Today’s best stories are about trust that was assumed, then tested. Polymarket’s volume numbers look different once you check who was trading, and even Benchmark says a venture norm can no longer be counted on.

1. The October Windows update may be breaking networking, with NTLM the suspect

The Register reports that some people are seeing networking problems after the October 2026 Windows update, and that NTLM, the legacy authentication protocol, might be to blame.

That headline is all the supplied text gives us. The page content was only a list of other stories, with no affected versions, no error details and no workaround. We can’t say whether Microsoft changed NTLM behavior by default, or how many organizations are hit.

The practical step is modest: if authentication or file-share failures started after patching, check NTLM first and read The Register’s full report before rolling anything back.

The Register

2. Polymarket kept resolved elections open, and traders mostly traded with themselves

Prediction markets are supposed to be truth machines. WIRED found two Polymarket election markets that drew over $600 million in volume, mostly on long-shot candidates who lost. In Ethiopia, Prime Minister Abiy Ahmed’s party won 438 seats, and just $173,000 was wagered on him. More than $41 million traded on his chief of staff, who did not win.

Analyst Chris Park says about $284 million of the roughly $285 million in that market came from pairs of accounts repeatedly trading with each other. His firm, MSR Decode, studied 38,000 post-election trade loops. More than 98 percent left neither side ahead, and the median holding time was nine seconds. The firm’s best explanation is ‘activity farming’, possibly in hopes of a Polymarket token. That motive is an inference, not an established fact. Economist Rajiv Sethi called the Ethiopia trading ‘obviously some form of volume manipulation.’ His algorithm flagged 99.6 percent of volume in some weeks of a Romania market as wash trading.

The market design is part of the story. Ethiopia’s market stayed open for 123 days after the result was obvious, because its rules waited for the swearing-in. Polymarket says it blocked the accounts but didn’t explain why they could trade so much first. Meanwhile the company is valued at about $21 billion, and WIRED notes that its growth is often measured in volume. If volume is the headline metric and a possible reward currency, expect people to manufacture it.

Ars Technica · WIRED

3. Cloudflare wants Verified bots to earn trust by obeying 429s

Cloudflare’s own analogy is that a driver’s license proves who you are and that you passed a test, not that you’ll drive well. Its Verified Bot program has so far mostly answered the identity question. Now it is adding a behavioral one.

The company says it is already measuring internally whether Verified bots honor robots.txt and slow down after an HTTP 429. Those observations feed a ‘trust band’ that is not a permanent verdict. Isolated violations won’t count, but repeated patterns will. Cloudflare plans to make the system available to all customers, who could then set their own trust threshold, and to publish scores on Radar later. Today it’s an internal system with a promised rollout, not a customer-facing switch.

For crawler operators, the ambiguity is the lesson. Cloudflare says a robots.txt sets minimum rules and that anything unstated is not thereby allowed. It cites its 2025 delisting of Perplexity’s bot as precedent. The open question is how much control customers get over thresholds, and how contestable a low score will be.

Cloudflare Blog

4. Microsoft is bringing Defender to Linux desktops

The Register’s headline repeats itself for comic effect: Microsoft is bringing Defender to Linux desktops. The supplied text contains no article body, so there is nothing on availability, pricing, supported distributions or whether it’s aimed at enterprises.

Whether this is a mandatory-compliance Trojan horse, as some will argue, is speculation from this evidence. What’s worth watching is whether organizations treat it as optional tooling or a requirement for Linux workstations, because that decides if switching operating systems really reduces dependence on Microsoft.

The Register

5. Benchmark says the no-rivals pact is under strain, and AI is why

Benchmark built its name on long, loyal partnerships with founders. At TechCrunch Disrupt, its partners said they can’t promise that investors will never back competing companies. Peter Fenton called the problem ‘kryptonite’ and the firm’s toughest. Eric Vishria said conflicts are ‘just the reality of the current dynamic.‘

Chetan Puttagunta gave the mechanism. As the cost of software ‘effectively goes to zero,’ founders see more territory and try to claim all of it, so portfolio companies collide. He separated that from backing a direct rival at the outset, which he called an easy no. TechCrunch points to a live example. Factory fired adviser Chris Degnan, alleging ‘unethical conduct involving Cognition.’ Degnan denied sharing anything confidential and joined Cognition. Khosla Ventures backs both companies.

Benchmark isn’t declaring the pact dead. It offers transparency and no surprises after the fact. But a pact enforced by norms gets weaker as startups’ product scopes widen. As TechCrunch suggests, founders should ask investors what they would do before a conflict, not after one.

TechCrunch