Tuesday’s 5 PM technology recap tracks five changes that matter beyond their launch-day headlines: Microsoft and partners disrupted an AI-assisted phishing service, Anthropic launched a lower-cost Claude Opus model, Texas widened its pause on data-center approvals, Discord revised age assurance, and Qualcomm split its next flagship mobile platform into standard and Extreme tiers.[1][3][5][7][9]
Reporting cutoff: September 22, 2026, 5:01 p.m. EDT (21:01 UTC). Every selected report was published after the prior 5 PM cutoff. Scale, pricing, accuracy, performance, privacy, and market-impact figures below remain attributed to the organization or analyst that supplied them.
Listen to the broadcast-ready recap
This KittenTTS Bella narration was synthesized locally from the same checked facts as the article.
Tonight’s five-story rundown
1. Microsoft and partners disrupt EvilTokens
Microsoft says EvilTokens, launched in February 2026, was linked to more than 12,000 compromised email inboxes across over 10,000 organizations worldwide.[1] The company describes a phishing-as-a-service operation that abused device-code sign-ins, then used an AI assistant to analyze inbox relationships, identify people with payment authority, and recommend impersonation strategies.
Microsoft says its coordinated action seized 50 websites, disabled more than 150 additional domains, and accompanied the Metropolitan Police arrest of two men suspected of offenses connected to the alleged operation.[1] Fortune independently reported the arrests and broader Microsoft-Coinbase investigation, while attributing the operational totals to investigators and participating companies.[2]
Fortune reported that investigators traced about $1.1 million received through more than 700 Tron addresses between October 2025 and June 2026.[2] That number describes funds attributed to the service’s operators, not a verified total of victim losses.
Practical actions: disable unused device-code authentication where your platform allows it, require phishing-resistant multifactor authentication for financial and administrative roles, and verify unusual payment or account-change requests through a separate known channel. Review newly added mail rules, OAuth grants, sign-in geography, and device registrations after a suspected compromise.
2. Anthropic targets lower cost with Claude Opus 5.5
Anthropic launched Claude Opus 5.5 on September 22 and lists API prices of $4 per million input tokens and $20 per million output tokens, with cache reads at $0.20 per million.[3] Those prices are 20% below Opus 5 for input and output tokens and 60% lower for cache reads, according to Anthropic.
Anthropic says Opus 5.5 costs 40% less than Opus 5 on typical workloads and generates output more than 30% faster.[3] CNBC independently confirmed the launch and lower-cost positioning, but the workload mix, benchmark settings, and performance comparisons remain vendor-defined.[4]
Anthropic says Frontier Design and METR evaluated the model before release, while its strongest alignment and capability statements come from Anthropic’s own testing.[3] External evaluation is useful, but it does not convert every company benchmark into an independent guarantee.
Practical actions: test the model on a frozen representative workload before switching. Measure successful tasks, total input and output tokens, cache utilization, wall-clock time, reviewer effort, security defects, and regression rates. Keep a rollback path to the currently accepted model.
3. Texas pauses more data-center permits
Texas Governor Greg Abbott directed the Texas Commission on Environmental Quality to halt permits sought by data centers until the Electric Reliability Council of Texas completes its audit.[5] The directive says state agencies need grid and water-use information before moving forward with related approvals.
The governor’s office says projects must cover their electrical-infrastructure costs, report electricity and water use, avoid consuming water needed by local communities, and comply with setback requirements.[5] TCEQ was ordered to report on compliance with the directive by October 19, 2026.
CNBC cited a BloombergNEF estimate that nearly 50 gigawatts—almost 20% of the 253-gigawatt U.S. data-center pipeline—could be exposed to the Texas pause, with more than $8 billion in potential revenue at risk by the first quarter of 2027.[6] Those are analyst exposure estimates, not confirmed cancellations or losses.
Practical actions: organizations planning Texas capacity should inventory permits, interconnection milestones, water requirements, infrastructure-cost obligations, and contractual deadlines. Model delay scenarios without treating every announced megawatt as approved or operating capacity.
4. Discord launches revised age assurance
Discord says it will automatically place accounts into Adult, Teen, or Unconfirmed groups using account signals such as account age and server participation, while not reading messages, calls, or other content for the classification.[7] Rollout begins this week, and account holders can view their assigned group under User Settings and Account Status.
Discord estimates that more than 90% of users will not be asked to confirm their age.[7] Depending on region, adults placed in the wrong group may be able to use options including payment credentials, app-store age ranges, Google Wallet, AgeKey, an ID scan, or a video selfie; Engadget independently summarized those choices.[8]
Discord says participating age-assurance vendors must delete submitted verification data immediately after confirming an age group, and that facial estimation must run on-device so biometric data does not leave the phone.[7] These are Discord’s stated requirements; this article did not independently audit every vendor’s implementation.
Practical actions: check your Account Status before sharing additional information. If Discord misclassifies you, compare the available regional methods and choose the least sensitive acceptable option. Parents and guardians should review teen contact, sensitive-media, friend-request, and age-restricted-content settings together.
5. Qualcomm introduces two flagship Snapdragon tiers
Qualcomm announced Snapdragon 8 Elite Gen 6 and Snapdragon 8 Elite Extreme Gen 6 as two flagship mobile platforms built on a 2-nanometer process.[9] The Verge reports that the chips share most CPU, modem, display, security, memory, and storage specifications.[10]
The Extreme tier adds a larger shared memory pool for the neural processor, AI-focused matrix cores in the graphics processor, and support for capture up to 8K at 60 frames per second or 4K at 240 frames per second.[10] These platform capabilities do not guarantee that every phone maker will expose every feature.
Qualcomm named Honor, iQOO, Motorola, OnePlus, Oppo, Redmi, RedMagic, Vivo, Xiaomi, Nubia, and ZTE among adopters of the two platforms.[9] The Verge reported that Motorola’s Signature 27 will use the Extreme version, while broader model-by-model assignments remain incomplete.[10]
Practical actions: do not buy on the word “Extreme” alone. Compare the exact phone’s cooling, memory, modem bands, camera implementation, update policy, battery tests, and enabled codecs. A standard-tier device with better software and thermal design may outperform a poorly implemented premium tier.
What to do next
- Security teams: audit device-code use, mail rules, OAuth grants, and payment-change verification.
- AI buyers: benchmark complete workflows and review cost—not only token price.
- Infrastructure planners: treat Texas capacity as conditional until permits, grid studies, and water obligations are clear.
- Discord users and families: review Account Status and choose the least sensitive acceptable verification path if correction is needed.
- Phone shoppers: wait for finished-device testing before paying for an Extreme label.
Need help securing, fixing, or planning your technology? Schedule The IT Guys
More from The IT Guys
Frequently asked questions
Was EvilTokens itself a new vulnerability?
No. Microsoft describes a criminal service that abused phishing, device-code authentication, stolen access, and trusted business relationships. Defenses still depend on stronger authentication, careful approval workflows, monitoring, and rapid account cleanup.[1]
Does Claude Opus 5.5 cost 40% less per token?
Not exactly. Anthropic lists input and output token prices 20% below Opus 5 and cache reads 60% lower; its 40% figure refers to company-tested typical-workload cost, which also reflects token efficiency.[3]
Did Texas cancel all data centers?
No. The directive pauses specified permits and approvals while audits gather grid and water information. Project outcomes remain conditional.[5]
Will every Discord user need an ID or selfie?
Discord says no: it estimates that more than 90% of users will be classified without further confirmation, and it lists several non-ID options for people who need to correct an age group.[7]
Is the Snapdragon Extreme version automatically the better phone?
No. It supports additional capabilities, but actual performance depends on the handset’s cooling, memory, software, camera, battery, and manufacturer choices.[9][10]
Sources checked for this edition
- Microsoft — Disrupting EvilTokens: The AI Chatbot Built for Cybercrime
- Fortune — Microsoft and Coinbase probe leads to arrest of crooks behind EvilTokens
- Anthropic — Introducing Claude Opus 5.5
- CNBC — Anthropic and OpenAI roll out cheaper models
- Office of the Texas Governor — Governor Abbott Directs TCEQ To Halt Data Center Permits
- CNBC — Texas Gov. Abbott orders data center permit halt
- Discord — Safer for Teens, Same Discord for Adults
- Engadget — Discord rolls out its revised age verification policy
- Qualcomm — Snapdragon Leads the Agentic AI Age
- The Verge — Qualcomm’s Snapdragon 8 Elite Gen 6 comes in an Extreme version too
Source state checked through September 22, 2026, 5:01 p.m. EDT / 21:01 UTC. Company and government claims remain attributed; analysis is labeled; unresolved performance, privacy, legal, and market outcomes are not presented as settled facts.