š§± Airtable's Omni 2.0 now builds your base from messy files
Airtable's Omni 2.0, now on every plan, turns spreadsheets, PDFs and images into a working base.
Four-minute read. In todayās issue: Airtableās Omni 2.0 building bases from messy files, a PHP security fix to ask your web host about, Shopify warning before off-site links, and AI models hiding a magic square in the Sagrada FamĆlia.
BUILDING
Airtableās Omni 2.0 can now build a working base from your messy files, on every plan
What changed. Airtable unveiled its Fall Release at Airspace London on 21 October. Omni 2.0, its built-in AI assistant, is āavailable now on all plansā and turns spreadsheets, PDFs and images into tables, imported data, automations and AI fields in one pass.
What it means for you. The client tracker or stock list still living in a spreadsheet can become a working base in an afternoon, without hiring anyone to set it up.
The first step. Open Omni from any base this week, hand it one spreadsheet your team updates by hand, and check every table and automation it proposes before the team switches over.
The limitation. Canvas, which builds apps and dashboards from your data, is a waitlist with an open beta ācoming this weekā, and is not yet available for non-US data organisations. The new agent audit logs are Enterprise-only, and agent permissions have no date.
Airtableās Fall Release announcement (community.airtable.com)
Affiliate link: we may earn a commission if you sign up, at no cost to you.
SECURITY
A serious flaw in PHP, the software behind most websites, now has a fix
OpenAI said on 21 October that its models helped researchers find critical security flaws in PHP, which OpenAI estimates runs about 70% of websites. Fixes were prepared with PHPās maintainers, and every PHP site can now upgrade.
It was the dayās most-discussed topic, with Pieter Levels, Guillermo Rauch, Peter Steinberger and ThePrimeagen all posting about it. Ask your web host, or whoever maintains your website, to confirm in writing this week that PHP has been updated.
OpenAI on the coordinated PHP disclosure (openai.com)
Just shipped
Shopify stores now ask shoppers to confirm before sending them to a website outside your store, showing that siteās address first, Shopify said on 20 October. Domains connected to your store, and supported Shopify and social sites, donāt trigger the message.
A site you own but havenāt connected may still trigger it. Connect any other domain you send customers to this week. (changelog.shopify.com)
The rest of the day
šļø Docs Live is rolling out to Workspace users in the Google Docs phone app: talk through your ideas and it drafts a structured document, using context from your emails, chats and Drive. Try it on your next update straight after a meeting. (workspaceupdates.googleblog.com)
š§© The Gemini app now has one ācustomizeā menu for skills and more than 40 connected apps, rolling out globally on every tier; most connected apps are US English for now. Save a skill with your house style so you stop repeating the same instructions. (workspaceupdates.googleblog.com)
šļø Notionās Agent can now run tasks for more than 24 hours, up from five minutes, with its own computer and browser, and a āReview for meā option that checks actions before it takes them. Hand it one longer job this week and check back later. (x.com)
š£ OpenAI said on 21 October that ChatGPT ads now run in 26 more countries, and that over 100,000 advertisers, from local businesses to global brands, have used them. Check whether your country is on the list before you set your holiday ad budget. (openai.com)
š ļø Built with AI
Allie K. Miller had an AI concierge agent phone a Michaels store to check balloon pricing and stock, and it caught an error in the storeās own quote during the call. Have an agent call round for stock or prices before you spend an afternoon on hold. (x.com)
š§° The Open Source Toolshed
What it is. AnythingLLM is a free desktop app that lets you chat with your own PDFs and documents, using either a model that runs on your computer or one you connect to.
Who itās for. Any small business that wants to ask questions of its own contracts, manuals or client files without uploading them to someone elseās server.
How hard it is. Install the desktop app for Mac, Windows or Linux and point it at a folder of documents; no coding and no terminal required.
MIT licence. (github.com)
š The AI Odometer
Source: Epoch AI, āDisclosure of serious cyber vulnerabilities spiked around the release of Claude Mythos Previewā, 2 July 2026, Luke Emberson, CC BY 4.0.
Compared to the previous monthly record before the Mythos Preview announcement, the number of high- and critical-severity vulnerabilities increased more than 3.5x in June.
What it means for you. AI is finding serious software bugs faster than ever, so fixes like todayās PHP patch will keep coming. Turn on automatic updates for your website plugins, laptops and phones this week.
Too early
Claude Duet, a new app where Claude works as a proactive agent and checks with you before it acts, opened as an early research preview on 21 October. It is a waitlist on Pro and Max plans in the US only, and Anthropic says it ācan still misjudge whatās urgentā. (support.claude.com)
šØ One for the road
Four separate AI models were asked to build 3D scenes of Barcelonaās Sagrada FamĆlia: Claude Fable 5.1, Claude Sonnet 5.5, Grok 4.7 and Step 5 Preview. Unprompted, all four quietly added the basilicaās real magic square, the hidden grid of numbers the sculptor Josep Maria Subirachs carved into the facade.
Claudeās two models put the square out in plain sight. Grok and Step tucked theirs behind a pillar instead, as if feeling shy about it. Nobody had asked any of them to include it at all. (x.com)