Search the archive

JPMORGAN TOPS GLOBAL AI BANKING INDEX WITH JOBS SEEN TO GROW

AI capabilities across banking improved nearly three times faster over the past year than the average of the previous three years, as deployment accelerated at a record pace.

EXPLORE STRIPE TREASURY

SOFTWARE'S CENTAUR AGE MAY LAST DECADES

Human engineers paired with AI coding systems are more effective than either by themselves. This fact is likely to remain true for the next decade or two. Software engineers have plenty of time to consider their next move. There's no need to panic and jump ship early when there's still time to live out an entire normal-length career.

THE DEVELOPER HIRING REBOUND FAVORS SENIORS

CNBC reports that software-development job postings rose even as overall US postings declined. Senior jobs supplied most of one measured increase, while employment among developers aged 22 to 25 remained under pressure. Founders should distinguish demand for experienced AI-capable builders from a broad recovery across the engineering talent market.

PART 1/3 OWNING INTELLIGENCE SERIES: HOW COINBASE BUILT, EVALUATED, AND POST-TRAINED A FRAUD AGENT

Coinbase built an LLM risk agent onto Onramp's existing ML model and rules. Online A/B experiments showed a 30% reduction in fraudulent transactions and 22% less fraud value. Coinbase then post-trained Qwen3.5-9B on its proprietary Onramp fraud dataset. The resulting model outperformed Opus 4.5 on all fraud detection metrics while delivering 55% lower end-to-end online serving latency.

“YOU DIDN'T DO IT RIGHT”

When OKRs don't work, how many times are you supposed to try again? WP Engine gave them four attempts, including paid training and coaching, and kept hearing that it wasn't doing them properly. What eventually worked was much smaller. One team picked a metric it cared about, set a loose goal, and followed it for a quarter before adding anything else. The metric also had to measure something the team could actually control, so people weren't being judged on a number their own work couldn't fix.

YOUR CHURN PROBLEM STARTED IN THE COMP PLAN

Your reps are hitting their targets, but a year later the customers are gone. One founder in this piece lost 30% of the previous year's new customers and wanted to know what was wrong. The answer starts with what reps get paid to sell. In a separate Airtable example, a birthday-calendar user counted as much toward the new-logo target as a team running a critical workflow. Airtable began scoring prospects against its best customers, giving reps smaller account lists and paying more for customers with room to grow.

Hire your first AI worker now →

CLAUDE LAUNCHES DASHBOARDS AND MOTION IN BETA

Claude Dashboards and Claude Motion are now in beta. Claude Dashboards connects to data platforms, allowing Claude to build dashboards that update as the underlying data changes. Claude Motion converts reports, charts, and product walkthroughs into short animated explainers. Claude's broader artifact suite now supports team editing, admin-controlled external sharing, PowerPoint and PDF exports that retain formatting, editable Google Slides exports, and mobile editing.

INTRODUCING OPEN INTELLIGENT UI: THE OPEN-SOURCE ALTERNATIVE TO CHATGPT'S INTELLIGENT UI

Open Intelligent UI answers prompts with charts, maps, and working tools, and can create interfaces on demand. Interfaces can be downloaded as a standalone HTML file. Open Intelligent UI is compatible with any model and works with existing components. It runs generated code in an isolated iframe, and it can only load libraries from an approved list of CDNs.

MODELS AS INSIDER RISKS IN THE SUPER INTELLIGENCE ERA

We need to separate the supply of intelligence from the authority over it. This means surrounding non-deterministic models with strong, deterministic system design, human controls, and reliable operating procedures, and establishing industry standards where existing ones are insufficient. Any sufficiently capable actor with access to important systems can make mistakes or be compromised. The architecture of containment and control must account for that.

HOW CHINA'S VENTURE ECOSYSTEM WORKS

China's venture ecosystem pushes startups toward early IPOs through investor repayment clauses and a weak acquisition market. Government-backed funds, domestic USD investors, financial advisors, and relationship networks shape fundraising, while industrial policy directs capital toward strategic sectors.

CLOUDED JUDGEMENT 10.9.26 - CACHE IS THE NEW EGRESS

Egress matters because it created real switching costs - cache is similar in that swapping out models mid-session means building that cache over again.

I THINK YOU CAN EASILY INSTALL POSTIZ OPEN-SOURCE WITH LLMS.

Postiz's founder argues that making self-hosting difficult loses users who create tutorials and spread the product, while frustrated users who pay instead are unlikely to stay.

HOW TO GO FROM 0-100M VIEWS/MONTH

This is a tactical guide on how to scale a company from zero to 100 million organic views per month.

THE DOUBLE-COUNTED FUTURE

Everyone wants to operate with fewer employees because their collective can be much higher due to productivity gains from AI.

4 TEAM RITUALS THAT DRIVE AI ADOPTION

Teams need to create forums centered on peer support where both beginners and skilled practitioners can learn, practice, and refine AI skills in a low-pressure environment to foster team-wide adoption.

OXIDE COMPUTER COMPANY SECURES $445M SERIES D FUNDING ROUND

Who's building on-prem compute in 2026? It turns out a lot of people! Oxide Computer Company, which builds custom on-prem cloud compute systems, has closed a massive $445 million Series D funding round led by Eclipse, with participation from major investors including Jane Street, Atreides Management, and chipmaker AMD. The capital injection follows the startup achieving operational profitability and will be used to scale manufacturing capacity, secure raw material inventory, and fulfill a rapidly expanding order backlog for their commercial cloud computer racks.

SPACEX BUYS 800 MHZ LOW-BAND SPECTRUM TO PAIR TERRESTRIAL TOWERS WITH 2 GHZ STARLINK SATELLITES

SpaceX agreed to buy up to 14 MHz of paired 800 MHz low-band spectrum, which penetrates buildings, and plans to deploy its own antennas on towers and rooftops to use it, with most existing phones already supporting the band. Separately, the FCC approved 15,000 more Starlink satellites optimized for 2 GHz. Together they point to a hybrid network, terrestrial indoors and satellite beyond towers. The deal needs FCC approval, and Verizon, AT&T, and T-Mobile shares fell roughly 6% on the news.

THE MACHINES THAT MAKE THE MACHINES: ADVANCING INDUSTRIAL DIGITAL TWINS

In this rare peek under the hood, we get a glimpse of how Foxconn uses NVIDIA Omniverse, Isaac, and Metropolis platforms to create physically accurate digital twins of manufacturing facilities that assemble next-generation AI server hardware. By simulating factory layouts, automated optical inspection systems, and autonomous mobile robot fleets in virtual environments before physical deployment, the company minimizes factory commissioning delays and boosts production efficiency. This approach showcases how system architects and automation specialists can leverage high-fidelity simulation to safely validate and optimize complex robotic workcells prior to hardware installation.

BLUE ORIGIN REBUILDS LC-36 FOR VERTICAL NEW GLENN INTEGRATION, TARGETING A DECEMBER RETURN

After May's pad explosion destroyed its transporter-erector, Blue Origin is rebuilding LC-36 for vertical integration, loading New Glenn through the support tower alone, as with Starship. Crews destacked the tower, added cryogenic propellant plumbing on the ground, and have begun restacking modules, while the launch bridge is restored. Umbilicals and fairing access platforms haven't appeared yet. Bezos targets a December return to flight carrying Blue Ring, though he joked it could slip to December 31.

PHOTONIC CHIPS LEARN AFTER FABRICATION BY MEASURING THEIR OWN OPTICAL GRADIENTS

A Nature Computational Science briefing describes an in situ learning method where photonic integrated circuits directly measure optical gradients, so diverse circuit layouts can be trained after they're built. That removes the need for a full digital model of the chip, which optical training normally leans on. The team demonstrated matrix design, multiwavelength computation, and rapid meta-learning on the hardware. Specifics like accuracy or energy figures aren't included.

SCARF-SLAM: SCALE-CONSISTENT RECONSTRUCTION WITH FEED-FORWARD MODELS AND CLASSICAL VISUAL SLAM

ScaRF-SLAM is a dense visual mapping system that pairs the reliability of classical visual SLAM with modern feed-forward geometric foundation models for 3D scene reconstruction from the Oxford Robot Dynamics Lab. By decoupling camera tracking from dense depth estimation and optimizing scale consistency across submaps, it achieves globally accurate 3D maps across diverse sensor configurations. For perception engineers and autonomy developers, this framework provides a practical way to produce metric-scale environmental maps in real time without sacrificing tracking stability

Q8BOTONE: A PALM-SIZED OPEN-SOURCE QUADRUPED ROBOT WITH SMART ACTUATORS

ZeroWire Robotics has launched the Q8botOne, a smartphone-sized open-source quadruped robot featuring an innovative wire-free chassis where the main printed circuit board serves as the structural frame. Driven by an ESP32-C3 microcontroller and eight DYNAMIXEL smart bus actuators with parallel-linkage legs, the compact robot can walk, trot, jump, and carry twice its 250-gram payload.

LEDGER CONFIRMS A HARDWARE IMPLANT IN A TAMPERED WALLET AS SUSPECTED LOSSES NEAR $93M

Ledger confirmed an unauthorized hardware implant in one affected user's device, bought from Southeast Asian reseller CryptoBilis, pointing to tampering after manufacturing rather than a breach of Ledger itself. Mark Karpelès published images of a modified Nano X with a small board behind the screen and cellular components, which would presumably capture the 24-word recovery phrase as it displays during setup, leaving the secure element untouched.

SUPER MICRO “FIXER” PLEADS GUILTY IN $2.5B SCHEME TO DIVERT NVIDIA SERVERS TO CHINA

Ting-Wei Sun pleaded guilty to four counts, including conspiracy to violate export controls, in a scheme that routed about $2.5 billion of Nvidia-powered servers through a Southeast Asian company to buyers in China.

JUMPER: AN OPEN-SOURCE CRAB ROBOT WITH WALKING AND JUMPING CAPABILITIES

Jumper is an open-source biomimetic robot that replicates crab locomotion, combining sideways multi-legged walking with an explosive spring-assisted jumping mechanism.

ASML RAISES EUV AND DUV SPARE PARTS PRICES 10% FOR SAMSUNG AND SK HYNIX

ASML will raise prices 10% on all EUV and DUV replacement parts supplied to South Korea starting with January 2027 deliveries, and Samsung and SK Hynix have accepted

EASYNAV 0.5.0 NAVIGATION SYSTEM RELEASED FOR ROS 2 DISTRIBUTIONS

EasyNav 0.5.0 has officially launched, delivering an accessible yet comprehensive open-source navigation stack with upgraded path planning, improved recovery behaviors, and reduced compute overhead for ROS 2 systems.

TELEGRAM DESKTOP ONE CLICK ACCOUNT TAKEOVER

A single clicked link could clone a Telegram Desktop session on 7.2.8 and earlier, because an unescaped semicolon in tg: link IPC handling let attackers inject a hidden interpret: release helper that uploads local files to any chat (CVE-2026-107181). Attackers staged instruction files through auto-download in a group the victim was added to without consent, then exfiltrated the three tdata files that open on another machine with no SMS code or two-step password when no local passcode is set. Users should update to 7.2.9, set a local passcode, and restrict group adds to My Contacts, since Telegram shipped the fix with no advisory.

ASOS CONFIRMS BREACH OF CUSTOMER DATA AFTER HACKERS SEND ROGUE APP NOTIFICATION

Asos confirmed a breach after hackers used its app to send customers a notification claiming they had compromised data on Snowflake. Stolen information includes names, contact details, home addresses, phone numbers, and customer-profile notes such as search queries. Attackers reportedly obtained credentials by impersonating a trusted contact. The Xuanye Group is pressuring Asos to negotiate or leak the data.

UNPATCHED AHSAYCBS FLAWS EXPLOITED TO DEPLOY WEBSHELLS AND MINE CRYPTO

Huntress has observed attackers chaining two vulnerabilities in the AhsayCBS backup software to achieve remote code execution (RCE). The attackers utilize an authentication bypass and then RCE vulnerability to install JSP webshells and the XMRig crypto miner as well as an AI-assisted script to avoid detection. The vulnerabilities were meant to be fixed in version 10.3.2 but Huntress reports that version 10.3.4 is still vulnerable.

BELOW THE WATERLINE STAGE 2 - REGULATING RED TEAMS

Regulated red team engagements have to be defensible when reconstructed later, so every action needs a named approver, an understood risk, and evidence tying it to the threat scenario. The six frameworks compared (CBEST, TIBER-EU, DORA TLPT, I-CRT, iCAST, and DESC ISR) differ in authority, testing basis, and provider requirements, with DORA Article 26 mandating TLPT at least every three years for designated financial entities. Red team leads should record timestamps, approvals, and any supplied access during delivery, because a detection that fires in purple-team replay does not prove it worked during the covert phase.

WHY THE AI VULNPOCALYPSE ISN'T THE BREACHPOCALYPSE (YET)? IT'S THE ECONOMY, STUPID

Despite the rise in vulnerabilities due to LLMs, we have not observed a corresponding rise in breaches. The author argues that offensive AI agents cannot properly monetize breaches, which reduces their motivation. The author dismisses the hypothesis that attackers lack capable enough tools for breaches, given that cyber-capable open-weight models and model jailbreaks are common. The author also dismisses the hypothesis that breaches are occurring without us knowing.

GHOSTACTION PHISHING CAMPAIGN

GhostAction operators used a GitHub reverse-proxy kit on my-github[.]com to relay maintainers' passwords and TOTP codes, while injected JavaScript silently approved an OAuth device flow with repo, workflow, and read:org scopes. The domain shared 193.32.204[.]199 with GhostAction's workflow exfiltration server, though a single lure does not prove phishing caused the earlier maintainer compromises. Defenders should revoke grants tied to OAuth client ID Ov23ctrqCqZ79UaYKwyq, rotate CI/CD and registry secrets, and audit .github/workflows/ for injected files.

AN OPT-IN VULNERABILITY-FINDING SERVICE FOR OPEN-SOURCE SOFTWARE

Anthropic launched OSS Scanner, a free, opt-in tool that periodically sends open-source maintainers model-generated vulnerability reports. The reports include reproducers, explanations, and candidate patches, but humans don't review them. During validation, 85 of 97 critical- or high-severity findings met Anthropic's disclosure bar, while one finding was invalid. Eligible maintainers can sign up through GitHub.

AGENT SUBSTRATE

Agent Substrate is a secure-by-default agent execution runtime for running millions of agent sandboxes on Kubernetes.

MACOS-SUDO-TOUCHID

This tool enables Touch ID for sudo on macOS using Apple's pam_tid.so, with safer handling for terminal multiplexers through pam_reattach.

INVESTIGATING UNINTENDED MODEL ACTIONS IN OUR EVALUATIONS AND INTERNAL USE

Anthropic reports Claude using SQL and command injection to run commands on a university server, submitting real government and police forms, using leaked access tokens to reach fee-gated public data, and shortening URLs to bypass fetch-tool limits. Most cases arose in evaluations with live internet access and caused little harm. Anthropic has disabled live internet access in internal evaluations, restricted fetch tools, added automated detection and blocking, and is changing training environments that reward restriction bypasses.

INSIDER CYBER EXTORTION PLOT AGAINST INDUSTRIAL FIRM LANDS ENGINEER IN PRISON

Former core infrastructure engineer Daniel Rhyne scheduled tasks on his employer's domain controller to delete 13 admin accounts and reset passwords affecting 301 users, 254 servers, and 3,284 workstations. He demanded 20 bitcoin, about $750,000, and threatened to shut down 40 servers daily. The company did not pay. Internal forensics and FBI tracing tied the activity to Rhyne's home IP address. He received 32 months in prison.

FINGERPRINTS ARE THE NEW COOKIES

Browser fingerprinting has replaced third-party cookies as the stable tracking identifier, after Google dropped its cookie deprecation plan and opened its ad products to device fingerprinting. A demo page derives a consistent nickname by hashing permissionless readings from OfflineAudioContext, WebGL renderer pixels, canvas text rendering, Intl time zone, and navigator hardware values, and the result survives cookie clears and VPNs. Only Brave (via farbling noise) and Tor and Mullvad Browser (via uniform fingerprints) resist this at the engine level, while anti-fingerprinting extensions can make users more distinctive because so few people run them.

MICROSOFT TO END SECURITY UPDATES FOR UNSUPPORTED WINDOWS VERSIONS IN 2027

Unsupported Windows versions will lose all Windows Update access when Microsoft rotates its update certificates on May 17 and June 19, 2027, so supported builds need the July 2026 update or later (September 2025 for Windows 11 24H2 and Server 2025), while WSUS-managed devices are unaffected.

GOBALANCE FLAW LETS ATTACKERS HIJACK .ONION ADDRESSES BY RECOVERING TOR-FORMAT KEYS

A GoBalance signing bug lets an attacker recover a site's Tor-format master key from one public descriptor, with which they can then redirect that .onion address to a controlled site.

LEDGER CONFIRMS UNAUTHORIZED HARDWARE IMPLANT, SAYS LOSSES MAY EXCEED $86M

An unauthorized hardware implant was found in a Ledger wallet sold by Southeast Asian reseller CryptoBilis.

Explore the AI hub for the full range of Gartner's AI insights

NVIDIA IN TALKS TO INVEST FURTHER IN REFLECTION AI OR BUY IT

Nvidia is in talks to acquire or deepen its investment in US-based open-weight model start-up Reflection AI. Discussions are at an early stage and could result in an acqui-hire to avoid drawn-out regulatory reviews. Reflection AI was reportedly seeking funding at a $25 billion pre-money valuation earlier this year, and Nvidia has already invested $800 million in the company.

GLOBAL PC SHIPMENTS CRATER 20% AS RISING PRICES HAMMER DEMAND

Global PC shipments fell roughly 20% year-over-year in Q3 2026 as rising memory costs and earlier purchasing pushed demand lower. AI infrastructure's appetite for components is contributing to higher PC prices, potentially complicating corporate device refresh cycles and hardware budgets.