320 stories published this day, by desk. Times are Pacific.
Security56 stories
- Qilin hands affiliates the ransom wallet before the core team takes its cut
- Maintainers shipped 97 fixes against the 23,019 bugs Claude Mythos flagged
- CrowdStrike registers AI agents in a directory of their own before brokering any access
- OpenAI gives water utilities and community banks six months to spend $1 billion in Daybreak credit
- CrowdStrike pushes npm and PyPI blocking down into the Falcon endpoint sensor
- Raptor Train burns through roughly 3,500 consumer devices a day to hold 60,000 online
- Pen Test Partners retires the coffee shop hacker from the awareness deck
- Malicious litellm PyPI releases tied to Trivy scan dependency bypassed official CI/CD
- An attacker force-pushed 76 of Trivy's 77 action tags to credential-stealing commits
- CNIL puts €500,000 on the control gaps behind a 727,113-record hospital breach
- Stored XSS in ArmorStart LT waits for the engineer who opens the device's web page
- AFP charges two Perth men over malicious open-source packages that reached 1,000 organisations
- Prompt injection recruits a fully credentialed agent
- Apple threat notifications led one of twelve Serbians to a forensics lab that confirmed Pegasus infection
- Seven national cyber agencies reframe post-quantum migration as an economic risk
- ANY.RUN ties 601 RMM phishing cases to one kit rotating its hosts daily
- Public exploit code for CVE-2026-62911 is outpacing patching on 21,899 exposed Exchange servers
- Rogue IPs added to Coder's Cloudflare pool served credential-stealing Terraform modules for 14 hours
- Attackers started dropping webshells through Elementor Pro forms on patch day
- CISA's advisory update pulls Schneider's protection relays and substation HMI under one CVE
- Crafted packets execute code on ArubaOS-CX switches without a login
- Proving supply-chain provenance takes more than a week at 48% of firms JFrog surveyed
- Rockwell's ControlFLASH installer gave the Everyone group write access to its own program folder
- Ignition shipped its project-creation role field blank through 8.1.53
- AIR Security counts 17,800 AI add-ons taking instructions from outside their packages
- Recorded Future's half-year data shows adversaries continuing to favor abusing legitimate tools and trusted platforms already inside the enterprise
- Flock's webinar trains police to monitor No Kings protests from the FlockOS dashboard
- A 412,192-row festival ticketing file prices Brazilian CPF numbers at four cents a head
- Rockwell answers a 1756-ENBT crash bug with a hardware swap instead of firmware
- A default bind on ten Silicon One Nexus 9000 switches exposes root over ports 43210 and 43211
- Outsider's affiliates stood up 700 new domains within a month of Operation Ghost Hook
- A $5.80 deposit buys remote execution on hosts BraZetsu has already catalogued
- Pillar chains a 9.1 SSRF to self-minted session IDs in Grafana's MCP server
- NetStaX buffer overflow in EtherNet/IP stack requires licensees to rebuild and release patched firmware
- A CRLF injection in IXON's VPN client gives unauthenticated callers root that survives reboot
- Unconfigured Tycon TPDIN monitors hand full relay control to anyone on the network
- Phishing crews adopt the AI red team's invisible Unicode trick to break keyword filters
- CREST accredits ten firms under a new module governing AI use in penetration tests
- Nigeria hands the FBI two sextortion defendants three years after arresting them
- A manipulated Bearer header escalates privileges in Cleo Harmony through 5.8.1.10
- Ransomware hit government entities once a day through the first half of 2026
- FalconFlank PoC turns CrowdStrike's macro cleanup into a local privilege escalation
- GitGuardian finds a Shai-Hulud variant sweeping 469 credential paths across CI/CD and AI configs
- Symantec finds attackers installing the signed Node.js runtime to run their payloads
- Consuming a malware feed at GitHub's scale bills out in rip-outs and credential rotation
- AWS and SANS move agent authorization out of the prompt and into the RBAC layer
- California hands app developers a four-bracket age signal starting 1 January 2027
- Unit 42 finds attacker-hosted NextChat in Mexico-Ecuador intrusion cluster, AI-enabled tools in second Brazil campaign
- A presidential memo licenses private companies to hack cybercrime groups for DHS
- Meta's 95% certainty bar turns suspected scam advertisers into premium customers
- Leaked Bauman files name the GRU department that fed graduates into APT28 and Sandworm
- Volt Typhoon-linked JDY botnet climbed back to 1,500 devices after the KV takedown
- Horizon3 catches live exploitation of Sangoma Switchvox CVE-2026-9586 on honeypots
- DOJ investigates attempted mass takeover of X accounts through password recovery
- AI merger claims fall into the gap between tail and go-forward D&O policies
- Five Eyes agencies turn provider outage messaging into a pre-built control
Build58 stories
- One Self-Hosted Setup Cuts a $198 Platform Bill to a $24 Droplet
- Warp replays your stored agent runs to decide which model gets the next ticket
- Foremerge makes coding agents declare a scope before they write the code
- The hub's single worker node pushes the shared stack onto its etcd masters
- Two registry commands decide whether a generated import is a package
- Claude Desktop has built Android emulator device controls but keeps them disabled behind a rollout gate
- Three lines of context in the LSP reply cut follow-up file reads from 15.2 to 3.2
- Figure sizes its humanoid training run at up to 1,389 Vera Rubin racks
- The escalation rate moves 7.9 times more money than the token rate card
- Appending SAMEORIGIN beside the app's DENY nullified X-Frame-Options, though CSP still blocked framing
- A liveness probe on the wrong process reported 200 for forty-eight hours
- Anthropic's text watermark rides out of the model into every Claude API response
- GitHub's runner cuts drop the 64-core arm64 box to $5.88 an hour
- Whisper-based QC missed trailing-speech defects in four TTS voices it had certified as passing
- Attackers rode the Trivy compromise into Checkmarx's GitHub and out through its VS Code extensions
- NVIDIA routes every cluster's identity check through one session-owning gateway
- A 10-minute Codex heartbeat keeps pushing repairs to your PR until the merge goes through
- RAC audits each atomic fact against retrieval after the model has already answered
- Agentforce moves the render decision from the LLM to a per-connection config binding
- GitHub's gh stack absorbs the rebase work that made hand-rolled stacks unusable
- Context7 turns its retrieval log into a documentation hosting business
- One hardcoded RenderContext(80, 24) hid the height bug from 92 passing tests
- Scoping one Datadog scanning group to three services took $334 a day off the bill
- NVIDIA PAIR schedules each subagent call onto whichever LAN box already holds the model
- The security-group path to your failing pod caps at Moderate on purpose
- AWS's SIRT traced one SSRF bug to Bedrock calls in a second Region
- Cloudflare joins code findings to live route traffic before GPT-5.6 Cyber writes the patch
- Google's background Search agents turn your booking flow into a machine interface
- WeatherNext 3 refreshes a 5 km global forecast every hour off live satellite mosaics
- Choosing between Claude Platform on AWS and Bedrock picks which company processes your prompts
- Model size picks which of six GPU cold-start bottlenecks you pay for
- Cutting 2,720 tokens from one prompt saves 27,200 across a ten-turn ticket
- Two mitigations inside one minute erase the postmortem
- GitHub's 2026-03-10 API version deletes merge_commit_sha from every pull request payload
- Nvidia's $12.9 billion buys the model registry 200,000 companies deploy from
- IFM ships K2 Horizon's checkpoints and training logs for outsiders to audit
- Meta's Project OT budgeted for 60% smaller teams against AI capacity it had not measured
- Point at one line and ask the submitter to explain it
- A tab switch during your fetch quietly voids navigator.clipboard.writeText()
- Spark 1.3's index jump lands on the three tests that carry half the score
- Plaintext secrets on developer laptops shift attack risk from phishing to endpoint harvesting
- Whisper-large-v3-turbo hits 0.18 RTF on an AMD laptop NPU under mainline Linux
- chain-watch moves the exactly-once decision from the broker to the deposit watcher
- HUMAIN post-trains MiniMax's 428B base into Saudi Arabia's Arabic flagship
- TimSort caught a comparator that ranked every letter-only stand above itself
- NeoMME runs document retrieval through one from-scratch encoder at 51 pages a second
- OpenAI's hosted Evals platform stops accepting writes on October 31, 2026
- Polars 2.0 routes every lazy collect() through the streaming engine by default
- A fixed seed buys your E2E spec the right to assert 'exactly 3 orders'
- Browser-native OCR swaps a five-week DPA queue for a 586 MB first load
- WIRED reconstructed Flock's person-search guardrails from files served before login
- Laravel Cloud trades your SSH key for a container that stays warm
- Wayve puts map-light autonomy on Uber's London app with a licensed driver in every seat
- Pimcore's Community Edition left GPLv3 for a license with a 5 million euro revenue ceiling
- Cohere bets enterprise PDF extraction belongs to a 2.3B-parameter specialist
- The Mini Shai-Hulud worm passed provenance checks by running inside the release pipeline
- Copying React's useOptimistic example buys you a checkbox that unchecks itself
- Long agent sessions bill the same context 32 times over
Invest52 stories
- AWS delivers 77% of Amazon's profit growth on 34% of its revenue growth
- Google raids retired servers for DDR4 as memory takes 30% of the hyperscaler bill
- Hyperscale Data reprices Dowagiac's power at $3 million a megawatt-year
- Korea reopens asset pooling five months before its security token law takes effect
- Nvidia buys a demand sink for the cloud capacity it already agreed to backstop
- Bottomline points $16 trillion of annual Swift flow at a Chainlink proof-of-concept
- Poland detains a famous speculator in the hunt for Zondacrypto's vanished founder
- Echo Base hires two law firms, pushes for court-supervised wind-down of BitMart
- Robinhood's authorized participant prints the tokenized HIMS corner out of existence
- SEC proposes letting investment advisers donate to officials who award public pension mandates
- Trump endorses a film credit that stacks on whichever state already wins
- Michigan more than quadruples the daily price of keeping Kalshi's sports contracts switched on
- Fannie and Freddie sell the Treasuries that price the mortgages they mean to cheapen
- Robinhood's custodian negotiates a separate custody price with every RIA it recruits
- Treasury puts the tax exemption of up to 18,000 schools on a nine-month clock
- Guardio's existing backers price their own round at 7.3 times recurring revenue
- Bitcoin's climb past $81,000 ran on $415 million of forced short covering
- Japan's bond dealers refuse the dip at a 3% ten-year yield
- Compute scarcity meters the model OpenAI says can fill out forms at superhuman speed
- Saudi Arabia's HUMAIN attaches a tenancy covenant to every check its $2.5bn fund writes
- Hargreaves Lansdown, UK's biggest D2C investment platform, opens Bitcoin ETN access at 0.35% a year
- The OCC stages Revolut's charter product by product
- Hugging Face sells its independence for 1.85 times the valuation it turned down
- UK developers bill Apple £2 billion for exempting its own ads from the tracking prompt
- Anthropic calls Chinese AI distillation 'theft,' citing national security risks
- Bessent lends Japan dollars against the Treasuries Tokyo might otherwise sell
- OpenAI rates GPT-6 Astra capable of hacking hardened systems without human guidance
- Waller's 3.05% inflation trend takes 13 points out of the market's hike odds
- Colorado tests whether EarnIn's nonrecourse disclaimer survives how repayment actually works
- Atira raises $17.5 million against a $128 billion pile of quoting labor
- Blackstone's Google compute venture hires Charter's CFO to stretch $5 billion over 500 megawatts
- Brinkema outlaws three Google auction mechanics without touching its 91% ad server share
- Uber and Wayve open London to robotaxis with fewer than 20 supervised cars
- Salesforce booked more investment gains than operating income last quarter
- The Justice Department moves the AI copyright fight to the licensing table
- ByteDance borrows $29.6 billion at a tighter spread than it paid on a loan a third the size
- Korea's new strike guidance puts fab staffing on the bargaining table
- Korea splits LH without saying which half inherits 372.8 trillion won of debt
- Uber cuts a tenth of its staff to simplify structure and redirect spending
- A single Kirkland partner claims $110 billion of data-center deals in twelve months
- Trump's emergency order reaches the Chinese transformers under America's data-center boom
- JPMorgan's Morgan Health prices Thyme Care at 16 times its 2025 revenue
- Aramco discounts Arab Light to its widest since June 2020 in a market Hormuz should have tightened
- California hands mortgage fair-lending exams to its own regulator
- Insight Partners leads $550 million round valuing Wonderful at $5 billion
- ABA's chair pins the CLARITY Act fight to the deposit base
- Uniswap deployments, not one launchpad, drove Robinhood Chain's record fee day
- Moody's says Asia now finances a pragmatic transition that keeps coal in the mix
- Alphabet stock rises 0.6% the same day judge rejects forced sale of its ad exchange
- The Fed's Beige Book now rests US construction on data center capex
- Canada taxes American wood pulp at twice the rate of finished toilet paper
- Ondo tells the SEC and CFTC that stock perps are already legal
Product71 stories
- Frustration over hiring and firing decisions pushed Wikimedia staff to a 158-14 union vote
- Perplexity triples revenue on an app audience that grew 45%
- Upwind banks $300m on refreshing the cloud asset map every 30 seconds
- Elroy Air flies the FAA pilot program's first uncrewed cargo missions in Houma, Louisiana
- SpaceXAI apologizes to compute partners it declines to name after a Memphis outage
- A federal judge suspends HHS's grant rewrite over five faulty citations out of seven
- Investors price UiPath on the agent question rather than its 13% quarter
- Astra cuts the computer-use task from about 75 minutes to 40
- PlusAI goes back to the SPAC market at a quarter of its 2021 valuation
- Cloudflare turns OpenAI's cyber model into WAF rules that wait on human approval
- Nvidia's PAIR hands the spare family PC a night shift running sub-agents
- September 11 puts a 24-hour clock on knowing what software actually shipped
- The $800 step up in Apple's Mac mini line now buys core count instead of a newer chip
- Nvidia dates the Arm-based RTX Spark N1X to October without naming a price
- Anthropic's 25% cheaper Fable 5.1 discounts one of six lines on the price sheet
- VodafoneThree attaches a 15Mbps no-fee exit guarantee to a £3 mobile add-on
- Ugreen wants $20,000 for the smart-home hub that keeps inference inside the house
- Dallas pays City Detect $2.5m to grade 21,000 front yards from a garbage truck
- Australia lines up A$155bn of data centres within earshot of the suburbs
- Sony keeps two PS5 price increases while banking a $514m tariff refund
- Circular puts an FDA-cleared ECG and tap-to-pay on the same finger
- Lenovo's $699 MacBook Neo rival offers its OLED screen only in grey and blue
- Ultrahuman ships its ring-as-computer pitch as a software update before the silicon arrives
- Lenovo's fanless AeroBlade concept trades vents for 2,000 Pascals of back pressure
- Madison Gas and Electric invests in Realta Fusion to explore a 200MW plant for the mid-2030s
- Nvidia's PAIR spreads one agent's model calls across whichever home PCs are idle
- Abliteration.ai sells hosted access to a GLM-5.3 with its refusals removed
- OpenAI drops a customer it projected at $1B a year rather than serve SpaceX-owned Cursor
- Krebs traced 153 million leaked driver's licence scans to a single Louisiana ID verifier
- Philips Hue sells the shape of the light for $400
- Meta stops scoring engineers on token counts while testing a hungrier agent
- The Army bought a production laser after testing an earlier version of the system on drones in Texas
- AWS aims self-managed VMware at the customer with six months left on a data centre lease
- Red Hat pins silent agent failures on the tool-call parser
- An ExternalName stub kept a region's logins alive through a namespace migration
- Google releases third Gemini Flash model in six weeks
- HTC hands bystanders a spoken off-switch on its year-late Vive Eagle glasses
- Brazil swapped "renewable" for "low-emission" to get ReData through the Senate
- WeatherNext 3 moves Google from weather research to weather supplier
- EPA proposal would strip public-notice mandate from state air permits for minor pollution sources, including data centers
- Sonos' CEO recasts the 2024 app disaster as an org-chart failure
- Adobe hands Slackbot the keys to more than 70 Creative Cloud apps
- Lenovo caps its 16-inch Spark laptop at half the memory of the 15-inch Pro
- Anthropic's own playbook moves the software bottleneck into the review queue
- Investors marked down record AI quarters at HPE and NetApp despite earnings beats, as NetApp's free cash flow slid
- Tinder extends its mandatory face scan to members who joined before the rule
- Belkin turns semi-solid-state chemistry into a carry-on compliance pitch
- Eufy bets an on-device chip beats the cloud round trip for home AI
- Apple renamed Lake Ontario for US users on its new CEO's first day
- UNICEF traces almost 60% of online child sexual abuse incidents to social media
- Vertiv bets up to $2.6bn that the power bottleneck sits outside the building
- One scientist's 1,138 logged prompts put agentic AI at 600 times a chatbot query
- Rival Texas Senate candidates both demand closed-loop water from data centres
- Snowflake books $370m less contracted revenue than analysts modelled
- A notified body cleared Vara's AI to close normal mammograms unread
- Former CMA official asks a London tribunal to price Apple's tracking prompt at £2bn
- Flock's cameras now watch a drawn zone for anyone matching a typed description
- Air traffic control worked an uncrewed cargo plane into Houma's helicopter pattern for a week
- OpenAI's test models broke out of the sandbox and reached Hugging Face's infrastructure
- AVILOO measures a 13.5-point battery health gap between used EVs of the same model
- Eufy bolts a trimming arm onto the one mowing job robots hand back to you
- Anker rebuilds Eufy's privacy promise as hardware you can test
- Philips Hue partners with Nanoleaf on wall panels, with a $39.99 connectivity module
- Judge rejects AdX breakup for Google, orders behavioral remedies instead
- Hue adds a natural-language AI behavior builder to the Bridge Pro
- Adobe puts the same 70-plus tools in Slack that it already gave ChatGPT
- C-Track breach reached at least twelve judiciaries, including Ontario
- An attack harness closed 67 points of Booz Allen's own AI threat ranking
- Meta keeps Muse Spark 1.3 pricing flat while claiming coding edge over GPT-5.6
- CrowdStrike wants to be the identity provider your AI agents register with
- CrowdStrike will police the OpenAI agents it also puts to work
Leadership23 stories
- Investors are funding agentic-commerce rails ahead of the demand that would justify them
- ARC Prize puts Astra 37 points below the score OpenAI led with
- Zuckerberg argued against a FINRA-style AI reviewer in a direct call with Trump
- A 1976 industrial chemicals law has cleared one engineered microbe in thirty-one years
- Brussels was already probing 30-plus AI companies when the G-20 agreed to hold new rules back
- A $3.2bn Anthropic gain flows straight through Microsoft's adjusted earnings
- Why cheaper tool-creation won't shrink the enterprise software estate
- Manufacturers funded AI faster than they defined what it was supposed to change
- Fine-tuning hands the open-weight safety question to the buyer
- Republicans ask the justices to extend the candidate ad discount to party committees
- Tucson's utility vote led AWS to abandon its 290-acre Project Blue data center
- Without SEC no-action letters, companies face greater risk in deciding whether to exclude shareholder proposals
- Anthropic and GitHub have moved AI costs from the seat to the meter
- Chancery holds Empery to the advance notice bylaws it actually wrote
- Long-term unemployment is rising, and jobseekers are struggling to explain why they can't find work
- Every notable AI release today arrived with a grade written by its own vendor
- Amazon's 2029 delivery plan leaves outside carriers a flat two billion packages
- Developers in METR's trial felt 25% faster while finishing 19% slower
- Gemini 3.8 Flash buys three index points for a 45% rise in cost per task
- Mutual blockade at Hormuz is settling in as both sides' least bad option
- Domino's turns dinner-table disagreement into a product spec
- Conveo's $50M round doubles as a buyer's checklist for AI-moderated research
- Meta's $17.1bn settlement includes $5bn that hinges on TikTok and YouTube signing similar deals
Science60 stories
- Warming splits 23,000 mollusk species into shrinkers and growers by ocean basin
- Colorado's smallest wheat crop in 61 years turned on 48 hours of temperature whiplash
- Guano color in 4,000 Landsat frames reconstructs four decades of Adelie penguin diets
- Later autumn freeze-up has stretched the Arctic melt season by seven and a half days
- A 35.8% rainfall deficit puts the Panama Canal on 32 transits a day
- Rain gardens in the right-of-way cut modeled Ottawa flooding 76% while covering less ground
- ACC and AHA extend athlete heart guidance to four million firefighters, medics and Marine pilots
- Geological Society study rests the Humber's CO2 storage case on a retired field's production record
- DeepMind's WeatherNext 3 adds live satellite mosaics alongside traditional analyses
- Two harnesses put the same model 37 points apart on ARC-AGI-3
- Digital twins built from 500-question profiles flatten the people they were meant to copy
- Twenty atomic super-spins in an optical cavity recall more memories than an equal-sized classical network
- Carnegie Mellon measures a Hall voltage from magnetization lying flat inside the film
- Cryotomography catches an Asgard archaeon joined to a bacterium by nanotubes in Shark Bay
- Ancient DNA from 149 Gansu burials decouples western crops from western farmers
- Two doses of psilocybin protected mouse nerves through six rounds of cisplatin
- Fifty variant-effect predictors score rarity as harm across 13.5 million mutations
- Blocking one macrophage receptor kept multiple organs youthful in aged mice
- Satellites caught Western forests dimming two years before beetle mortality reached aerial surveys
- Measuring Arctic buildings in three dimensions puts permafrost's mid-century damage at $261 billion
- A five-metal aluminate still destroys 92% of CF4 after 150 hours at 800C
- WMO puts this El Nino on course for the strongest Pacific anomaly in its 40-year record
- Janelia closes its 18-year fly connectome bet with all 166,000 neurons mapped
- Algorithmic search is assembling physics experiments that outdo the human designs
- A wet winter and a May flash drought pushed Europe's fires north into countries that plan for rain
- Reanalysis traces Hunga's largest tsunami to a caldera collapse heard 2,000 km away
- Approved airport expansions already push UK aviation past its 2038-42 carbon budget share
- Researchers extend Ising-machine optimization to environments that change mid-search
- Political values predict which hardships Britons count as poverty at all
- Berkeley pairs a shake table with VR to study how occupants perceive risk in an earthquake
- Simulations single out three five-metal boride sheets that reduce CO2 to CO with no extra voltage
- Salt crusts brighter than fresh snow deepen the freeze in a new Snowball Earth model
- Tennessee middle schoolers gained three points with an AI tutor designed to withhold answers
- Antineutrino monitoring reaches into the weeks a reactor sits shut down
- China's installed solar capacity overtook coal by three gigawatts at the end of July
- A reanalysis puts a magnifying lens in front of the heaviest black hole merger yet seen
- Intimate partner violence recurs across all three homicide types in 115,873 NVDRS deaths
- Massachusetts pediatricians who keep vaccine-hesitant families are testing dismissal's premise
- An odd omicron moves the Herodium ring from Pilate's hand to the person who sealed his post
- Satellite tags follow female dotterels across Northern Europe in pursuit of extra mates
- Rutgers survey puts the youth bystander gap in know-how rather than willingness
- AI datacenter growth is outrunning the climate targets its operators set
- Terahertz pulses drive a plasmonic metamaterial into the first all-optical time crystal
- Hydrogen sticks to magnetic nickel sevenfold more when its spin lies parallel to the surface
- Indonesia's peat fires logged a tenth of 2015's emissions in their first month
- Assimilating water vapor isotopes improved forecasts out to five days in a near-operational test
- Eighteen million people in extreme poverty fish the Indo-Pacific's seagrass meadows
- Tooth wear from 460 English sites pushes the ox-plough peak into the 12th century
- Isotopes in an Ediacaran tube fossil move animal-microbe symbiosis back 100 million years
- Student aggression weakens the retention benefit of principal support in a 5,550-teacher survey
- A biodegradable nanobone grew 80% more bone than its control in eight weeks
- Recoil and fermion statistics sink last year's ultracold neutrino laser
- A match-head snail in Lake Alexandrina doubled its genome under a million years ago
- Tension wood pulls both ways in poplars stripped of light and gravity cues
- Cells let nearly half of knot-prone misfolded proteins slip past degradation
- A simulated maternal flu hypermethylates the sites Tbr1 needs to bind in fetal mouse cortex
- A 27% fall in US overdose deaths arrived faster than the evidence for its cause
- Pregnancy hypertension climbed 73 percent in eight years by the CDC's count
- Satellite maps tie tropical cyclone intensity to ocean fronts just a kilometre across
- APA report shifts the burden of proving edtech works onto vendors and the districts buying it