Apple is bringing touch to the MacBook Pro. Google is making it easier for apps to work through Search and Gemini, and easier to check where an AI-filled spreadsheet got its information. Meanwhile, a website security story from last week now carries confirmed evidence of exploitation.
The most immediate action is for anyone responsible for a PHP-based website: confirm the security fixes with your hosting provider. The product announcements are worth exploring, but they call for a small, thoughtful trial rather than a rushed purchase or company-wide change.
This recap covers the seven days through 2:12 a.m. Eastern on October 30, 2026. Here are four developments and what I’d do with each one.
Apple’s touchscreen MacBook Pro is official
Apple announced new 14-inch and 16-inch MacBook Pro models on October 28, with a PROLED XDR display, touch support and M5 Pro or M5 Max chips. Orders opened that day; availability starts November 6. These are the newly announced Pro and Max models, so check the exact configuration when comparing machines.
Who should care: People planning a Mac replacement, including creative professionals and businesses with Mac users. Touch may be useful for some workflows, but it is one part of the buying decision.
My recommendation is to write down the job the new machine needs to do before comparing specifications. Does someone spend the day editing images, reviewing documents, presenting work or moving between several screens? Then test the applications, dock and external displays that person actually uses. This announcement alone does not establish compatibility with your setup.
A working laptop does not suddenly need replacing because its successor has a touchscreen. If replacement is already due, this gives you another option to evaluate.
Google wants more apps to work through Search and Gemini
On October 28, Google introduced a preview of its Connected Apps Platform. It gives developers a shared way to build and manage integrations for Search and the Gemini app. Access is opening in phases, with more developers and markets planned over the coming months.
Google also says integrations including Adobe and Peloton are live in Gemini, with Search support planned in the coming weeks. That does not mean every application your business uses is connected or available to your account.
Who should care: Business owners exploring AI integrations, software developers and people who use Gemini with other services.
The useful question is whether a connection removes a real repetitive step. For a hypothetical first trial, you might choose a low-risk task using information already cleared for that purpose. Before connecting an account, review what information the app can access and what actions it can perform. Keep a person responsible for approving anything that reaches a customer or changes a business record.
Our guide to AI-assisted shared inbox work offers a practical example of keeping that human review in place.
AI-filled spreadsheet cells are getting clearer sources
Google’s October 28 Workspace announcement says Fill with Gemini in Google Sheets now provides cell-level citations for web sources. The announcement also describes support for larger requests. The gradual rollout began October 20 and can take up to 15 days; availability depends on your eligible plan and enabled features.
Who should care: Teams using Gemini in Sheets for research and repetitive spreadsheet work. The citations make it easier to inspect where an answer came from. They do not make the answer automatically correct.
Imagine a hypothetical spreadsheet comparing three suppliers. A source link is useful only if it supports the value in that cell, concerns the right product and is current enough for the decision. Open the link and check those points before copying the answer into a proposal or purchasing decision.
I’d start with a handful of rows, compare the results with the sources and correct the instructions before expanding the task. That gives you a manageable way to judge whether the feature is helping.
The PHP security story now includes confirmed exploitation
Last week’s recap covered urgent PHP security fixes. On October 26, CISA added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation. That is the significant new development this week.
Who should care: Organizations whose websites or applications run affected PHP software, and the providers responsible for maintaining it. The announcement does not establish that your own website is affected or compromised.
Ask your hosting or website provider three specific questions:
- Does any part of our website or application use an affected PHP version?
- Has the appropriate vendor fix been applied to the runtime actually serving our site?
- If we were exposed, what investigation or follow-up does the current guidance require?
Updating website plugins is not an answer to a question about the underlying PHP runtime. Ask for a clear confirmation from the person who manages that layer. CISA’s binding directive applies to covered federal agencies; it also urges other organizations to prioritize these vulnerabilities. Do not mistake a federal requirement for a deadline imposed on every small business.
Four useful follow-ups for the week
| If this applies to you | Next step | Who should own it |
|---|---|---|
| A PHP-based website or application | Confirm affected versions, fixes and any exposure review | Hosting provider or application administrator |
| A planned Mac replacement | Test the real applications, dock and display setup | Purchaser and the person using it |
| A proposed AI app connection | Review permissions and choose one low-risk trial | Application owner and IT contact |
| AI-assisted spreadsheet research | Check source support on a small sample of cells | Person responsible for the final decision |
You do not need to act on every headline. Pick the items that match your setup, give each one an owner and ask for a clear result.
If you want help deciding which business systems need attention, explore our cybersecurity services or book a conversation with IT MGMT. Bring the question you are trying to answer, whether that is a website update, a device replacement or a sensible first AI workflow.