iPhone Duo Ships, Claude Duet Debuts, OpenAI Eyes $1.25T, PHP2Shell Patched: 16 Must-Know Startup and AI Stories (October 25, 2026)

AI startup news moved fast this week: Apple shipped its first foldable, Anthropic and Canva launched new AI products, and the private funding rounds got even bigger. This edition of our AI startup news roundup covers the launches app builders should know about, the money moving through the startup world, and the security and tooling stories that affect anyone running software in production. Here’s what mattered in the week ending October 25, 2026.

App & Product Launches

AI startup news - Positive focused multiracial coworkers gathering together near table with laptop in workplace at industrial building during remote work on team against big window at daytime
Photo by Andrea Piacquadio on Pexels

Apple’s iPhone Duo Arrives, and Developers Are Already Building for It

Apple’s foldable iPhone Duo went on sale October 23, with a 5.4-inch outer display, a 7.6-inch folding inner display, and the A20 Pro chip, starting at $1,999. Shipping estimates already run into January 2027. It’s the first of four straight Friday launches from Apple, according to Appleosophy, and early apps such as Flighty, TypeDraw, and Deck-Man show that layouts built for two screen sizes will be the new design challenge.

Anthropic Launches Claude Duet for Small Business Workflows

Anthropic released Claude Duet, an agent app built on Claude Opus 5.5. It can put together daily briefings, build dashboards, and run background tasks across more than 6,000 Claude Marketplace connectors. Pro and Max subscribers can join a research-preview waitlist on iOS, Android, and web. It’s aimed squarely at professionals and small teams, not consumers.

Canva Ships Craft, Its First In-House Image Model

Canva introduced Canva Craft, an image model trained on human-designed templates from its own library instead of photographs. It plans the layout before generating, outputs up to 2K resolution in 30 aspect ratios, and lets you make precise edits without disturbing the rest of the image. Faster “Craftfast” variants and API access are coming.

Arc Browser Will Shut Down December 22

The Browser Company is retiring Arc to focus on its AI-first browser, Dia. New Arc accounts are already blocked, mobile AI features end November 23, and desktop support ends December 22. Vertical tabs and workspaces will carry over to Dia. It’s a reminder that a product with loyal fans can still be cut when it doesn’t reach mainstream adoption.

Apple Opens Multiseat Subscriptions to Businesses and Schools

On October 22 Apple turned on multiseat purchasing in App Store Connect, so organizations can buy app subscriptions in volume through Apple Business Manager and Apple School Manager. It’s on by default for all auto-renewable subscriptions, and Group Purchases for individuals arrive this winter. For subscription apps this opens a B2B sales channel, and it’s a good moment to revisit whether you should put your prices on your website.

Startup & Tech Business

OpenAI Reportedly Raising $30B at a $1.25 Trillion Valuation

OpenAI is reportedly working on a raise of up to $30 billion at a $1.25 trillion valuation, led by Coatue and UAE investors. It would make OpenAI the most valuable private company ever. The round comes ahead of an IPO, after confidential filings in June. Reports put a possible Anthropic IPO valuation at $1.5 to $2 trillion.

Flapping Airplanes Quadruples Its Valuation in Nine Months

Year-old AI lab Flapping Airplanes raised a $1 billion Series A at a $6 billion valuation, co-led by Index and Lux. The lab is building data-efficient models that don’t need to “ingest half the internet.” It’s one of the clearest signs this week that investors are betting on efficiency, not just scale.

Daytona Hits Unicorn Status Building Computers for AI Agents

Agent cloud startup Daytona raised a $60 million Series B led by FirstMark Growth at a $1 billion valuation. Angels include leaders from Stripe, Shopify, and Perplexity. Founder Ivan Burazin describes the platform as “like giving every agent its own computer”: sandboxed operating systems and GPUs for long-running agents. Agent infrastructure is quickly becoming its own category of AI startup news.

DeepSeek Raises $15B Despite US Restrictions

AI startup news - Vibrant close-up of code displayed on a monitor with various programming details.
Photo by Muhammed Ensar on Pexels

Two days after the US ordered federal agencies to remove DeepSeek’s technology, the Chinese lab reportedly raised about $15 billion from backers including Tencent and CATL. We covered the ban itself in last week’s roundup. The round shows that Western restrictions aren’t slowing Chinese AI capital formation.

Carta and NewView Push Earlier Employee Liquidity

Carta and NewView Capital partnered to make tender offers easier, so startup employees can sell shares before an exit. Tender activity has tripled over three years at Series C and later. With companies “staying private for 12 to 15 years,” liquidity is becoming a retention tool for founders.

AI & Tools

Recursive’s Flint Brings an AI-Built Coding Model to Laptops

Recursive released Flint, a free coding model that runs locally. The company says it was largely built by its own AI research system, the “Eureka Machine.” Flint activates only 2.5 billion of its 40 billion parameters at a time and leads models under 50 billion parameters on real-world bug-fix benchmarks. It’s an early public example of AI-assisted model development, with humans still overseeing it.

1Password Lets AI Agents Log In Without Seeing Your Password

1Password launched a system that verifies an agent’s identity with a digital key, alerts you to the login attempt, and fills in credentials only after you approve. It supports Claude Duet, ChatGPT Work, and other assistants. The launch comes as banks report a surge in agent activity inside customer accounts.

PHP2Shell: Patch Your Servers Now

Two critical PHP bugs (CVE-2026-109618 and CVE-2026-109619), known together as PHP2Shell, let attackers take over servers remotely without authentication. PHP powers roughly 70% of websites, including WordPress. The PHP Foundation shipped patches on October 24, and TechCrunch’s breakdown advises checking logs for exploitation going back to October 17. If your host is slow to patch, see our guide on how to tell if your web host is bad.

Railway Urges All Users to Rotate Secret Keys

Developer platform Railway said attackers exposed encrypted environment variables containing API keys and passwords. It told all users to revoke and rotate their credentials, even though only some customers were directly affected. The attack appears linked to a wider campaign that uses malicious prompts against AI inference providers.

Uber Rolls ChatGPT Work Out to All 30,000 Employees

Uber expanded ChatGPT Work from a 1,000-person pilot to its entire workforce. Notably, 80% of early adopters were non-engineers, who used it for data analysis and localization. Uber is one of the largest enterprise AI deployments of the week.

Block’s Dessa Voice Model Sounds Strikingly Human

Block unveiled Dessa, a full-duplex voice model trained entirely on human speech. It can run locally on hardware like an M4 Max MacBook and produces natural laughs and pauses. Block is holding it back from the public while safety researchers evaluate the risks, an approach other voice AI teams may end up copying.

That wraps this week’s AI startup news. If you build or run apps, the two things to act on are patching PHP and rotating any exposed keys. We’ll be back next Sunday with more AI startup news.

Sources

Frequently Asked Questions

What was the biggest AI startup news this week?

OpenAI’s reported $30 billion raise at a $1.25 trillion valuation led the week, alongside Anthropic’s Claude Duet launch and Apple’s iPhone Duo release on October 23, 2026.

What is PHP2Shell and do I need to act?

PHP2Shell is a pair of critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow unauthenticated remote takeover of servers. Anyone running PHP sites, including WordPress, should install the October 24 patches and check logs for activity going back to October 17.

When does Arc browser shut down?

The Browser Company will end Arc desktop support on December 22, 2026. Mobile AI features stop November 23, and new accounts are already blocked as the company shifts to its Dia browser.

What is Claude Duet?

Claude Duet is Anthropic’s new agent app for professionals and small businesses. Built on Claude Opus 5.5, it creates briefings and dashboards and runs background tasks, and it’s available in research preview for Pro and Max subscribers.

How do Apple’s new multiseat subscriptions work?

Since October 22, 2026, organizations can buy multiple seats of an app subscription through Apple Business Manager or Apple School Manager. The option is enabled by default for auto-renewable subscriptions in App Store Connect.

Leave a Comment