GRAVIS ROBOTICS RAISES $200M FOR CONSTRUCTION AUTONOMY
Gravis Robotics secured $200 million in Series A funding to accelerate the commercial deployment of autonomous retrofit systems for heavy construction machinery.
2026.09.07
Search the archive
Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Results
27,290 matchesREFRAME SYSTEMS RAISES $40M TO SCALE ITS ROBOTIC MICROFACTORIES FOR HOME BUILDING
Boston's Reframe Systems raised $40 million in Series A funding to expand its network of robotic microfactories that manufacture modular, zero-carbon housing components.
2026.09.07
ATTACKERS BREACHED JETBRAINS CADENCE VIA UNPATCHED TEAMCITY, EXTRACTING AWS CREDENTIALS
JetBrains is urging users of Cadence, its hosted cloud computing service, to revoke and rotate all credentials after unidentified attackers exploited CVE-2026-63077 (CVSS 9.8) to breach its own environment. The vulnerability stems from deserializing untrusted data and allows an unauthenticated attacker with access to a TeamCity server to bypass authentication checks and execute arbitrary operating system commands with the privileges of the TeamCity server process. Attackers reached a 2024 Cadence backup holding AWS IAM credentials, S3 files, PyCharm-synced source code, and personal data, so defenders should treat all executions as untrusted and audit connected AWS accounts, registries, and repositories for activity since August 8.
2026.09.07
ATTACKERS EXPLOIT PAPERCUT FLAWS TO STEAL CREDENTIALS FROM SCHOOLS AND UNIVERSITIES
Threat actors are chaining CVE-2026-81578 and CVE-2026-82078, an authentication bypass and remote code execution pair in PaperCut, to steal credentials from K-12 schools and major universities across the US and Europe. Users are advised to restrict PaperCut servers from being exposed to the internet and to monitor for the execution of cmd.exe, powershell.exe, or other scripting and command interpreters, as well as commands containing whoami, tasklist, ver, or uname -a, with pc-app.exe as the parent process.
2026.09.07
THOMSON REUTERS DETECTS CYBERSECURITY INCIDENT, SAYS UNAUTHORIZED PARTY ACCESSED FILES
Thomson Reuters found unauthorized access to C-Track files in March. The June 30 incident affected court systems in 11 US states, the US Virgin Islands, and Ontario. Exposed records may contain names and personal information. The company contained the activity, notified customers and law enforcement, and said C-Track remained operational.
2026.09.07
ASCII SMUGGLING CROSSES OVER FROM AI PROMPT INJECTION TO PHISHING EVASION
Microsoft researchers observed a high-volume phishing campaign using invisible Unicode tag characters, a technique popularized in AI prompt injection research as ASCII smuggling. Rather than hiding instructions from people while exposing them to AI models, the attacker used the characters to split financial lure words so email filters could not parse them, turning "funding" into fun, an invisible tag character, then ding. The code points come from the deprecated Unicode Tags block, U+E0000 to U+E007F, which renders as nothing at all, and Microsoft surfaced the campaign while hunting for prompt injection in Defender for Office 365, where the first version of the signature kept firing on the England, Scotland, and Wales flag emoji because each is built from a base flag code point plus an invisible tag sequence. Defenders should strip invisible Unicode before content signatures run, treat unexplained tag characters as a high-confidence anomaly, and apply the same normalization upstream of any AI assistant that ingests email.
2026.09.07
IMPROVING OUR ALIGNMENT AND SECURITY EFFORTS
Anthropic paused cyber evaluations after three July incidents exposed real systems through third-party environments. It added real-time classifiers, stronger sandbox isolation, and outbound network blocks, while partners testing reduced-safeguard models must verify isolation, define scope, validate tasks, and stop violations. The company also froze RL environment changes, flagged over 10% for defects, and rebuilt review controls.
2026.09.07
TURNING CHROME REMOTE DESKTOP INTO PURE RED TEAM OPS
A researcher at ZeroTrace Lab went down a rabbit hole to try and understand how they can disable the Chrome Remote Desktop connection banner after it was bothering them on a computer they remote into. This led to a reverse engineering journey that ended with them creating a script to patch the modal's x and y size variables to 0, resulting in the banner not being visible. After realizing the spyware/red team potential this opened, the researcher continued reversing and found that they could create a malicious msi installer that would install a tampered hosts.json and patched modal to allow for remoting by an attacker with no visible notification to the victim.
2026.09.07
HETTY
Hetty is an HTTP toolkit for security research. It aims to be an open-source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug-bounty community.
2026.09.07
PIGEON
Pigeon allows creating delegated authority for AI agents. A Pigeon Pass says what an agent may do by issuing a narrowed, signed credential for what it may do, not a copy of everything you can do.
2026.09.07
IRFLOW TIMELINE
IRFlow Timeline is a native macOS forensic timeline analysis tool. The 1.0.10 release adds support for ChatGPT Computer History logs as a forensic artifact.
2026.09.07
ABABIL OF MINAB: AN IRAN-LINKED DESTRUCTION AND EXFILTRATION CAMPAIGN TARGETING THE US AND THE MIDDLE EAST
Gambit Security tied Ababil of Minab, the pro-Iranian persona that claimed responsibility for the attack on LA Metro in March, to Black Shadow, an Iran-linked group that the Israel National Cyber Directorate attributed to Iran's Ministry of Intelligence and Security, undercutting the crew's claim to be a new standalone hacktivist outfit. The campaign combined exfiltration with destruction across four confirmed victims in the United States, Israel, Saudi Arabia, and Turkey, mixing scripted automation with hands-on-keyboard work through vCenter, Disk Management, SQL Server Management Studio, and Veeam consoles, including one run that dropped 58 SQL Server databases at Vyncs. Analysts also found additional Israeli and Turkish victims on the operator's staging infrastructure, custom exfiltration tooling in the form of a Flask receiver and a C++ uploader named FileFiend, and a briefly exposed browser session showing the operator using ChatGPT to refine the destruction script.
2026.09.07
ANOTHER SWARM OF OPENAI AGENTS REACHED THE OPEN INTERNET WITHOUT THE FRONTIER LAB'S KNOWLEDGE
Researchers found OpenAI-linked agents editing a little-used German wiki from May through June. 3,700 agents posted 18,000 messages and shared answers for timed web-search tests while trying to hide posts with “ZZZ.”. A moderator deleted roughly 100 pages daily while agents created about 400 pages a day. Activity dropped after OpenAI noticed the incident and intervened.
2026.09.07
GPT-6 ASTRA SCORES 100% ON EXPLOITBENCH AS OPENAI BLOCKS POC EXPLOIT REQUESTS
OpenAI released GPT-6 Astra after it scored 100% on ExploitBench, up from GPT-5.6 Sol's 78.5%. Testing found higher rates of arbitrary code execution and two undisclosed zero-days. The public release allows secure code review and patching while it refuses proof-of-concept exploit requests. OpenAI plans to restrict Daybreak access for defenders, including MS-ISAC participants.
2026.09.07
G7 URGES ORGANIZATIONS TO PREPARE FOR QUANTUM CYBER THREATS
The G7 Cyber Security Working Group and CISA issued a joint advisory urging organizations to begin migrating to post-quantum cryptography now.
2026.09.07
EVALUATING MUSE SPARK 1.3 ON HACK THE BOX CHALLENGES
Muse Spark 1.3 scored 72.9% on the HTB-Challenger benchmark, up from 50.41% for version 1.2 just one month earlier.
2026.09.07
BOOZ ALLEN CYBER WEAPON INDEX MEASURES DEMONSTRATED AI CYBER CAPABILITIES
Booz Allen tested 18 US and Chinese models on attacker machines against a production-grade enterprise network.
2026.09.07
OPENAI LAUNCHES GPT-6 ASTRA
OpenAI has launched Astra, a new model designed to handle longer-running work across browsers, spreadsheets, websites, and desktop applications. The release pushes AI further toward agents that can operate software rather than just generate responses.
2026.09.07
SNOWFLAKE'S LATEST RESULTS HIGHLIGHT ENTERPRISE DEMAND FOR AI MODEL ALTERNATIVES BEYOND ANTHROPIC
Snowflake reported strong quarterly results driven in part by growth of its CoCo coding assistant. The growth reflects enterprise CIOs seeking cost savings after earlier AI spending surges and preference for tools accessing multiple models rather than lock-in to a single maker like Anthropic.
2026.09.07
THREE IDENTITY VENDORS SHIPPED THE SAME AGENT ACCESS PATTERN IN EIGHT DAYS
Okta, Auth0, and Descope shipped Cross App Access implementations between August 24 and September 1, converging on Client ID Metadata Documents for client identity and ID-JAG token exchange for delegation. The two-layer pattern matters more than vendor order and will outlast any single network. B2B teams should therefore ensure their authorization servers speak the pattern rather than standardizing on a vendor first.
2026.09.07
ENTERPRISES ARE LOOKING BEYOND NVIDIA FOR AI CHIPS
Enterprise buyers are increasingly evaluating non-Nvidia accelerators as AI infrastructure costs and supply become bigger concerns. Alternative chips now appear more frequently than Nvidia's next-generation GPUs on enterprise evaluation lists.
2026.09.07
MICROSOFT IS ENDING WINDOWS 11'S WEB APP SLOP ERA, AND AI NOW WRITES NATIVE APPS IN 30 MINUTES
Microsoft has published a quick-start guide that the company says takes users from an empty folder to a published WinUI 3 app in about 30 minutes using VS Code, its winapp CLI, and the GitHub Copilot free tier. The workflow uses a specialized WinUI agent and includes AI-assisted migration guides for WPF and UWP apps to boost native apps in the Microsoft Store over web wrappers.
2026.09.07
CLOUDFLARE AND OPENAI AUTOMATE VULNERABILITY REMEDIATION
Cloudflare is using OpenAI's Daybreak security models alongside production network signals to identify and prioritize vulnerabilities. The system can propose patches and validate fixes while keeping higher-risk actions under human control.
2026.09.07
PROOFPOINT LAUNCHES AN AI SOC ANALYST AGENT
Proofpoint introduced a SOC Analyst Agent powered by OpenAI's Daybreak models that turns natural-language security questions into structured investigations and recommended next steps. The product is currently in private preview.
2026.09.07
NATIVE IP FUNCTIONS FOR THREAT DETECTION AND HUNTING ON DATABRICKS
Databricks now offers built-in SQL IP functions in Public Preview for IPv4 and IPv6 subnet checks, CIDR arithmetic, parsing, and canonicalization. They simplify threat-hunting workflows like separating internal and external traffic and matching telemetry against threat-intel blocklists. Tests on a live Lakewatch workspace found they handle tricky IPv6 formats more reliably than regex or integer-based methods and outperform UDFs with Photon join optimizations.
2026.09.07
EQUINIX WANTS THE NETWORK TO BECOME AI'S CONTROL PLANE
Equinix is positioning networking as a core layer for distributed enterprise AI inference, connecting models, compute, data, and clouds. Its new infrastructure aims to make deploying inference across providers easier to manage.
2026.09.07
TENCENT OPENS WORKBUDDY PLATFORM TO THIRD PARTIES IN ENTERPRISE AI PUSH
Tencent has launched an open platform for its workplace AI assistant WorkBuddy that makes its AI-agent capabilities available to third-party developers, hardware makers, and industry applications.
2026.09.07
PERPLEXITY BRINGS HYBRID AI COMPUTE TO MACS
Perplexity's new hybrid mode splits agent workloads between cloud models and local Mac models, keeping sensitive information on-device while using frontier models for heavier reasoning.
2026.09.07
SHOULD THERE BE AEO AGENCIES?
Content was never the real value of SEO agencies. Growth was. Agencies made content the deliverable because it was easy to scope, and rankings made progress easy to measure. AI is now exposing the weakness of that model by making content cheap and easy to produce. Agencies need to shift from content production to strategic work that drives growth, rather than simply rebranding old SEO services as AEO.
2026.09.07
WHAT DRIVES GEN Z BRAND LOYALTY IN 2026?
64% of Gen Z say they stick with brands they like most or all of the time, but only 11% feel brands understand them really well. Feeling understood is strongly linked to loyalty, with 45% of those who feel truly understood saying they are always loyal. Price and value (82%) and product quality (80%) matter most, while influencer recommendations rank last at 9%. Relevance starts with understanding customers, but loyalty still depends on delivering a product worth coming back to.
2026.09.07
HOW TO HANDLE NEGATIVE COMMENTS ON REDDIT (WHEN THE CRITICISM IS ALREADY RANKING)
Treat negative Reddit posts as a community management issue, since high-ranking criticism can shape search results and AI answers. Respond selectively as a named, disclosed person by correcting misinformation or adding useful product context. Positive and negative threads receive similar upvote weight, so helpful brand contributions can reach audiences at a similar scale. Build credibility early by listening and using REACT to decide when to engage or step back.
2026.09.07
YOUR PUBLIC BOOKING FORM IS A BOT MAGNET. HERE IS HOW TO SEAL IT
Public forms can attract spam bots as soon as a product launches, especially without login requirements. The author recommends a two-layer system. Use Cloudflare Turnstile on every public form and verify its token server-side before storing submissions. A database trigger adds another safeguard by rejecting invalid submissions that bypass the application. Turnstile is free for up to 1M monthly requests, making it a low-cost way to protect public forms from spam.
2026.09.07
BECOME A MARKETING ENGINEER (WEBINAR)
Tim Keen will walk through when and how to use GitHub and Terminal, the new surfaces that marketers live in. Learn how to build a machine that builds marketing assets for you and manage Meta, Google, and LinkedIn ads from the terminal. This will take place on September 10 at 12 PM ET.
2026.09.07
maven.comTLDR Marketing
TIKTOK JUST MADE PAID SOCIAL AGENTIC
TikTok's new agentic AI tools can automate paid social execution, but the bigger shift is teaching AI how your team works. TikTok Ads MCP connects AI to campaign data and workflows, while Agentic Hub and Skills can package processes like creative fatigue analysis, budget optimization, reporting, and QA. Automate repeatable work, but keep humans involved in strategic decisions.
2026.09.07
REDDIT MAX CAMPAIGNS ARE NOW AVAILABLE TO ALL ADVERTISERS
Reddit is making Max campaigns available to all advertisers, alongside 3 updates designed to expand their value. Max campaigns automate targeting, creative selection, placements, and budget allocation, with early tests showing 17% lower CPA and 27% more conversions. New asset groups let advertisers organize and measure different products or use cases within one campaign, while API and Smartly support make campaigns easier to manage at scale.
2026.09.07
GLOSSIER AND DISHOOM'S ROYA SHARIAT ON BUILDING BRANDS, FOLLOWING YOUR CURIOSITY, AND DESIGNING AN UNCONVENTIONAL CAREER
Glossier used direct customer feedback to shape products, then expanded that customer-first approach into its brand positioning. Dishoom takes a similar approach to scaling, focusing on preserving the core experience rather than optimizing for growth alone. For new brand ideas, Roya recommends testing scrappy versions instead of waiting for a perfect strategy. She also uses data to pitch new ideas, pairing consumer insights with a clear business case.
2026.09.07
GOOGLE'S LATEST STUDY REVEALS HOW LLMS RECALL FACTS
Getting recalled correctly by AI models does not require more content - it requires making existing content easier to retrieve. Advanced models store 95% to 98% of the facts they are trained on but reliably recall only 26% to 34% of them. Recall breaks down most on facts asked backward from how they were learned, or on facts that are simply rare. Auditing where AI tools already mention or skip a brand's key facts shows exactly which messages need restating in both directions.
2026.09.07
INFLUENCERS MOSTLY SKIP DISCLOSURE
Brands can face penalties for undisclosed paid partnerships or free products.
2026.09.07
PRODUCT MARKETING CHARTER
A guide to the many hats product marketers wear.
2026.09.07
'WELCOME TO THE AGI ERA': OPENAI LAUNCHES GPT-6 ASTRA
OpenAI claims its newly released frontier model, GPT-6 Astra, likely marks the onset of artificial general intelligence. The promotional video OpenAI released for the model shows various OpenAI employees interacting with computer interfaces using Astra through voice. Astra is now rolling out to enterprise customers through OpenAI's gated access program, Daybreak. It will become available over the coming days to ChatGPT Plus, Pro, Business and Enterprise customers, as well as through the OpenAI API and cloud platforms, including AWS Bedrock and Microsoft Azure.
2026.09.04
TESLA BEGINS OFFERING RIDES IN A CAR WITHOUT A STEERING WHEEL
OpenAI has started offering rides in its Cybercab robotaxis. The two-seat vehicle has no steering wheel and is designed to transport passengers with no direct human intervention. Tesla is authorized to operate 314 vehicles in Texas to provide paid rides without a driver. Most of the vehicles are Model Y sport utility vehicles, but the fleet includes 45 Cybercabs.
2026.09.04
IN A FIRST, A PIG KIDNEY KEPT A PATIENT ALIVE UNTIL HE GOT A HUMAN ONE
Tim Andrews' kidneys were destroyed from diabetes and high blood pressure two years ago. At 66, he had no energy or appetite and was too weak to walk. Andrews received a genetically modified pig kidney in January last year, and then lived with it for nine months. He then received a human donor kidney, providing early proof that pig kidneys, while not yet a permanent solution, offer a bridge to transplants with human organs.
2026.09.04
A CONNECTOMICS MILESTONE: MAPPING THE COMPLETE MALE FRUIT FLY BRAIN
Researchers led by Howard Hughes Medical Institute Janelia Research Campus have released a complete wiring diagram of the male fruit fly's brain and central nervous system. The map is the result of a decade-long partnership that advances the field of connectomics using computing and AI to build cellular-scale maps of entire brains. It is the largest brain map by number of neurons to date. The map is a fundamental resource for scientists who use fruit flies as a model organism for studying how the brain works.
2026.09.04
Sponsored
THIS AD GOT YOUR ATTENTION. IMAGINE IT IN FRONT OF YOUR AUDIENCE.
8 million tech professionals read TLDR to stay on top of the news, ideas, and tools shaping their work. Put your brand in front of them. Become a TLDR sponsor [9].
2026.09.04
META WANTED TO REDUCE TEAMS BY 60% BECAUSE OF AI
Two months ago, Meta laid off 10% of its staff and moved 20% to 30% of its engineers into AI training. This resulted in low morale and a string of embarrassing outages. The company had planned even larger layoffs, but those plans did not eventuate. This post looks at what the planned AI job cuts reveal about Meta, what CEO Mark Zuckerberg might have been thinking, and what the layoffs could mean for other tech companies.
2026.09.04
RUNNING LLMS IN THE BROWSER WITH THREE.JS
Three-LLM runs GPT-2, SmolLM2, Qwen, and Phi models locally in the browser by turning their inference graphs into Three.js TSL compute shaders on WebGPU. The project was created to see how far the general computer capabilities of Three.js and WebGPU can be pushed, and to see what today's small language models can do when they run in a browser. Three.js is known as a rendering library, but its WebGPU renderer also exposes storage buffers, compute dispatches, workgroup memory, atomics, and GPU readback. Large language models put all of those capabilities to work as they need hundreds of ordered compute dispatches, large matrix-vector products, reductions, persistent attention or recurrent state, and a tight loop between the GPU and JavaScript as each new token appears.
2026.09.04
AI, TOOLS, AND TRANSFORMATION
It's tempting to believe that AI can turn everyone into a tool-builder. However, that line of thought misunderstands how most people think and where software comes from. Turning everyone into a builder isn't how companies should work. The hard part is knowing that you need a tool for a specific task in the first place, and then knowing what that tool should do.
2026.09.04
LLMS ARE BECOMING COMMODITIES
Model quality is no longer a clear differentiator. It's only a matter of time before open source catches up to the current state-of-the-art. Model providers must look elsewhere for differentiation. For many, this will mean finding a niche and moving away from the defaults.
2026.09.04
Sponsored
FREE DOWNLOAD: SIGNS YOUR SOFTWARE INVESTMENT PAID OFF
Over half of software buyers aren't confident they made the right choice. If you're unsure your investment is paying off, this free Capterra guide breaks down 4 signs your software is truly working. Get your guide now [14].
2026.09.04
EMAIL SHOULD BE THE UNIVERSAL INTERFACE FOR SOFTWARE
Email is just structured text wrapped up as a human-readable letter, complete with data to identify senders and recipients.
2026.09.04