionality is part of an emerging supply chain that has popped up to serve the burgeoning fusion power industry. Some startups, like Kyoto Fusioneering, are developing components that will help fusion startups turn their engineering breakthroughs into electricity for the grid, while others are existing manufacturers with the skills required to turn out high-precision parts.

Yet few companies specialize in the hardware and software required to control the fusion reactors themselves. “Across the industry, many companies make their own control systems from scratch,” Felici said. “But actually, 80% of each company’s control system is really exactly the same.”

Fusion power plants generate electricity by harnessing the energy released when two atoms fuse, which is more likely to occur in a superheated plasma. But plasmas are fickle, and maintaining the proper temperature, shape, and fuel level requires split-second decision-making. 

The control systems used to maintain those conditions are complex to develop and deploy, but much of the fundamental physics is consistent across reactor designs. Fusionality plans to build off that commonality to develop a suite of control systems and simulation environments which startups can then fine-tune to work with their specific design.

Felici and Buchli met while teaching AI to control an experimental tokamak — a donut-shaped device researchers use to study fusion power. Felici was working at EPFL in Switzerland, which houses one such tokamak, while Buchli was working at Google DeepMind. Later, Felici moved to Google DeepMind, where he developed simulations and machine learning interfaces for fusion devices.

Felici said AI will “play an important role in future control systems,” but that it’s not quite ready to tackle the entire challenge. “I wouldn’t be somebody who advocates for AI to take the role of controlling the entire fusion reactor,” he said. Today, AI is more likely to “complement or enhance or optimize” parts of the system, he added.

For now, Fusionality is focusing on a branch of fusion power known as magnetic confinement, an approach that uses powerful electromagnets to keep fusion fuel dense enough and hot enough to feed a power plant. Commonwealth Fusion Systems, Realta Fusion, Proxima Fusion, and Type One Energy are examples of startups developing magnetic confinement devices. Eventually, the company will develop systems for other approaches, Felici said.

Fusionality’s pre-seed funding will help the team, currently seven strong, develop a “tightly selected number of technologies,” Felici said, though he declined to specify which. He likened them to Lego blocks. “We start with a few of these blocks and then we build out more,” he said. “We have the ambition to serve the really wide range of technology that you need to operate a fusion reactor.”

When I’m piloting a big robot in a video game, I want it to have a big personality and an even bigger punch. After playing an hour of Gundam: Rogue Orbit, it seems the game will have both. But there’s still a lot to discover about Bandai Namco’s next entry in the giant robot franchise, due out March 5, 2027.

My virtual preview offered two missions and three premade mobile suits (the franchise’s name for the piloted robots) to choose from. The hour was enough to run through both stages with all three mobile suits, each equipped with a different melee weapon. One stage was an enemy gauntlet ending in a miniboss, while the other was a full-fledged boss battle. In the final game, you’ll be able to customize your robot kits, but we didn’t see that functionality because Bandai Namco wanted us focused entirely on the gameplay.

One thing was clear: This isn’t another Armored Core copy. While I loved 2023’s Armored Core 6: Fires of Rubicon, its dizzying array of parts and weapons could be a chore to optimize for the game’s blindingly fast, three-dimensional combat. From what I saw in the preview, Rogue Orbit takes a different, simpler approach. Forget about the Z-axis; just worry about jumping and dashing around, as in most modern melee action games.

True, I had to suspend my disbelief that my mobile suit was hopping around with normal-feeling gravity on the outside of a space station, but I’m betting this trims away a lot of zero-g bother to avoid the awkwardness of floaty jumps. 

Unlike other mech games filled with long-range beam cannons and missiles, Rogue Orbit’s fights seem constrained to melee range only. Whether that was the result of our preview being limited to a trio of mobile suits with swords, lances and whips, or reflects the whole game, I didn’t mind. Ranged combat was limited to support equipment, like a set of orbiting drones that fired when I dashed.

Throughout the preview, I ran across space stations cutting and stabbing through an assortment of enemies, using different skills tuned to my weapons. The sword got a rad slash with trailing explosions, while the whip could be uncoiled for slightly longer-ranged swipes and the lance got a drill-dash to reposition my mobile suit. The combat felt polished, even with half a year to go before the game’s launch, with every attack triggering a momentary pause on contact — a satisfying touch that let me relish the damage I was dishing out and savor my assortment of rad skills.

Ultimately, Rogue Orbit’s combat gameplay felt like Dynasty Warriors or Virtual On (without the twin stick controls), using special skills until my ability gauge ran out and peppering in normal attacks until it charged back up. I had an ultimate attack as well, which, in the preview, gave me unlimited dashes for a limited time until I pulled the ability’s trigger, sending a volley of beams lancing down at my target. In the full game, players will be able to switch between different ultimate attacks.

The short preview was more a tease than a dive into the complexities of the game, and it sure was fun to pummel foes with something that looked like a mobile suit. But the big question I left with was: Does this feel like a Gundam game yet?

How much Gundam is there yet to discover in Rogue Orbit?

Given the brevity of the preview, I didn’t expect to get much context about the characters or plot. Like most latter-day Gundam media, Rogue Orbit is set in a new universe, so don’t expect to see anything from the Federation or Zeon of the original Universal Century setting. Haro, the friendly green, ball-shaped droid from the first Gundam show, does appear in the marketing. (I’m also praying that a masked, Char Aznable-like character will show up, a recurring feature of the franchise.)

From details dropped in the recent trailer and the preview, players will control RE-X, a seemingly human male who was “created” to control a Gundam, the franchise’s special category of humanoid robot mobile suits (his is called Gundam Helix). There are a few other characters in your ship’s crew, including the commander April and the heroine Sophia, who will accompany you. 

Where many Gundam shows and media lean into a political clash between factions of humanity and their armadas of mobile suits, Rogue Orbit seems to be setting up a xenomorphic threat. The enemies I attacked in my preview all seemed organic and monstrous rather than mechanical. While the skulduggery and power clashes result in some of the best conflicts and themes in Gundam, centering Rogue Orbit on a humans-versus-aliens threat (or enemies looking like aliens) opens the door to some intriguing opportunities — by which I mean, huge fantasy-esque bosses that aren’t mechanical Mobile Armors.

At the end of the first mission on the space station exterior, I was clashing with an ogre-like humanoid mini-boss labeled The Giant, who had his own health bar and stagger meter. Similar to other games with those features, once I whittled the latter down enough, the mini-boss went down for a few moments to let me get a few hits in. When I whacked a limb enough, it became disabled, limiting the boss’s attack capabilities.

The second mission was entirely set around confronting a massive alien dragon called the Drake, which took awhile to wear down. In addition to dodging swiping claws and avoiding strings of beams, the Drake has a tail and wings I could hit hard enough to break to temporarily disable some of the meaner blows of the scaly boss. Neither mission was too difficult and I finished both multiple times, but during the preview I only had the three premade kits and no additional difficulty levels to try out. 

From what little I saw, there’s a lot waiting for action-combat fans, though there’s plenty of mechanics, kit customization, story details and encounter complexity left to be revealed about the game. I’m still on the fence for how “Gundam” it may end up feeling in the long run, but the combat’s polish is promising — and enough to have me looking forward to when I can climb into the cockpit again.

Gundam: Rogue Orbit will release on March 5, 2027 for PC, Xbox X/S and PS5.

David Lumb

Managing Editor, Mobile

David Lumb is a managing editor for the mobile team, covering mobile and gaming spaces. Before CNET, he covered tech, gaming, and culture for TechRadar, Engadget, Popular Mechanics, NBC Asian America, Increment, Fast Company and others. As a true Californian, he lives for coffee, beaches and burritos.

See full bio

Advertisement

When a rocket launches a payload into orbit, the overwhelming majority of its weight at launch is just fuel. After decades of space travel, a company called Longshot Space hopes to unlock a more efficient way to launch satellites into orbit.

The plan: Shoot satellites into space with the world’s biggest gun. To accomplish this, Longshot is designing its cannons to accelerate payloads using compressed gas. Unlike regular guns, which use one sudden burst, Longshot uses multiple bursts of gas to accelerate its projectiles through a barrel that, in its final form, will be miles long.

Launching satellites this way also requires satellites capable of withstanding the shock. The company believes it is possible, but indicates that traveling by gunshot is probably not feasible for sensitive cargo, especially human beings.

That didn’t stop our contributor Andy Altman from climbing inside the barrel of one of these guns. To see his in-depth tour of Longshot Space, check out the video in this article.

Jesse Orrall

Senior Video Producer

Advertisement

Jesse Orrall (he/him/his) is a Senior Video Producer for CNET. He covers future tech, sustainability and the social impact of technology. He is co-host of CNET’s “What The Future” series and Executive Producer of “Experts React.” Aside from making videos, he’s a certified SCUBA diver with a passion for music, films, history and ecology.

See full bio

When we benchmarked DLSS 5 across the entire RTX 50 series last week with no frame generation inflating the charts, the numbers were bleak enough on their own. An RTX 5090 fell from 192 FPS to 76 FPS at 4K. An RTX 5060 Ti dropped from 129 FPS to 46 FPS at 1440p.

But another key detail was that enabling upscaling brought back a mere 9% in performance, and that’s because DLSS 5’s neural rendering pass runs after upscaling, on the final output frame, so its cost scales with your monitor’s resolution rather than your render resolution. It’s taking the modding community less than two weeks to produce two independent attacks on that problem, with caveats. One moves the neural pass earlier in the pipeline. The other moves it off the graphics card entirely.

Running the neural rendering before the upscaler

The first is Neural Upstream, a ReShade add-on now installable through the DLSS5-Autopilot tool. The idea is a single reordering: instead of render > DLSS Super Resolution > neural rendering at output resolution, it does render > neural rendering at render resolution > DLSS Super Resolution > output.

Because the neural network only enhances a frame and never upscales it, running it on the smaller image is where the saving comes from. At 4K with DLSS Quality, the model chews through roughly 2.7 million pixels instead of 8.3 million.

The numbers posted to r/nvidia are striking – even if they don’t represent the Nvidia’s original take on DLSS 5, it’s all about experimentation at this point: on an RTX 4080 in Assassin’s Creed Shadows at 4K the feature’s cost dropped from roughly 32 FPS to 13 FPS, making the upstream route around 61% faster. Testers have since reported similar behavior in Stalker 2, Cyberpunk 2077, and GTA V Enhanced. OptiScaler has an experimental feature doing something comparable through its own hooking system.

The catch is obvious though. If you feed a neural network less image data, then you get less out of it. Nvidia almost certainly placed the pass last because that’s where fidelity is best, and DLSS 5 already has an uncanny-valley problem it could not afford to make worse.

Take two: Give neural rendering its own graphics card

The second approach comes from Marcelo Guibout who published MGPU Bridge, a ReShade add-on that renders the game on one GPU and executes the neural pass on a second one.

Neural rendering is a terminal stage, so it takes a finished frame and hands back a finished frame. Nothing about it requires the same device that drew the frame. Let’s not forget the first time Nvidia showcased DLSS 5, it was way less optimized and it took two RTX 5090s to run properly, with a single card dedicated to neural rendering.

Measured on two RTX 5060 Ti 16GB cards in The Blood of Dawnwalker at 1080p:

The neural stage takes 35% to 60% of the frame rate when it runs on the render card, and 0% to 17% when it runs on the other one. The render card also ran 21 °C cooler with the load moved off. The comparison people keep reaching for is the old dedicated PhysX card.

The asterisks are substantial, however. MGPU Bridge requires two GPUs and two monitors, one per card, because the neural output is displayed by the card that produced it. Image quality may not be exactly the same as the original DLSS 5 pipeline, too. However it does present the question/idea that an official way to do this in two GPUs would be interesting (albeit very expensive proposition in this state of the GPU market).

Everything else, bundled for RTX 20, 30 and 40

Running parallel to modders’ performance work is compatibility work, which has reached the point where somebody had to build an installer for the installers. DLSS Unlocked, from developer ShyVortex, combines OptiScaler_DLSSNR with DLSS Enabler to deliver neural rendering and multi-frame generation on Turing, Ampere and Ada, on both Windows and Linux.

On RTX 20 and 30 cards, every generated frame comes from AMD’s FSR 3.1 rather than Nvidia’s pipeline. On RTX 40, the first generated frame goes through DLSS-G and the rest are handed to FSR 3.1. You supply your own patched DLSS 5 DLL, which the project won’t distribute for legal reasons.

A must-have warning with all this DLL injection… keep it away from anything with anti-cheat, and be careful where you source DLLs from after the malware warning DLSS Swapper’s creator issued earlier this year.

Disclaimer: Unless otherwise stated, any opinions expressed below belong solely to the author. All figures come from official and public sources.

The controversy over Air India’s performance, which weighs on its shareholder, Singapore Airlines, has dominated the media over the past few weeks. This issue has even sparked political controversy and accusations of racism, following comments posted by angry netizens on the Internet.

But as many people are questioning Temasek’s (which owns half of Singapore Airlines) investments in India, I thought it would be good to remind people just how important—and profitable—the country has been for Singapore.

Here’s a headline from a story published by CNBC three weeks ago, about the blowout performance of Temasek’s recent investments, which have just entered public trading in the stock market:

Today, nearly a month later, the three stocks have only increased their gains, with Molbio Diagnostics and Shiprocket trading at a +40% premium, while Milky Mist Dairy Foods is up by nearly +100%.

But these are just recent successes.

Last year, Temasek realised one of its largest exits in the country when it sold its 35% stake in Schneider Electric India for a whopping S$8.18 billion, after buying it for around S$860 million in 2020. That’s a nearly 10x return in just five years.

It’s easy to understand, then, when Temasek’s spokesperson told CNBC:

“India is our best-performing market on a 10-year basis.”

The country accounts for just 7% of Temasek’s S$518 billion portfolio, but it is certainly going to attract more money in the coming years, given how well it is paying off.

However, some of the longest-running—and most successful—investments started more than 25 years ago, when Temasek-owned Singtel purchased a stake in Airtel, which is now India’s second-largest telecommunications company.

Singtel is almost an Indian company

Today, Singapore’s dominant telecom is worth around S$73.5 billion, making it the fourth-largest company on the Singapore Exchange by market capitalisation.

But its high value does not come from local operations—the city-state is far too small to generate enough business for a telecommunications company of this size.

You see, Singtel also owns shares in similar companies abroad, including 26.9% in Indian Bharti Airtel, which serves 360 million customers in India, and another 160 million in Africa.

That stake is now worth S$41.7 billion on its own. It is equal to 56.6% of Singtel’s entire market cap.

This means that more than half of Singtel’s current value comes from its prudent investment in India, which started in 2000 and has cost the company a bit over S$5 billion since then.

This shows why India is so important as a destination for Singaporean capital.

There’s a limit to returns on investments made within Singapore. A country of 6 million people cannot produce multibillion-dollar enterprises that are focused on the domestic market. They have to seek opportunities abroad early or risk stagnation.

India is the largest developing economy in the world. It needs expertise, and it needs money—things that Singapore has in abundance.

Those investments aren’t always easy, and the road may be bumpy occasionally, but many of them have already paid off big for Temasek, eventually making their way into the national budget through the National Investment Returns Contribution, which is currently approaching S$30 billion per year.

• Read other articles we’ve written on Singaporean businesses here.

Featured Image Credit: Getty Images

Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold.

It was only two months ago that Microsoft patched a then-record 570 vulnerabilities. Then, last month, Microsoft patched some 620 of them. Google and other companies have also published record numbers of vulnerabilities in recent months. Two weeks ago, OpenAI, Anthropic, Amazon Web Services, Google, Microsoft, and 100 companies and organizations published an open letter warning of a narrowing window for patching vulnerabilities ahead of an expected tsunami of AI-enabled attacks that actively exploit them first. The industry is taking the threat seriously by pumping out unprecedented numbers of patches in their software.

Welcome to the new normal

Dustin Childs, a researcher at the Zero Day Initiative, calls the spikes the “new normal” and also cautions that despite them, the damage that’s likely to result from AI-assisted attacks could eventually be substantial.

“On the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate,” Childs wrote Tuesday. “On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits—yet.”

Counting the precise number of vulnerabilities fixed in a monthly patch release for Microsoft is never an exact science. In some cases, the bugs were previously addressed or affected non-Microsoft products. By Childs’s count, Tuesday’s release patches 972 vulnerabilities, and 997 when counting the porting of fixes for the Chromium browser incorporated into Edge. Of the new vulnerabilities, 112 of them are rated critical, with the remainder carrying the important designation. Already this year, Microsoft has fixed 2,760 vulnerabilities, more than double the number from last year. At this rate, Microsoft will complete the year having fixed more bugs than all of 2023, 2024, and 2025 combined.