Tech news, 4 November 2026: a kill switch for AI agents, AMD's data centre surge, BTCPay hot wallet thefts and Android's zero-click fixes

1. CrowdStrike launches a kill switch for rogue AI agents

CrowdStrike announced an AI Kill Switch on 3 November that lets administrators stop a misbehaving agent, block it from restarting on targeted hosts and cut its network access; the first version works through connected AI gateways by cutting the agent's access to its models, with broader containment across its platform still to come¹. CNBC reports a person still decides when to cut an agent off and when to restore it, and that CrowdStrike also agreed to buy two AI security start-ups².

CTO take: this confirms where agent control belongs: at a gateway between agents and models, with identity per agent and a clear way to stop one. Whether or not you buy a product for it, you need those three things before agents run in production. See why an AI gateway matters and when agents become the user.

2. AMD's data centre revenue nearly doubles

AMD reported record third-quarter revenue of about $13.4 billion on 3 November, with data centre revenue up 97% year over year to a record $8.5 billion, and guided to about $17 billion for the fourth quarter³.

CTO take: a credible second source of AI accelerators is good news for buyers' negotiating position and capacity planning. Keep your serving stack portable across hardware, for example with vLLM and Kubernetes device abstractions, so you can benchmark and switch; see the AI memory squeeze and DRA for GPU scheduling.

3. Attackers drain hot wallets on outdated BTCPay Servers

Attackers have been draining Bitcoin and Litecoin hot wallets on BTCPay Server installations running version 2.4.1 or earlier; a fix shipped in 2.4.2, and BTCPay told operators running hot wallets to shut down affected servers⁴⁵. The exact vulnerability behind the latest thefts had not been published at the time of writing⁵.

CTO take: self-hosted payment software is only as safe as its patch level. If you run it, update, keep only operational funds in hot wallets, rotate credentials and move funds to new wallets if in doubt. The same money-path principles apply as in the Binance lessons.

4. Android's November update fixes zero-click remote code execution

Google's November 2026 Android security bulletin includes critical remote code execution flaws that need no user interaction, affecting Android 14 to 17, along with a denial-of-service bug dubbed "SMS of Death" that can drop calls; reports say the bulletin does not list any issue as exploited⁶.

CTO take: make sure company-managed devices pick up the November patch level quickly, and set a minimum patch level for apps that handle money or health data. For bring-your-own-device fleets, enforce the minimum through your device management policy.

What I'd do this week

• Check that every AI agent in production has its own identity, goes through a gateway and can be stopped.
• Update BTCPay Server if you run it, and reduce hot wallet balances.
• Push the November Android patch level to managed devices.
• Ask accelerator vendors for quotes on more than one platform before your next hardware order.

See where I work, or analyse your challenge and bring the result to a call.