Search the archive

SAY IT ONCE: INTRODUCING BOT PREFERENCE SYNC

Cloudflare now writes AI bot policies into robots.txt automatically across Search, Agent, and Training categories on every plan for free.

IS AGENTIC

This site scores websites based on what agents can discover, access, and use.

YOU HAVE NEVER BEEN YOUR OWN CUSTOMER

Companies often overlook the customer experience with third-party services that carry their branding, leading to inefficiencies and frustration.

COURT HEARS CXMT'S DRAM WAS BUILT FROM THE START ON STOLEN SAMSUNG IP

Testimony in a South Korean criminal case alleges that CXMT, now China's largest DRAM maker, was founded with no in-house research capability and a deliberate plan to obtain Samsung's process technology IP rather than develop it independently. Former Samsung engineer Jeon, who moved to CXMT around 2016 after 28 years at Samsung, was sentenced to seven years in prison this April for stealing a 600-step Process Recipe Plan that detailed Samsung's DRAM fabrication process, including its 18nm-class node, information covering deposition and etch conditions, anneals, temperatures, and tool types that can shave years off developing a memory node from scratch.

NVIDIA CUSTOMERS NOTIFIED ABOUT AI-RELATED PRICE HIKES ABOVE 15%

Nvidia and server contract manufacturers have informed major cloud and enterprise customers that prices for AI server systems will rise by more than 15% across several configurations. The price hikes—slated to take effect on systems shipping in early 2027, including platforms powered by Grace Blackwell and Vera Rubin architectures—are primarily driven by sharp cost escalations across high-bandwidth memory (HBM) and advanced DRAM components.

SPACEX FINALLY RECOVERS STARSHIP AFTER 24 DAYS OF TUGGING IT THROUGH ROUGH WATERS

After Starship's upper stage splashed down intact in the Indian Ocean following its 13th test flight in late July, SpaceX decided to actually recover it, an unplanned bonus given the vehicle survived reentry in one piece. What followed was a grueling 24-day tow through increasingly rough seas, with the 171-foot spacecraft finally reaching calm waters off Christmas Island, Australia, where engineers will now inspect it before deciding how and when to get it back to Starbase. A close physical inspection gives engineers far more detail than onboard sensors and cameras alone, informing modifications ahead of Starship Flight 14, targeted for late August to early September, which will attempt the vehicle's first full orbital test.

WORLD HUMANOID ROBOT GAMES SHIFTS FROM SPRINT DEMOS TO AUTONOMOUS WORK TESTS

The Beijing competition now includes 21 scenario-based events spanning cable connection, industrial assembly, material loading, EV charging, restaurant work, and emergency response. More than 40% of the 51 total events require full autonomy, forcing robots to handle misalignment, shifting objects, controlled force, and error recovery rather than scripted locomotion. The cable-connection challenge specifically combines vision, hand positioning, mechanical alignment, and force control, making it a much more revealing physical-AI benchmark than sprinting or dancing.

FASTSWARMSIM: LIGHTWEIGHT MULTI-UAV ROS 2 SIMULATION WITH LOCK-STEP TIME

This newly announced simulator aims to streamline swarm robotics research. By utilizing lock-step time, researchers can guarantee synchronized simulation environments for ROS2 across multiple unmanned aerial vehicles. This allows for more reliable testing of complex swarm behaviors and communication protocols before deploying code to physical drones.

TIANGONG ULTRA ROBOT CUTS ITS 100M TIME FROM 21.50 S TO 9.39 S IN ONE YEAR

Beijing Humanoid Robot Innovation Center's Tiangong Ultra completed a 100-meter heat in 9.39 seconds, down from 21.50 seconds at last year's World Humanoid Robot Games. Honor's Lightning followed at 9.47 seconds after researchers lengthened its legs by 10 cm. A preparatory run reached 9.32 seconds and a 15.5 m/s peak speed. The results show a greater than 2× year-over-year improvement in full-size humanoid sprint performance.

NVIDIA IS SPENDING $6 BILLION TO BUILD A US ALTERNATIVE TO CHINESE AI MODELS

Nvidia is deploying roughly $6 billion in a major strategic transaction with AI startup Poolside to develop high-performance open-weight models capable of competing directly with leading Chinese releases like DeepSeek and Kimi. Under the agreement, Nvidia is paying $6 billion to license Poolside's core technology—including its Model Factory platform—and is investing an additional $1 billion at a $12 billion valuation while absorbing over 100 of the startup's engineers. The incoming technical team will focus on expanding Nvidia's open-weight Nemotron project, strengthening Western frontier model development and ensuring competitive parity against state-backed open-source AI initiatives emerging from China.

THE QUANTUM ARMS RACE HAS A BASELINE PROBLEM

As the US and China both push quantum computing, sensing, and networking as strategic priorities, the real question isn't who's ahead but ahead of what, since a quantum advantage is only meaningful relative to the classical system it's compared against. Quantum radar is the clearest case: the underlying physics of quantum illumination is real and has shown genuine detection gains in controlled lab conditions, but a laboratory advantage doesn't automatically translate into a long-range operational radar advantage once range, clutter, atmospheric loss, and receiver complexity enter the picture. The same trap applies to quantum machine learning and quantum computing broadly, where a system can look superior on paper simply because it was benchmarked against a weak or poorly optimized classical competitor rather than the best available alternative.

APPLE CUTS JOBS IN SIRI, VISION PRO, IMMERSIVE VIDEO, AND GAMING TEAMS

Apple is laying off over 200 employees across its Vision Pro, Siri, and software engineering divisions as it refocuses engineering priorities on artificial intelligence and upcoming hardware form factors.

ZIPLINE AND UBER PARTNER TO BRING DRONE DELIVERY TO MILLIONS OF UBER EATS CUSTOMERS

Zipline has been rapidly scaling its autonomous drone delivery infrastructure, and this Uber partnership signifies a massive leap in commercial drone logistics for everyday consumers.

ANTHROPIC TAPS GOOGLE CHIP VETERAN AS PART OF PUSH INTO HARDWARE

Anthropic has hired former Google custom silicon executive Amir Salek to join its compute team as the frontier artificial intelligence lab begins laying the groundwork for an in-house semiconductor initiative.

A FASTER WAY TO CALCULATE THE DAY-OF-THE-WEEK

This post introduces low-level optimization techniques to compute the day of the week from an integer day count faster than standard compiler-generated modulus operations.

HACKERS INFECT ANDROID CAR HEAD UNITS WITH PROXY BOTNET MALWARE

The MoYu threat group has compromised DoFun-branded Android automotive head units by utilizing a rogue APK to deploy the "JarService" botnet malware. Delivered through the legitimate TWCore system app, the malware pulls instructions from an MQTT broker to convert infected vehicles into remote SOCKS5 proxy nodes and click-fraud clients. While researchers found no evidence of interference with physical vehicle controls, affected owners should actively monitor their network traffic for unauthorized communication with the cardoor[.]cn command domain.

SICKKIDS DATA BREACH EXPOSES EMPLOYEE AND JOB APPLICANT INFO

The Hospital for Sick Children (SickKids) disclosed that it suffered a data breach that impacted employees and job applicants. The hospital stated that the breach was caused by a vulnerability in a third-party software that SickKids and other organizations use.

NEW SYNKLOADER MALWARE PUSHED IN MICROSOFT TEAMS PHISHING CAMPAIGNS

Security researchers from Expel have discovered a previously unknown malware family which it dubbed SynkLoader and is being distributed via Microsoft Teams phishing campaigns. The attack directs victims to install a fake PowerShell Cleaner executable that is hosted in Azure to provide authenticity. The malware allows the attackers to select between modules to deploy: system profiler, persistence module, PhishLocker, which displays a fake Windows login screen to capture Windows account passwords, TrafficRedirector, which allows attackers to reach internal services, a RAT, a VNC, and a module status script.

YOUR OPEN SOURCE MODEL COULD HAVE A HIDDEN TIME-RELEASE BACKDOOR

Researchers have trained LoRA to embed a dormant backdoor into Qwen 3.5 2B that will activate on a later date, executing a shell command instead of responding. This exploits OpenCode's system prompt, which automatically inserts the current date into the context at every turn. The approach builds on Anthropic's 2024 sleeper agent research and successfully triggered on 7 of 8 in-distribution and 9 of 10 held-out prompts on the target date, with no failures elsewhere. Notably, OpenAI's Codex also employs a similar date-leaking mechanism by default. Since OpenCode runs commands via --auto without confirmation, any system that auto-injects timestamps into context should restrict shell command execution to human approval, especially for open-weight models that are unverified.

SPEEDRUNNING SHA PINNING FOR GITHUB ACTIONS ORG-WIDE

Spurred by the 2025 tj-actions/changed-files supply chain compromise, a Semgrep engineer successfully enforced full-length SHA pinning for GitHub Actions across 350 repositories. The deployment utilized native GitHub enforcement settings alongside tools like pinact and Renovate to automatically convert tags and eliminate unpinned reference classes at scale. Security teams adopting this playbook should auto-enroll new repositories via webhooks, monitor for pipeline failures, and update developer guidance files before strictly enforcing the restriction across their organization.

13 MILLION TOOL CALLS: AUDITING EVERY AI CODING AGENT ACTION WITH ELASTIC AGENT

Elastic's Security Labs rolled out zero-dependency bash and PowerShell-based hooks for agentic IDEs like Cursor and Claude Code to monitor the commands run by AI agents in their environments. Elastic focused heavily on restricting who has access to agent logs and only collecting metadata to ensure user privacy. The article includes some sample ESQL queries for threat hunting and information extraction utilizing these logs.

BRINGING THE CYBERSECURITY CAPABILITIES OF CLAUDE MYTHOS 5 TO MORE DEFENDERS

Anthropic has upgraded its Enterprise Claude Security scanning tools to utilize the frontier-level Claude Mythos 5 model. To maintain platform security, defenders do not receive raw model outputs. Instead, they are provided with actionable vulnerability findings tagged with specific CWE categories, confidence scores, and severity ratings. Beyond the direct scanning upgrades, Anthropic also announced a $35 million Defender Advantage Fund to support open-source patching and expanded its Cyber Verification Program to grant vetted security researchers less-restricted access to Mythos-class capabilities.

DETECTION SKILLS

Detection Skills is an open standard for the Agentic SOC that transforms static detections into agentic workflows.

PENTESTKIT

pentestkit is a multi-agent, context-accumulating penetration testing framework built on the Claude Agent SDK.

SECURITY BAKED INTO THE JVM: SIXTEEN SUBJECTS ON THE WIRE

The fourth installment of a JGDMS security series details how the DirtyChai JVM fork securely propagates user identity across remote calls. To mitigate denial-of-service attacks, the implementation strictly caps requests at 16 Subjects and 64 principals per Subject. Rather than blindly instantiating caller-asserted principal classes, the receiving side enforces a strict four-type allowlist and relies on inert placeholders for unrecognized inputs. Additionally, a SubjectAwareExecutor wrapper preserves calling identities across virtual-thread boundaries, while distributed transactions now require all participants to individually hold commit permissions before a manager will finalize them.

HUNDREDS OF LEAKED AWS KEYS GIVE FULL CONTROL OVER CORPORATE ACCOUNTS

Truffle Security has been tracking AWS access key exposure for four years and reports that 9,300 of the access keys that they've discovered and tracked remain active. Of these 9,300 keys, 817 of the keys were linked to companies, with 526 of those being root keys. Truffle Security's testing was limited to read-only metadata, and it has notified affected customers.

WE URGENTLY NEED A COHERENT NATIONAL AI CYBERSECURITY POLICY

Current national AI cybersecurity policy focuses on measuring dual-use capabilities of models and biases towards AI's benefit to attackers. This framing ignores defensive security use cases such as AI code fixing and phishing defenses. The solution to this issue is to assemble an AI cybersecurity observatory that will perform evaluations combined with real-world use to make policy recommendations.

MICROSOFT FIXES 'PERFECT 10' EXPLOIT THAT COULD HAVE LET HACKERS RUN CODE REMOTELY

Microsoft has fixed CVE-2026-69836, a critical deserialization vulnerability in Entra ID that enabled unauthenticated remote code execution without interaction, and confirmed there was no active exploitation before publicly disclosing the CVE for transparency.

US SECURES $400M TIKTOK SETTLEMENT OVER ALLEGED CHILDREN'S PRIVACY VIOLATIONS

TikTok and ByteDance will pay $400 million to settle DOJ allegations that the platform allowed children under 13 to hold accounts and collected their data without parental consent.

collaboration outcomes

* Making the most of cloud and AI investments to drive lasting org-wide impact

Get the whitepaper

ALIBABA LAUNCHES $10B SHARE SALE TO FUND AI EXPANSION

Alibaba plans to raise roughly $10 billion to expand its AI infrastructure, chips, data centers, and model development. The raise comes days after the company reported a 75% jump in capex tied largely to AI.

AI DATA CENTERS COULD BE FIRST TO LOSE POWER WHEN THE GRID IS STRAINED

PJM is proposing rules that would make some new large-load customers, including AI data centers, interruptible when electricity supply gets tight. The proposal highlights how power availability is becoming a limiting factor for AI infrastructure growth.

SAM ALTMAN ON BUILDING OPENAI AND BETTING ON THE IMPOSSIBLE (78 MINUTE PODCAST)

Sam Altman discusses OpenAI's early non-consensus bets, scaling compute, AI adoption, and why society may absorb AI more slowly than model progress suggests. He also argues AI could enable a boom in small businesses while warning against concentrating control of the technology among too few players.

THE AI-NATIVE SDLC PLAYBOOK

Anthropic lays out how AI changes software development beyond simply adding coding assistants, including planning, implementation, review, and operations. It argues teams need to redesign development workflows around agents rather than bolt them onto existing processes.

GITLAB 19.3 HELPS ENTERPRISES SCALE AGENTIC DEVELOPMENT SECURELY

The GitLab 19.3 update is aimed at helping enterprises scale agentic software development while retaining control over data, permissions, and spending. The release adds single-tenant deployment for the Duo Agent Platform, Secrets Manager support beyond pipelines, bulk SAST remediation, plain-language custom flow creation, and usage caps for agentic AI.

RAMP LAUNCHES AN AI MODEL ROUTER

Ramp has opened the internal model-routing infrastructure it uses across more than 100 AI use cases as a standalone product. Router can automatically choose models based on cost, quality, latency, and availability. Ramp says it cut its own LLM costs by roughly 30%.

NVIDIA BACKS CLOVERLEAF TO EXPAND AI DATA CENTER INFRASTRUCTURE

Nvidia made a minority investment in Cloverleaf Infrastructure. The companies have partnered to develop AI factories across the US. Cloverleaf says its pipeline already includes multiple gigawatt-scale infrastructure projects.

THE GPU BILL IS BECOMING THE NEW AWS BILL

Enterprises risk repeating the cloud cost-management mistakes of the last decade as expensive GPU infrastructure proliferates. AI teams increasingly need FinOps-style controls for utilization, capacity planning, and workload economics.

AI AGENTS ARE TURNING ENTERPRISE DATA SILOS INTO AN INFRASTRUCTURE PROBLEM

Enterprise data stacks were largely designed around human access patterns, but agents need reliable real-time access across systems. That is turning data integration and context infrastructure into a prerequisite for successful agent deployments.

ANTHROPIC PLANS CUSTOMER-CONTROLLED STORAGE FOR FRONTIER-MODEL DATA

Anthropic plans to let enterprises keep required retained data inside their own cloud infrastructure rather than Anthropic's systems.

PORTWORX ENTERPRISE 3.6.2.2 ADDS STRONGER VSPHERE CERTIFICATE VERIFICATION

The release adds TLS certificate verification for vCenter connections during cloud-drive operations and includes several Kubernetes and disaster-recovery fixes.

AMERICA'S MEETUP EXPLOSION

Young people are trading apps and screens for in-person social experiences. “Soft socializing” events built around activities like trivia, mahjong, birdwatching, puzzles, and crafts are surging. Puzzle events rose 151% year over year, while mahjong events rose 94%. The trend also extends to dating, with people turning to activity-based meetups and dinner parties to find both romantic and platonic connections.

CREATOR FIT BEATS FOLLOWER COUNT FOR BRANDS

The creator economy is projected to reach nearly $500B by 2027, but brand partnerships are shifting from reach to fit. Suitability is now the top factor brands consider when choosing creators, while follower count ranks eighth. Yet 67% of creators earn under $10K annually, and 53% say less than 25% of their income comes from brand partnerships. Audience-brand tension is also growing, with 42% of creators reporting it overall and 53% among creators with 500K+ followers.

HOW TO AVOID WILL ROGERS' PHENOMENON IN A/B TESTING

Will Rogers' Phenomenon occurs when moving people between groups makes the average performance of both groups improve, even though no one actually improved. In A/B testing, this can happen when users cross a threshold during an experiment and get reclassified from casual to power users, which can make both segments appear to perform better. This can create false conclusions about a feature's impact and mislead marketing or product decisions. Freeze segment definitions before the experiment starts and track segment migration separately to avoid the problem.

THE MOST CLICKED LINK TEASER

Promote your newsletter by sharing its most-clicked link a few days after each issue. Highlight that it was the edition's top link to create curiosity and implied social proof, then invite people to subscribe so they don't miss future issues. This tactic works best for newsletters with curated links, but can be adapted to other formats.

MICRO DRAMA: THE NEW CONTENT FORMAT MARKETERS CAN'T IGNORE

A micro drama is a serialized vertical video story split into 1-3 minute episodes, each ending on a cliffhanger that pulls viewers into the next. The format is cheaper and faster to produce than traditional TV, letting creators test hooks in real time and cut anything that fails to hold attention. After years of brands chasing shorter cuts and faster hooks, micro dramas reverse the model by asking audiences to commit across multiple episodes.