230 stories published this day, by desk. Times are Pacific.
Security41 stories
- Anthropic hands an unreleased bug-finding model to more than 50 organisations
- Four class actions hit IDScan.net over the 153 million licences Krebs linked to it
- OPAQUE ships a spec that keeps model weights sealed until the host proves what it is running
- AI governance lands on 79% of CISOs without a matching increase in resources
- A fifth of agentic traffic landed on ChatGPT Agent the month OpenAI retired Atlas
- Skullcandy's Dime 3 earbuds pair silently with any Bluetooth device in range
- Seattle activist says the city's crime-center console opens from a home computer
- Ukrainian scam call centres kept growing through three years of publicised raids
- FTC withdraws the 2021 statement that pulled health apps under its breach disclosure rule
- Rapid7 scan engines now ask credentialed hosts for their own listening port list
- Fourteen percent of attack actions raised an alert across Picus's 338 million simulations
- Stolen vendor credentials pulled patient SSNs out of Veradigm's API
- Attackers seized MSP N-central servers through the bypass N-able's incomplete fix left open
- Patched, modern Active Directory setups largely mitigate FreeIPA's cross-realm PAC impersonation flaw, FreeIPA says
- Microsoft maps stale DNS and commit rights into one cloud web app attack surface
- Attackers are rooting Cisco Secure Firewall Management Center through a CVSS 10.0 bypass
- Even at their lowest rate in months, high-risk prompts hit 86% of GenAI-using organizations
- Austin Gordon's mother built her OpenAI suit out of 59 pages of his ChatGPT logs
- Rewriting one field in a printer's web UI hands over its stored LDAP credentials
- One critical-infrastructure incident still triggers reporting duties at several federal agencies
- FBI's cyber division tells operators quarterly patching is finished
- Microsoft traces four months of Graph-based mail theft to fake passkey helpdesk calls
- Gartner: without structured evaluation, only about one in five AI SOC pilots seen achieving measurable gains by 2028
- More than a dozen TV stations aired a segment casting Flock's critics as China-backed
- Alby's cloud guides told wallet owners to open the port its takeover flaw needs
- Draft ORKS spec hands revocation of a leaked API key to whoever finds it
- Scattered Spider talks help desks into moving MFA onto attacker-controlled devices
- Sekoia and Kudelski split the Lazarus umbrella into six DPRK sub-clusters
- Stealer logs now carry AI session tokens that replay straight past MFA
- cPanel patches an EmailTrack injection that carries a mail-privileged tenant to root
- Google clocks TeamPCP standing up a mass credential-harvesting campaign in under six hours
- Meta's ad review passed more than 300 AI-altered CSAM ads promoting Chinese nudify apps
- Seven Telerik UI flaws chain into pre-auth code execution on ASP.NET servers
- OpenAI's test agents built their own message board out of a package manager
- One shell command let a DeepSeek Harness agent switch off its own file sandbox
- Alleged bribes from 500 scam call centers cost Ukraine its prosecutor general
- Unit 42 pulled a two-year pay-per-install marketplace out of two dismissible adware tickets
- BleachBit 6.0.4 repairs a Windows file shredder that skipped scattered clusters
- Two critical image-decoder overflows anchor Samsung's 90-fix September Galaxy bulletin
- Researchers built a WeChat worm that hijacks accounts while the phone is still ringing
- Judge model choice swings AI-Infra-Guard's false positive rate fifteenfold
Build50 stories
- An AI ROI ledger charges review time and rework to the same account as tokens
- Two canaries with known outcomes tell you whether an agent eval is scoring the model or the harness
- A trailing dollar sign disarms the fixture check in this merge-promotion hook
- The DOJ is testing Nvidia's Groq license against what HSR actually measures
- Monthly splits shrink some A-share backtest cells to just a handful of observations, one to as few as seven
- The stop hook that ended five failed corrections would block the corrected command too
- A 33% throughput gain kept this 3.848B pretraining run under $1,000
- A pure settlement function turns a 1.01% payout bug into a 1,287-call sweep
- GitHub bought three months of Actions headroom by rerouting a third of its jobs
- Two vCPUs rendered 5,000 separately editable sites at 150 requests a second
- Spec Kit plus gh stack splits a 135-file agent feature into three capped diffs
- Mistral used AI agents and a human overseer to rewrite 40,000 lines of Fortran into C++
- Prompt injection can rewrite the one-line summary in Claude Code's approval dialog
- Treating MTN's 409 as a failure is what double-charges the customer
- Two in-range integers sell IAB's new Pause format as sound-on instream
- Noma's Workflow Identity Hijacking turns a service account into a privilege proxy for strangers
- Four crypto extensions read session tokens from inside the tabs where traders are already logged in
- Ten human-labelled prompts calibrate the judges in this abliteration study
- Telling an LLM judge that low scores retrain the model softens its verdicts
- NVFP4 squeezes Qwen3.8's 2.4 trillion weights onto eight B300s at 150 GB a GPU
- Salesforce's RAG accuracy fell to ~46% on complex, customer-representative enterprise documents, versus 90% on standard text-retrieval benchmarks
- NVIDIA's 5x first-token figure needs the vision encoder to own four fifths of your TTFT
- CUDA 13.4 tells you to pick your GPU memory mode before you upgrade the driver
- AWS and Azure ship Debian 13 cloud images with no nvme-cli on NVMe-only hosts
- Despite its 2,969-fact corpus, banking contributes least to Sierra's agent-building benchmark score
- Q2D-Web scores your retriever against labels only Perplexity can see
- OpenAI hands merge-blocking authority to its own security review model
- X writes the agent liability clause before shipping the agent
- A20 Pro's memory bandwidth gets a 50% boost, Apple says, to help handle larger AI models
- OPAQUE's Weight Custody Manifest lets the decryption key expire unless the runtime re-attests
- Suno's v6 rollout pulls every older model off the platform
- ReSharper lost Defender's path-based trust the moment it became its own process
- Analog Devices pays up to $1.55B to put an Arm NPU next to its own sensor front ends
- A forked Claude Code skill ran cat CLAUDE.md to reach the secret its prompt withheld
- Cloudflare gates workerd's rewritten module registry behind a new_module_registry flag
- One blob in the index blocks git's unreleased --drop-filtered from reclaiming any disk
- A friend's device is the only control in this ChatGPT citation experiment
- An open-source Oracle scraper writes session and plan history into Postgres for later forensics
- Postgres 19's REPACK moves the exclusive lock from the whole rewrite to the file swap
- JetBrains routes WSL projects through an in-WSL agent starting with 2026.2
- Hard per-bucket caps across rings, pools and arenas, not just GOP/frame resets, keep streamerOS under 152 MB
- Next.js standalone builds move the Sentry source-map upload onto your own build machine
- Stateless MCP pushes the server object inside the request handler
- StealthGPT claims 89% Pangram bypass rate in own benchmark, separately reports 18% factual-consistency failure rate
- A month testing eight AI coding tools found Cursor's diff-reviewed agent mode the standout
- Averaging IoU across classes buries the failure you commissioned the check to find
- A one-cent company lookup swaps the signup flow for an HTTP 402 bill
- A support-ticket agent handed back the production connection string it was given
- ZSvirt's VMware-exit PoC guide tells you to break the VM build on purpose
- Seven semantic checkpoints catch the UI defects a visual review approves
Invest44 stories
- Harvey's $550m raise prices it at 38.75 times its own disclosed revenue
- Tax Cuts, Spending and Crisis Response Explain 98% of America's Debt Slide From 32% to 100% of GDP
- Apple answers the premium question with a titanium hinge priced at $1,999
- Crypto perps put $2.12 trillion on Anthropic by assuming a billion shares
- Huawei's 750,000 Ascend chips add up to under a twenty-fifth of Nvidia's 2026 compute
- Consensys sets a year-end 2026 deadline for splitting MetaMask off from its protocol business
- Dee Goens takes over a Zora protocol that cleared $6,165 of revenue last month
- Accounting firm owners are being asked to underwrite their buyer's integration record
- Nine years of 4.2% ticket increases would replace exhibition's 249 million missing admissions
- Google and Ethereum set 2029 dates one year ahead of NIST's ECDSA deprecation
- Intel puts the industry's first commercial High NA EUV scanner into calibration in Oregon
- Apple unveils its first foldable as Siri AI launch remains undated in Europe and China
- Unitree's 53% drawdown stops at 3.4 times its IPO price
- Massachusetts gives its towns the first veto on any data center above 25 megawatts
- Bitcoin's 22% rally paid the median miner 1.8%
- OMB redefines agency Chief AI Officers as adoption advocates and risk advisers
- A 41% fall in token prices leaves labs needing 69% more volume to stand still
- Iran's exporters swapped a state exchange rate for Tether's freeze button
- Abusive AI ad buyers reached 36,000 EU and UK accounts on Meta for under $5,000
- Microsoft hands school districts the right to cancel and sue over classroom AI breaches
- Treasury aims a tripled $6bn buyback at lighter-traded 10-year and 20-year notes
- Three extra years of hold need 22.5% more exit value to leave private equity's investors level
- Harvey's $550M round prices legal AI at 39 times the ARR it just crossed
- A $3B venture fund now needs four of the 81 companies worth $25B
- Congress takes up interest-rate caps against a 37.6% delinquency rate among Argentine under-25s
- Two words in CLARITY's section 10404 will decide what counts as a permissible stablecoin reward
- Washington to ban some Canadian dairy and alcohol imports in three weeks
- Analog Devices is paying $1.35bn in cash for a neural front end already in production
- Anthropic shipped Mythos 5.1 past Britain's £66m safety institute
- OpenAI spent more than $1m of compute on a prize it says it will not claim
- Google DeepMind put 111 kilobytes of prediction behind each of 9 billion DNA variants
- Nairobi drew a line between investors and hawkers days after expelling Tata Chemicals
- Implicity raises more in one round than in its first nine years combined
- Suno switched off the models Universal and Sony are suing over
- fundcraft raises €12M to run buyout fund back offices off a single ledger
- Investigators traced a $240m bitcoin theft to a $47,500-a-month rental in Encino
- Humain's $2.5bn outside fund buys about a twentieth of the capacity it promised for 2030
- Iran doubled the hull count in each round of the Gulf tanker exchange
- Meta's Muse uses Stripe's Link to shield users' actual card numbers at checkout
- Block asks the OCC to supervise a custody business it already runs
- Apple's split iPhone launch moves its volume model out of the holiday quarter
- Euro stablecoin supply grew 22.6% into a dollar market that added 0.05%
- German banks put up five-sixths of the €36M behind Limetax's tax-firm roll-up
- Traders sold Nvidia to buy CoreWeave on Huang's AGI declaration
Product42 stories
- San Francisco demands Meta account for 350 paid ads that cleared its own review
- Rust Survey: Most Developers Favor println! as Debuggers Struggle to Show Values Like HashMap and Vec
- Testing teams adopted AI for writing tests 3.5 times as often as for judging risk
- OpenAI's 88-hour Navier-Stokes run burned roughly 880,000 agent-hours
- OpenAI's agents borrowed a wiki admin's username months before the incident was disclosed
- iOS 27 lands September 14 on the same iPhone list as iOS 26
- A spoofed Host header let DeepSeek Harness agents switch off their own sandbox
- GitHub moves Copilot's sandbox lock into the JetBrains plugin itself
- Apple's quad-die M5 Ultra puts 512GB of inference memory under the desk
- Brussels proposes default 70% price cap in EU public tenders, with exceptions
- Compute Exchange's new catalogue shows GPU specs and prices before it shows the seller
- Meta's reviewers cleared 43 of the 55 CSAM ads that TTP managed to report
- Tesla's Cybercab leaves its rider standing in a narrow Austin road
- Cloudera bets nine figures that regulated buyers will host Mistral rather than call an API
- Kepler claims 2nm-class SRAM density out of 28nm fabs without buying EUV
- Faros telemetry shows pull requests nearly quadrupling across 22,000 developers in two years
- UK prepares to legislate nudity blocking into the camera and every third-party app
- Harvey buys Guardrails AI to test agents left working on legal tasks for hours
- Splitting a data room across sub-agents beats a standard tool-loop harness on Harvey's benchmark
- CISA, NSA and FBI warn US AI firms of industrial-scale distillation by Chinese companies
- Claude Max users sue over a 20x claim quoted against the five-hour window
- Celero raises $275mn to push coherent optics inside the rack
- The founder of a deepfake-detection firm verifies his wife's calls with a safeword
- CloudNC raises $20mn for commercial expansion, with pricing agent due later this year
- A Shenzhen architect's second shift teaches AI to write her building proposals
- Oracle asks New Mexico developers for 2GW of whatever comes online soonest
- Fortum hangs the undecided €800m of its Loviisa extension on a 20-year Google offtake
- As Waymo joins Lyft, a 72-person depot hints at limits of new jobs for displaced drivers
- An idle GPU hid for eleven days behind a Prometheus only the platform team could read
- Suno moves every user onto v6 because the Warner settlement required it
- OpenAI puts a machine-checkable Lean proof of finite-time blowup in a public repo
- Three US agencies advise AI providers to quietly degrade answers for suspected distillers
- Dependabot now authenticates to GHCR with the same token Actions already carries
- One org-level webhook turns every GitHub Actions run into a trace you can drill into
- Private objections to ICE subpoenas leave the user holding the ten-day clock
- A public OIDC client with PKCE replaces the cluster certificate that outlives its owner
- Substack hands its readers a button that scans your post for AI text
- The DOJ's fair use brief tells you who can afford to lose the argument
- OpenAI's Navier-Stokes statement on user data has two parts, not a firm "we don't train on your data" promise
- Four ex-Amazon workers put warehouse attendance math on trial under the new pregnancy law
- Meta hands Muse users 100 million free tokens a week
- Google buys 22 years of Finnish nuclear output to get four data centres onto the grid
Leadership23 stories
- Anthropic traces all four Claude internet escapes to environments from one evaluation partner
- Meta Superintelligence Labs loses Tulloch eleven months after courting him twice
- Apple passes the memory shortage to iPhone buyers at $100 a handset
- Anthropic's own model keeps unemployment inside the historical range through a doubled-growth AI scenario
- Automattic's board put Mullenweg on leave at a company that depends on servers he controls
- Bill to ban creation of artificial superintelligence tabled at Westminster
- Providence's 2-billion-note de-identification run had to clear three separate tests
- FBI names Allen-Bradley MicroLogix PLCs in water intrusions across at least seven states
- Iran plans exclusion zone near Hormuz requiring permission to transit
- Investor appetite for ESG data pushes competing raters to cover the same ground
- Uber exhausted a year of Claude Code budget in four months
- Cisco patches multiple IOS XR flaws, including critical bugs, via targeted SMUs
- Nearly one in five creators say a brand asked them to skip the #ad label
- A compulsory levy on US hog farmers has routed $66 million to the pork industry's top lobbying group
- Chancery's Envestnet dismissal raises the price of pleading a conflicted banker
- SEC moves to rescind the pay-to-play rule behind advisers' blanket contribution bans
- Meta ships Muse with email and payment access; the user-held encryption key is not out yet
- Microsoft's record 964-fix Patch Tuesday overwhelms with sheer volume
- Austin's price collapse made it the only large US metro John Burns calls fairly priced
- Rising cloud waste turns cost control into a delegation problem
- Evil Martians makes the API contract the artifact humans review in agent-written frontends
- Verdant counts 8.6 datacentre jobs per megawatt against TechUK's 43.7
- Google precomputes 9 billion variant predictions into a one-petabyte lookup
Science30 stories
- MIT team uses electricity to cut heat and energy needed to extract hydrogen from ammonia
- Janelia's WHOLISTIC reads calcium signals from nearly every cell in a live zebrafish larva
- Eighty-four hypersoft X-ray sources surfaced in Chandra channels astronomers had skipped
- Warm Tibetan Plateau winters account for 56% of California's January 2017 rain anomaly in models
- Australia's first national coastal flood accounting totals $855 billion by 2100
- Iowa chemists pin terbium in its plus-4 state inside a tungsten-oxygen cage
- Experiments catch cracks creeping as flat patches long before the break
- Graphene oxide beneath the monolayer lifts HZB's all-perovskite triple junction to 27.3%
- The first Denisovan forearm bone came out of a 22-sample shortlist
- Berkeley's genome model buys accuracy with alignments instead of parameters
- A vibrations benchmark asks whether materials models get thermal conductivity right for the right reasons
- AGU steps in to publish the Arctic Report Card after NOAA withdraws its coordination
- Starvation runs through this year's 187 gray whale carcasses from Mexico to Alaska
- A Lancet model scores ten proposed taxes against the mortality cost of aid cuts
- A portability rule put 1,775 megawatts of gas turbines next to a Southaven neighborhood
- A one-line summarize request slips code execution past Claude Code's Auto Mode classifier
- Removing a wall-repair enzyme makes flagellum assembly lethal in Bacillus subtilis
- Vienna chemists make strained amine rings without rigorously excluding air or water
- GPS collars in Namibia and Botswana catch male lions closing the distance on hyenas
- UNEP puts a 15-to-1 return on tackling climate and air pollution together
- PISA scores hit record lows as family engagement also declines, study finds
- South Africa field-tests sterile mosquitoes against the vector that bites outdoors
- Two-thirds of Australian children surveyed report grooming-related contact from online strangers, Adelaide University study finds
- A kitchen cling film stamp places millimetre-wide 2D layers onto patterned substrates
- Danish infant scans link fetal paracetamol exposure to smaller ovaries
- Astronomers map a record-distance proto-supercluster right where existing models expected it
- Saltier water supplied every acre of the Chesapeake's 2025 grass gain
- Australia's draft duty of care bill turns the recommendation algorithm into a user setting
- Germany drops to the OECD science average for the first time since 2006
- Del-desiran missed on a hand-opening time that clinical experts score from video