176 stories published this day, by desk. Times are Pacific.
Security5 stories
- Exposed MikroTik SSH hands over full administrative control without authentication
- CISA ties federal patch deadlines to four yes-or-no questions about each CVE
- Sysdig credits Anthropic's Mythos preview with 181 working Firefox exploits
- Arista tells network teams to staff for months of batched EOS and VeloCloud advisories
- Trezor says ShipMonk kept 67,000 customer records it had certified as deleted
Build56 stories
- Adding Git replicas made Datadog's CI fetches slower because every write went to all of them
- canvas.toBlob hands Safari users a PNG labelled .webp
- MCP's stateless revision moves session continuity into a string the model repeats back
- Two agent sandboxes ship an unauthenticated shell endpoint on every interface
- Eight goroutines finished a 76.3MB log query a full second behind one worker
- Nushell was slower on every timed task in a trial pre-registered for improvement, regression, or no difference
- Standing authority on Robinhood's MCP server places orders with no per-trade confirmation
- The entrypoint field in a Claude Code transcript tells a Stop hook if anyone is watching
- One git command lists the private files a coding agent may read-but not all of them
- One prompt in five sends a coding agent to the web before it picks an SDK
- Keying the upsert on Stripe's id lets five code paths write one subscription row
- An n8n error handler turned every rejected sell order into a Discord success tick
- Requiring IMDSv2 cuts off every caller that never learned the token PUT
- Why a 14-day Google Play test window pushed a 19-language retrofit before launch
- A UDP socket carries Frag Gap from inside a container into host kernel memory
- Adjudicating every extracted fact against its five nearest memories costs one LLM call apiece
- Port writes its blast-radius prediction into a catalog field the next sync can overwrite
- Nvidia would fund most of the $3.5bn round raised by a customer holding a 194,000-GPU order
- Eighteen flagged agent packages still install from npm weeks after the feeds listed them
- Integer-cents Python clears the invoice before the local 3B model's draft reaches anyone
- Running detekt instead of detektMain leaves every type-resolution rule silently inert
- Saving a file keeps the graph alive while the cloud facts underneath it expire
- Circuit breaker state gets its own Redis database so a cache flush cannot reset it
- Measuring each patch against the human fix on the same bug leaves 13 of 14 models messier
- A trailing newline in Vault forced 112,228 escalations onto the 72x-cost proxy tier
- December's Database Savings Plans shrink the Reserved Instance case to two services
- Postgres 18 hands the audit row to the statement that overwrote the balance
- Forty locales of agent-written copy leave 160 artifacts for one human to verify
- A recurrent block unrolls a 3.5B model into a 50B-parameter compute bill
- Rewriting four MCP adapters in Go cut 23 seconds of cold start to two
- A cost-per-request panel inherits the refresh rate of your cloud invoice
- A route table entry takes S3 bytes off the NAT Gateway meter at no charge
- Spammers split "funding" with an invisible Unicode tag to slip past keyword filters
- CoT monitoring helps because reward shapes reasoning only indirectly, not because it works perfectly
- Patching to Postgres 18.6 leaves btree_gist and ltree indexes to be rebuilt by hand
- npm 10.8.2 publishes unauthenticated when you configure Trusted Publishing
- Requiring a reproduction path stops a review agent from quadrupling the feature
- A 1.00 pages-per-visitor ratio caught the bots a user-agent block let through
- Clinicians ask for chatbot screening before psychiatry rules on AI psychosis
- Private struct fields move an agent's write check from every caller to one Rust module
- Size the model to the RAM you own before the 45-minute download
- Free memory climbed while one request hit 56 seconds during a package-update spike on a $0 n8n box
- Vault on Kubernetes fails silently: same symptoms, different root causes, each traced through a different log
- A twelvefold longer prompt costs this RTX 3090 only 12 percent of its decode throughput
- On the far side of a macOS admin prompt, a free-text DNS field ran commands as root
- AWS's Agent Toolkit ships two independent halves that break in different places
- One x402 service minted a fresh settlement wallet every 16 minutes for ten days
- Next.js middleware's Edge Runtime default breaks Mongoose auth checks three different ways
- Abliteration.ai rents a refusal-stripped GLM-5.3 for five dollars a million tokens
- Cacheable tool lists make an MCP rename outlast the deploy that shipped it
- One Postgres column replaced the sync pipeline that kept the vector store in step
- Certificate transparency logs leak bucket names before the first API call
- Expo apps flicker on cold start because null and unknown are the same value
- IMDSv1 turns an SSRF finding into unauthenticated credential theft in one hop
- LLM load tests pay full price for inference they throw away
- Six CVEs trace one bypass class to an unspecified decode order in RFC 3986
Invest32 stories
- Draft State Department letter tells Pax Silica partners: pick a side or lose the hedge
- Forty-six seconds of eruption closed eight Indonesian airports for 29 hours
- Sacks: AI-risk advocacy's $1B is a fraction of Anthropic's $65B funding round
- Upbit pulls BONK's won market a month after Bithumb declared the same incident fixed
- Three quarters of the bitcoin ETF week arrived in one Thursday session
- Unlicensed hawala networks moved over 500 million euros in just a few months, FATF finds
- NPS waives dollar hedging on $530bn abroad as the won breaks into the mid-1,300s
- Semiconductors supply 59 cents of every extra dollar Korea shipped to India in August
- Yardeni sees 10-year yield settling in 4%-5% range consistent with a healthy economy
- Ternus takes over an iPhone line with 35 points of premium mix left in it
- US strikes Iranian tankers as Iran claims hit on American vessel in Hormuz
- Three hours at the Kremlin bought a three-day truce over two capitals
- Tehran puts a Hormuz exclusion zone on the calendar before drawing it on a chart
- AfD's 44 percent forces the CDU to choose which coalition refusal to break
- China's surplus needs about $240bn of fresh foreign deficits a year to keep growing at 20%
- A six-week lame duck now carries the CLARITY Act's entire CFTC-SEC split
- Samsung Biologics dilutes holders 4.9% to buy its way into GLP-1 peptides
- Meta's settlement puts a two-hour daily clock on every under-18 account
- A 29-cent recovery rate thins out 10.53 points of triple-C spread
- 10-year yield has added 80 basis points since the Fed started cutting
- Liquid's $320M peg-out ran on an authorization key reported unbreached
- Treasuries make up under a quarter of the $39.19T that foreigners hold in US securities
- Nvidia guides fiscal 2028 to $673B to give its memory suppliers a planning horizon
- BlackRock's $5bn bitcoin swap pipeline accelerated after the $1M floor arrived
- Five model releases in three days push the re-benchmarking bill onto buyers
- Foreign funds convert Seoul officetels as monthly rent takes 68.3% of Korean leases
- Amazon packs 422 MW and 193 diesel generators onto 53 acres in residential Thane
- Thailand hands crypto operators 178 days to build wire-style checks into every transfer
- AMC's Aron demands Robinhood halt stock tokens tracking 190-plus companies without issuer consent
- August re-rated software faster than any growth rate could move
- Banks own two of the three legs every stablecoin payment travels
- Ramp's top AI spenders outbuy the median business 619-fold per employee
Product51 stories
- ChatGPT Sites puts a publish button on five paid ChatGPT plans
- Isar's Spectrum reached orbit carrying ESA-funded competition winners
- Pokémon Champions locks phone players out of regional competition
- Slate restricts its $24,950 electric truck to buyers with a US address
- Central government's AI disclosure question lands on the bid writer's desk
- Nigeria's regulator is investigating the services Uber left unfulfilled when it switched off
- Fifty-one attorneys general wrote Meta's overnight teen block into the product
- AMEC crowds four deposition systems into a six-machine launch
- Seven-figure security chief offers land on a budget growing 6 percent
- Spammers borrowed the prompt-injection character block to split "funding" in half
- A month in the iOS 27 beta shrank Siri AI down to a search bar
- OpenAI's median researcher spends more than $600 a day on inference at API prices
- Three laptop makers are building Googlebooks around one demonstrated feature
- US Strategic Metals is funding 97.5 percent of its 50-50 magnet recycling venture
- LG's $3,499 Gram Pro 16 saves under an ounce against a 13-inch MacBook Air
- Hyundai Steel's Louisiana mill will devote about two-thirds of output to automotive steel
- Anthropic's prospectus waits on a $15bn revolving credit line
- OpenAI hands itself a pass on the automated research intern
- Minnesota's deepfake law bills service providers for every access while xAI litigates
- One App Store parenthetical saved eight of X's Twitter trademarks
- Anthropic's claims portal puts the burden of proving reverted rights on the author
- Nvidia now carries $99bn of its own customers on its balance sheet
- Nscale bought into the robot maker that just committed $3.5bn to its compute
- Unit 42 clocked data leaving inside the first hour in nearly a fifth of its 2024 cases
- Atoms' robotaxi denial carries an exception for Uber's ridesharing business
- Anthropic formalized Wiles' proof in 11 days by handing the review to a machine
- Ultrahuman opens its rings to outside developers before the Qualcomm ring exists
- A $985m buyback premium turned Oura's $60.8m profit into a $924.3m loss
- Nairobi's essay trade now sells detector evasion instead of essays
- US negotiators offered expanded Nvidia chip approvals to bring Armenia to the table
- CSA's Agentic Trust Framework maps agent autonomy to an auth stack you already run
- Robinhood's AMC token is its own Jersey debt with someone else's ticker on the label
- Berlin published the staffing plan for refusing a ransom
- OpenAI's agents found a workaround to write to a wiki despite read-only access
- Thailand halts construction on 49 data centres pending new oversight rules
- ARC Prize's own harness scores GPT-6 Astra 37 points below OpenAI's adapter
- OpenClaw ships half its merge history in a single release
- Fairphone charges $39.99 for a replacement battery
- Two national labs studied dam retrofits with a model built by Idaho lab, estimating 15.2 TWh potential
- Honeywell's magnetic navigation prototype flew four hours over the Pacific without GPS
- Nine states now treat plug-in solar as an appliance instead of a rooftop project
- Claude's Gmail agent turns one approval toggle into your whole outbound policy
- Darkening the skin around a benign mole flipped GPT-4's answer to melanoma
- Tesla's Cybercab manual tells first responders to contact Tesla for remote moves, with pushing allowed only in limited conditions
- Abbott and Shapiro toughen their data center line as neighborhood opposition hits 75 percent
- Console makers tell US courts the buyer's claim ended at checkout
- Power procurement now sets the calendar for AI compute
- USDA scientists trace falling omega-3s in farmed salmon to a diet of soy and canola
- The FCC's robot ban freezes the American robomower shelf
- Navy's drone-boat refuelling rig cleared about 100 connections to move 400 gallons
- Omdia's miniLED forecast is doing all the work in the two-tier MacBook theory
Leadership17 stories
- A 60-day visa clock turned one Ohio State layoff into a move back to Peru
- Blockstream pauses Liquid after $320 million exploit, tries to reach hackers onchain
- Alibaba, Baidu and BYD landed on a Pentagon list a month into the new US-China framework
- Anthropic's context-reset fix for Sonnet 4.5 became dead weight on Opus 4.5
- Anthropic sold about 8 percent of itself for $30 billion
- Some restaurants are swapping menu photography for ChatGPT to cut costs amid thin margins
- OpenAI's chief scientist calls for mandated safety bars enforced from outside the lab
- Anthropic writes the agent handoff into the repository instead of the context window
- Attackers repurposed prompt injection's invisible Unicode to break email keyword matching
- Chancery dismissed the Boeing oversight case on the strength of the board's documented effort
- Palantir built its FDE rotation to close a split between Palo Alto and the field
- About one résumé in a hundred now carries a hidden instruction to your screening model
- Employers are converting AI writing etiquette into formal internal policy
- Swansea study puts 86% of licensed British gambling sites in breach of cookie consent rules
- The Education Department is subtracting qualifying payments it already credited to PSLF borrowers
- Sony, Microsoft and Nintendo ask courts to treat their tariff-era prices as final
- Kubernetes now issues pod certificates through a signer you still have to bring yourself
Science15 stories
- A 270,000-person genetic analysis ties higher tyrosine to nearly a year less life in men
- Cornell's 2030 water projection puts more liters in power plants than cooling towers
- Pressure above 21 gigapascals stretched a blue pigment into a 4,000-atom copper wire
- Liverpool street sex workers describe teeth that still mark them after detox
- Frankfurt students rated zoos more harshly than conventional livestock farming
- Greek labels on an Adramytteion villa floor identify a cat as Emerald and a dog as Ocean
- Fifteen years of Parkes timing turned up three glitches in a pulsar filed as quiet
- Kyoto engineers buried the gate to keep a silicon carbide transistor controllable at 600 C
- Victoria prices 250,000 extra pothole repairs at about $1,408 each
- Indonesia's peat fires reached a tenth of 2015's emissions total in their first month
- Self-organizing bricks inferred which object they were part of from neighbour signals alone
- Malaysia closes 647 schools in Serian after its air index crossed 500
- Princeton's PACMAN saw a plasma instability coming 200 milliseconds ahead
- Isar Aerospace reaches orbit from Norway on Spectrum's second flight
- Blocking SET left glioblastoma cells more vulnerable to radiation in preclinical models