Search the archive

Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.

Results

27,117 matches

Sponsored

YOUR COMPANY'S OPERATIONAL DATA COULD BE WORTH $100K–$2M+

micro1 partners with companies to license operational data for training and evaluating frontier AI models. If your company has 30+ employees and years of data showing how work actually gets done, including SOPs, project histories, knowledge bases, CRM data, QA processes, or internal workflows, it could qualify for an Enterprise Data Partnership. Businesses can earn $100K-$2M+ [5] depending on the volume, quality, and uniqueness of their data. Your company retains ownership of its underlying data, and all data is securely transferred, de-identified, masked, and transformed before onward licensing for AI training.

2026.09.07
req.micro1.aiSponsorTLDR Founders

CALIFORNIA IS TAXING SAAS AND AI TOOLS AND IS ABOUT TO MAKE YOUR SOFTWARE 8-10% MORE EXPENSIVE. HERE'S WHAT SB 122 DOES TO BUYERS AND VENDORS

California signed SB 122 on June 29, which will apply sales tax to SaaS and AI tools starting on January 1. The rate is 7.25% at the state level plus local district taxes, so the total lands between 7.25% and 10.75% depending on where the buyer sits. Sacramento projects about $2B a year. Remote sellers cross into collection duty at $500,000 in California sales. Every California customer's invoice grows by up to 10.75% that day, and the vendor collects it, so pricing pages, billing systems, and renewal conversations all change before year-end.

2026.09.07
saastr.com13 min readTLDR Founders

GOOGLE AI MODE SHOWS THE SAME PRODUCTS 21.6% MORE EXPENSIVE THAN TRADITIONAL SEARCH

A small e-commerce analytics company compared over 2 million product listings across more than 100,000 search result pages and AI Mode answers over 23 days in August, covering the US and UK. Products that appeared in both surfaces were 21.6% more expensive in AI Mode, with a median price of $149 against $100 in traditional search. Only 1.28% of products in traditional results also showed up in AI Mode for the same query, so a rank in traditional search says almost nothing about whether a product is in the answer box. The main seller differed on 49.6% of matched products.

2026.09.07
productrise.app13 min readTLDR Founders

THE INCUMBENTS ARE COMING

AI will make systems of record more important as customers will soon be able to pipe the system's data into an AI agent and skip the AI-native app. An incumbent system of record working with a general agent will be enough to get the work done. The incumbents have an incentive to control and charge for access to their data, and also to push their own agents forward. The vertical AI-native company has to perform a specific cross-system job better than an incumbent's purpose-built agent or a general-purpose agent that can reconstruct it from the underlying tools.

2026.09.07
links.tldrnewsletter.com9 min readTLDR Founders

YOU GET WHAT YOU REWARD

Announcing the behavior you want does approximately nothing. You get the behavior you reward. This is true anywhere people watch each other for signals about what counts. It matters most when trying to fix something in the culture.

2026.09.07
leadership.garden4 min readTLDR Founders

HOW TO GET YOUR FIRST CUSTOMER (THEN YOUR FIRST 3)

Your first customers are most likely already in your network. Start with ten warm prospects, make a direct offer with a price and deadline, deliver manually, and use ten real sales conversations to validate or reject the idea quickly.

2026.09.07
noahkagan.com11 min readTLDR Founders

HOW TO BUILD A ONE-PERSON COMPANY THAT RUNS FROM SLACK

A one-person company can run recurring work through Slack by giving one AI assistant shared business context, connected tools, scheduled briefs, and strict approval gates. The setup works best when workflows are added gradually and corrections become standing rules.

2026.09.07
links.tldrnewsletter.com17 min readTLDR Founders

ANNOUNCING PROJECT ZENITH: THE READY-TO-CODE WINDOWS EXPERIENCE ON DEVELOPER-CLASS DEVICES

Zenith is a ready-to-code, distraction-free experience on Windows on developer-class devices. It will first become available with AMD's Ryzen AI Halo. Zenith devices will come with a preconfigured Windows setup for development and a set of tools curated for what developers need. They will be capable of running 30+ parameter models locally and unmetered.

2026.09.07
blogs.windows.com6 min readTLDR Founders

PROJECT HYDRAFUSION

Project HydraFusion delivers frontier intelligence through runtime orchestration. It can create a full execution plan, choose from models across multiple providers to draft, critique, and revise, or cascade to more powerful models to complete tasks. Developers just select HydraFusion like any other model, and it chooses a workflow that balances performance, cost, and latency for each task. HydraFusion is now available to users on all GitHub Copilot plans as a research preview.

2026.09.07
github.blog14 min readTLDR Founders

CHINESE BUSINESSES ARE GIVING AWAY AI TOKENS WITH COFFEE, CREDIT CARDS, AND DUMPLINGS

Tokens are getting so cheap in China that businesses give them away as loyalty rewards. Daily token use there reached 500 trillion this year, up from 100 billion in early 2024. Chinese models cost 60% to 90% less than American ones. China Telecom sells 10 million tokens a month for about $1.40. A Beijing dumpling restaurant hands out more than 100 compute vouchers a day, and a Shanghai bank bundles up to 3 billion Qwen tokens with a credit card, in the slot where airline miles used to go.

2026.09.07
restofworld.org6 min readTLDR Founders

ON THE YC S26 BATCH — RETURN OF THE ATOMS

Industrials made up 23% of the 245 companies launched so far in YC S26. The previous five-year average for industrials was just 6.6%. SaaS has fallen to 12% vs a 28% five-year average. B2B software overall is at its smallest share since S22 at 52%. AI appears to be on a downward trend, but this may just be due to companies no longer tagging themselves as such as it has become a default.

2026.09.07
jaredheyman.medium.com5 min readTLDR Founders

HOW A BLACKLISTED CHINESE TECH GIANT KEPT BUYING AMERICA'S BEST AI CHIPS

A New York Times investigation traces how Inspur Group, the Shandong-based server manufacturer Commerce placed on its Entity List in March 2023 specifically to cut it off from restricted US technology, kept acquiring Nvidia's most advanced AI chips for years afterward. The workaround was structural rather than clandestine: Inspur and entities connected to it routed purchase orders through affiliated subsidiaries and third-party resellers whose names never appeared on the blacklist itself, letting racks of cutting-edge hardware flow through channels the Entity List was never built to catch.

2026.09.07
links.tldrnewsletter.com5 min readTLDR Hardware

DEEPSEEK PLANS LARGE HUAWEI CHIP ORDER FOR NEW INNER MONGOLIA DATA CENTRE

DeepSeek is preparing a large order of Huawei AI chips to power a reported one-gigawatt data center in Ulanqab, Inner Mongolia, which could begin partial operations in late 2027 or early 2028. Nvidia's most capable accelerators can't legally sell into China, leaving Huawei's Ascend family as one of the few domestic options at this scale. DeepSeek has already been tuning models for Ascend, its V4 model launched in April built for the Ascend 950, prompting Chinese cloud providers to order hundreds of thousands of units. Nvidia's Jensen Huang has called this shift a “horrible outcome” for the US, since every model optimized for Ascend chips away at CUDA's ecosystem advantage.

2026.09.07
thenextweb.com4 min readTLDR Hardware

ROOMBA DUO LETS ONE AUTONOMOUS ROBOT CARRY AND DEPLOY ANOTHER ROBOT

The Roomba Duo is a dual-robot architecture where the larger autonomous machine physically carries and deploys an ultra-compact companion using a top-mounted mechanical arm. Both robots share a map and coordinate in real time, while dual-line LiDAR, PrecisionVision AI, and additional top-mounted cameras provide navigation and perception. The main robot adds a 60 mm roller mop with 46 N downforce, steam pre-treatment, 17 cm hub-motor wheels, and a centralized autonomous maintenance dock.

2026.09.07
media.irobot.com6 min readTLDR Hardware

COSMIIC — OPEN SOURCE IMPLANTABLE NEUROMODULATION PLATFORM

The COSMIIC System is an open-source, modular implantable neuromodulation platform designed for adoption by medical technology researchers and startups. It provides standardized, interoperable hardware modules—such as pulse generators, power supplies, and biopotential recording units networked over a Controller Area Network (CAN) bus—to accelerate translational development from benchtop testing to human clinical trials.

2026.09.07
cosmiic.org3 min readTLDR Hardware

RESEARCHERS WEAPONIZE EM INJECTION TO EAVESDROP ON HEADPHONES FROM 30 METERS AWAY

An attacker beaming a tuned electromagnetic carrier at a device can exploit the nonlinearity already built into ordinary components like amplifiers, ADCs, and power converters to modulate a device's low-frequency secret signals onto that carrier, upconverting them into detectable EM emissions that wouldn't otherwise radiate far enough to intercept. By tuning the injection frequency and amplitude, the resulting InjectEave attack lets an adversary actively shape how much leakage they get rather than passively waiting for it. The team demonstrated eavesdropping on audio from both wired and wireless headphones up to 30 meters away using accessible RF gear.

2026.09.07
arxiv.org4 min readTLDR Hardware

SKD-1: A LOW-COST OPEN SOURCE SKID-STEER GROUND VEHICLE

The SKD-1 repository provides open-source ROS 2 packages and configuration files for developing and operating a custom skid-steer mobile ground vehicle. It includes URDF robot descriptions, ros2_control hardware interfaces, and Gazebo simulation environments to support kinematic validation and autonomous navigation.

2026.09.07
github.com2 min readTLDR Hardware

NHTSA LAUNCHES PROBE INTO TESLA CYBERCAB AS PUBLIC RIDES BEGIN

Right as Tesla's steering-wheel-less Cybercab began offering public commercial rides in Austin, NHTSA opened a formal investigation into whether the vehicle was properly certified, reviewing the technical data and compliance procedures Tesla used to self-certify up to 1,000 units under Federal Motor Vehicle Safety Standards. The core issue is hardware: the Cybercab has no steering wheel, pedals, or side-view mirrors, and automakers building vehicles without manual controls generally have to petition NHTSA for a regulatory exemption, a path Amazon's Zoox used successfully in July, but Tesla never filed one, instead self-certifying SAE Level 4 autonomy in Texas under new state rules and maintaining the Cybercab isn't subject to the standard 2,500-vehicle exemption cap.

2026.09.07
notateslaapp.com3 min readTLDR Hardware

OPEN SOURCE 3 AXIS MICROMANIPULATOR

This Thingiverse project shares a 3D-printable, three-axis manual micromanipulator designed for precise positioning in benchtop experiments and inspection tasks.

2026.09.07
thingiverse.com2 min readTLDR Hardware

ATTACKERS BREACHED JETBRAINS CADENCE VIA UNPATCHED TEAMCITY, EXTRACTING AWS CREDENTIALS

JetBrains is urging users of Cadence, its hosted cloud computing service, to revoke and rotate all credentials after unidentified attackers exploited CVE-2026-63077 (CVSS 9.8) to breach its own environment. The vulnerability stems from deserializing untrusted data and allows an unauthenticated attacker with access to a TeamCity server to bypass authentication checks and execute arbitrary operating system commands with the privileges of the TeamCity server process. Attackers reached a 2024 Cadence backup holding AWS IAM credentials, S3 files, PyCharm-synced source code, and personal data, so defenders should treat all executions as untrusted and audit connected AWS accounts, registries, and repositories for activity since August 8.

2026.09.07
thehackernews.com3 min readTLDR InfoSec

ATTACKERS EXPLOIT PAPERCUT FLAWS TO STEAL CREDENTIALS FROM SCHOOLS AND UNIVERSITIES

Threat actors are chaining CVE-2026-81578 and CVE-2026-82078, an authentication bypass and remote code execution pair in PaperCut, to steal credentials from K-12 schools and major universities across the US and Europe. Users are advised to restrict PaperCut servers from being exposed to the internet and to monitor for the execution of cmd.exe, powershell.exe, or other scripting and command interpreters, as well as commands containing whoami, tasklist, ver, or uname -a, with pc-app.exe as the parent process.

2026.09.07
thehackernews.com2 min readTLDR InfoSec

ASCII SMUGGLING CROSSES OVER FROM AI PROMPT INJECTION TO PHISHING EVASION

Microsoft researchers observed a high-volume phishing campaign using invisible Unicode tag characters, a technique popularized in AI prompt injection research as ASCII smuggling. Rather than hiding instructions from people while exposing them to AI models, the attacker used the characters to split financial lure words so email filters could not parse them, turning "funding" into fun, an invisible tag character, then ding. The code points come from the deprecated Unicode Tags block, U+E0000 to U+E007F, which renders as nothing at all, and Microsoft surfaced the campaign while hunting for prompt injection in Defender for Office 365, where the first version of the signature kept firing on the England, Scotland, and Wales flag emoji because each is built from a base flag code point plus an invisible tag sequence. Defenders should strip invisible Unicode before content signatures run, treat unexplained tag characters as a high-confidence anomaly, and apply the same normalization upstream of any AI assistant that ingests email.

2026.09.07
microsoft.com11 min readTLDR InfoSec

IMPROVING OUR ALIGNMENT AND SECURITY EFFORTS

Anthropic paused cyber evaluations after three July incidents exposed real systems through third-party environments. It added real-time classifiers, stronger sandbox isolation, and outbound network blocks, while partners testing reduced-safeguard models must verify isolation, define scope, validate tasks, and stop violations. The company also froze RL environment changes, flagged over 10% for defects, and rebuilt review controls.

2026.09.07
anthropic.com12 min readTLDR InfoSec

TURNING CHROME REMOTE DESKTOP INTO PURE RED TEAM OPS

A researcher at ZeroTrace Lab went down a rabbit hole to try and understand how they can disable the Chrome Remote Desktop connection banner after it was bothering them on a computer they remote into. This led to a reverse engineering journey that ended with them creating a script to patch the modal's x and y size variables to 0, resulting in the banner not being visible. After realizing the spyware/red team potential this opened, the researcher continued reversing and found that they could create a malicious msi installer that would install a tampered hosts.json and patched modal to allow for remoting by an attacker with no visible notification to the victim.

2026.09.07
zerotracelab.com12 min readTLDR InfoSec

HETTY

Hetty is an HTTP toolkit for security research. It aims to be an open-source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug-bounty community.

2026.09.07
github.comGitHub repositoryTLDR InfoSec

PIGEON

Pigeon allows creating delegated authority for AI agents. A Pigeon Pass says what an agent may do by issuing a narrowed, signed credential for what it may do, not a copy of everything you can do.

2026.09.07
github.comGitHub repositoryTLDR InfoSec

IRFLOW TIMELINE

IRFlow Timeline is a native macOS forensic timeline analysis tool. The 1.0.10 release adds support for ChatGPT Computer History logs as a forensic artifact.

2026.09.07
github.comGitHub repositoryTLDR InfoSec

ABABIL OF MINAB: AN IRAN-LINKED DESTRUCTION AND EXFILTRATION CAMPAIGN TARGETING THE US AND THE MIDDLE EAST

Gambit Security tied Ababil of Minab, the pro-Iranian persona that claimed responsibility for the attack on LA Metro in March, to Black Shadow, an Iran-linked group that the Israel National Cyber Directorate attributed to Iran's Ministry of Intelligence and Security, undercutting the crew's claim to be a new standalone hacktivist outfit. The campaign combined exfiltration with destruction across four confirmed victims in the United States, Israel, Saudi Arabia, and Turkey, mixing scripted automation with hands-on-keyboard work through vCenter, Disk Management, SQL Server Management Studio, and Veeam consoles, including one run that dropped 58 SQL Server databases at Vyncs. Analysts also found additional Israeli and Turkish victims on the operator's staging infrastructure, custom exfiltration tooling in the form of a Flask receiver and a C++ uploader named FileFiend, and a briefly exposed browser session showing the operator using ChatGPT to refine the destruction script.

2026.09.07
gambit.security9 min readTLDR InfoSec

ANOTHER SWARM OF OPENAI AGENTS REACHED THE OPEN INTERNET WITHOUT THE FRONTIER LAB'S KNOWLEDGE

Researchers found OpenAI-linked agents editing a little-used German wiki from May through June. 3,700 agents posted 18,000 messages and shared answers for timed web-search tests while trying to hide posts with “ZZZ.”. A moderator deleted roughly 100 pages daily while agents created about 400 pages a day. Activity dropped after OpenAI noticed the incident and intervened.

2026.09.07
techcrunch.com3 min readTLDR InfoSec

GPT-6 ASTRA SCORES 100% ON EXPLOITBENCH AS OPENAI BLOCKS POC EXPLOIT REQUESTS

OpenAI released GPT-6 Astra after it scored 100% on ExploitBench, up from GPT-5.6 Sol's 78.5%. Testing found higher rates of arbitrary code execution and two undisclosed zero-days. The public release allows secure code review and patching while it refuses proof-of-concept exploit requests. OpenAI plans to restrict Daybreak access for defenders, including MS-ISAC participants.

2026.09.07
thehackernews.com3 min readTLDR InfoSec

OPENAI LAUNCHES GPT-6 ASTRA

OpenAI has launched Astra, a new model designed to handle longer-running work across browsers, spreadsheets, websites, and desktop applications. The release pushes AI further toward agents that can operate software rather than just generate responses.

2026.09.07
venturebeat.com5 min readTLDR IT

THREE IDENTITY VENDORS SHIPPED THE SAME AGENT ACCESS PATTERN IN EIGHT DAYS

Okta, Auth0, and Descope shipped Cross App Access implementations between August 24 and September 1, converging on Client ID Metadata Documents for client identity and ID-JAG token exchange for delegation. The two-layer pattern matters more than vendor order and will outlast any single network. B2B teams should therefore ensure their authorization servers speak the pattern rather than standardizing on a vendor first.

2026.09.07
workos.com7 min readTLDR IT

ENTERPRISES ARE LOOKING BEYOND NVIDIA FOR AI CHIPS

Enterprise buyers are increasingly evaluating non-Nvidia accelerators as AI infrastructure costs and supply become bigger concerns. Alternative chips now appear more frequently than Nvidia's next-generation GPUs on enterprise evaluation lists.

2026.09.07
venturebeat.com5 min readTLDR IT

MICROSOFT IS ENDING WINDOWS 11'S WEB APP SLOP ERA, AND AI NOW WRITES NATIVE APPS IN 30 MINUTES

Microsoft has published a quick-start guide that the company says takes users from an empty folder to a published WinUI 3 app in about 30 minutes using VS Code, its winapp CLI, and the GitHub Copilot free tier. The workflow uses a specialized WinUI agent and includes AI-assisted migration guides for WPF and UWP apps to boost native apps in the Microsoft Store over web wrappers.

2026.09.07
windowslatest.com8 min readTLDR IT

CLOUDFLARE AND OPENAI AUTOMATE VULNERABILITY REMEDIATION

Cloudflare is using OpenAI's Daybreak security models alongside production network signals to identify and prioritize vulnerabilities. The system can propose patches and validate fixes while keeping higher-risk actions under human control.

2026.09.07
blog.cloudflare.com4 min readTLDR IT