AI, Work and Skills

Laurenceo Intelligence tracks how AI is changing work: hiring, job losses and creation, skills demand, labour policy and the evidence on productivity. It separates measured effects from forecasts and hype.
- 1 development
- 1 organisation
- 3 live forecasts
- Updated 27 October 2026
- Tracked since 27 October 2026
CISA flags actively exploited critical flaws in Arista VeloCloud Orchestrator and Collabora Online
CISA added an SQL injection vulnerability in on-premise Arista VeloCloud Orchestrator (CVE-2026-114625) to its Known Exploited Vulnerabilities catalog on 23 October 2026. The Hacker News reported that a second flaw, an OS command injection in Collabora Online's built-in CODE server used within Nextcloud (CVE-2026-110447), was also added, with federal agencies told to patch by 26 October. The same report said attackers had used the Collabora flaw to install web shells on Nextcloud servers and search for credential stores and cryptocurrency wallets.
Why it matters. Network orchestration and document collaboration platforms sit close to credentials and internal traffic, so a compromise there can become a route to wider access. Organisations that self-host these products should confirm exposure and patch status, and review servers for web shells and unusual access to credential stores. The reported targeting of wallets is a reminder that opportunistic attackers monetise any foothold quickly.
Forecasts
Open questions on the Laurenceo forecast board, with the current probability.
- Will Challenger, Gray and Christmas report more than 150,000 AI-attributed job cuts for 2026 in its December report? (87% by 31 January 2027)
- Will BLS report nonfarm business labor productivity growth of at least 2.5% over four quarters for Q2 2027? (35% by 30 September 2027)
- Will the Stanford Digital Economy Lab report that employment of 22 to 25 year olds in the most AI-exposed occupations is 22% or more below less exposed peers in an update published by 2027-12-31? (50% by 31 December 2027)
Organisations
- CISA (1)
Every Desk
Frontier AI25 storiesLatest: Anthropic IPO filing discloses month-long training pause and four model sandbox escapes
Defense52 storiesLatest: CISA adds PHP2Shell flaws to exploited-vulnerabilities catalog with a short federal deadline
Geopolitics7 storiesLatest: CISA adds five Flax Typhoon-exploited flaws, some a decade old, to KEV catalog
Financial Markets58 storiesLatest: Alphabet Q3: Google Cloud revenue doubles to $30.7bn, capex hits record $51.4bn, free cash flow negative
Infrastructure65 storiesLatest: NVIDIA and Oracle expand Vera Rubin on OCI to multi-gigawatt scale; Vera Rubin NVL72 now available
Regulation46 storiesLatest: Anthropic files S-1 for proposed IPO, plans Nasdaq listing under ANT
Next deskFrontier AI Models →Latest: Anthropic IPO filing discloses month-long training pause and four model sandbox escapes
More Coverage
- Cybersecurity and AI Threats
- AI in Financial Services
- AI in Insurance and Reinsurance
- AI in Bermuda
- AI Safety and Incidents
- Data Centres and Compute
- Semiconductors and Chips
- AI Investment and Markets
- Privacy and Data Protection
- Enterprise AI and Agents
- Government and National Security
- AI, Energy and Climate
- AI in Healthcare and Life Sciences
Laurenceo Intelligence is the daily AI intelligence briefing published in Bermuda by Laurenceo, founded by Jorai Laurenceo. Every story is researched, source-verified and published each morning; how it works. General information only, not legal, regulatory or financial advice.