Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Business adoption of AI shows mixed results, with Anthropic leading in market share but slower uptake of its latest model, Fable 5, compared to OpenAI's offerings. Despite growing competition from open source models, American companies continue to increase their overall AI spending, although there is a limit to how much they are willing to pay for performance improvements.
An Applied AI company focuses on providing complete solutions for complex workflows, improving accuracy and efficiency through tight integration, continuous evaluation, and a unique operational structure that bridges engineering and customer engagement.
Effective implementation of AI tooling requires addressing existing issues within teams rather than relying solely on automation.
Tiny JPEGs can appear differently in Chrome due to a rendering optimization that uses partial IDCT scaling, which allows the browser to decode only low-frequency data when the image is displayed at a small size.
Yelp successfully migrated its large codebase from Flow to TypeScript over three years by gradually converting one package at a time, making sure of type integrity throughout the process.
Sponsored
Agents make writing integrations with payroll, HR, and benefits systems faster than ever. But the hard part of unifying employment data was never writing code: it was the walled gardens, data mapping, and auth configurations within deeply fragmented ecosystem. These challenges are still at the heart of the build-vs-buy debate, even with AI in the mix. Finch [5] is the unified API behind fintech platforms like DualEntry, Rillet, and Thatch. Their playbook breaks down where AI genuinely helps with integrations, and where it still hits a wall. Get the full build vs. buy playbook →
Adyen is expanding its partnership with Toast into the US, adding its payments infrastructure to a platform that facilitated more than $215 billion in GPV across roughly 180,000 locations over the past year. The deal extends a relationship already spanning Ireland, the UK, Canada, and Australia, while giving Toast greater processing stability and creating potential to embed more Adyen financial products into its restaurant and retail platform.
Cloudflare Wallets is a programmable wallet for the agentic Internet. Starting today, you can claim a Cloudflare Wallet handle for your account, which will provide a unique username to help you better connect with merchants. Soon, you will be able to set up and use your Cloudflare Wallet to pay for APIs and content.
Monzo has become the first British digital bank to surpass one million business customers. Having launched the service in 2020, the online-only bank has seen numbers double in just the past two years, posing a challenge to the dominance of the UK's Big Four banks: Barclays, HSBC, NatWest, and Lloyds.
The FDIC is working with major banking and fintech trade groups on a voluntary standard-setting and certification body for bank-fintech partnerships, signaling a shift toward clearer baseline controls after years of BaaS failures and regulatory fallout. The post also covers Block moving more payments onto its own bank rails, Chime's second consecutive GAAP-profitable quarter, Polymarket's potential $20B+ valuation, Bunq's rejected US charter application, and Cloudflare's push into AI-agent wallets and payments.
Investors are increasingly favoring AI-native fintech startups that can ship faster, scale with leaner teams, and generate more revenue per employee, even as broader fintech deal activity declines. Durable winners will pair that speed with proprietary data infrastructure, disciplined AI deployment, and strong accuracy and security controls rather than simply layering AI onto existing workflows.
New federal borrowing caps could push more student borrowers toward private financing, but TransUnion says lenders will need to be selective about who they serve. Roughly 30% of federal borrowers in repayment are at least 90 days delinquent, compared with about 3% for unsecured personal loans, creating significant underwriting risk as private lenders pursue new originations and refinancing opportunities.
Sponsored
Payment and banking infrastructure compliance mandates least-privileged access restricted to the minimum per job function. Siloed audit logs lack the identity context to provide an audit trail without manual work across systems. Teleport [13] offers a guide that explains how certificate-based authentication solves these challenges,
Klarna is now integrated into JP Morgan Payments' Commerce Platform, allowing US merchants to offer pay-in-full, interest-free installment, and longer-term financing options without a separate integration. The partnership gives Klarna distribution through the largest US merchant acquirer, which processes $2.6 trillion annually, while helping JP Morgan merchants add flexible checkout options with less implementation work.
Robinhood is adding more than 50 digital assets to its UK investment app through Bitstamp, with no trading, account maintenance, or custody fees. The rollout also includes Cortex Digests, a generative AI tool that explains market moves in plain English, as Robinhood pushes to become an all-in-one investing platform spanning stocks, options, futures, and crypto.
Uber is backing Chilean fintech Galgo, which has deployed more than $400 million in credit and will develop lower-cost motorcycle financing exclusively for Uber delivery workers. Galgo, now profitable and generating roughly $100 million in annualized revenue, plans to enter another Latin American market next year and use the partnership to invest further in technology, data, and AI. The deal extends Uber's push into vehicle financing after its 2024 investment in mobility fintech Moove.
Ellis AI is building AI agents to automate the fragmented back-office work of private credit firms, connecting existing documents, accounting systems, and spreadsheets in one platform. The agents can monitor portfolios, flag data discrepancies, prepare reports, and help close monthly books, while leaving material decisions to human managers. Founder Ryan Williams previously co-founded real estate investment platform Cadre, which raised more than $160 million before being acquired by Yieldstreet in 2024.
Google Pay is turning its payments app into more of a personal finance assistant, letting Indian users ask Gemini questions about their spending, get categorized breakdowns, identify savings opportunities, and learn about topics like credit scores and investing.
Brazil's central bank is considering expanding the scope of its instant payments system Pix to integrate it with other international systems.
The OCC rejected Dutch fintech Bunq's application for a US banking license, citing concerns over whether the company would maintain sufficient capital and whether management had enough experience with unsecured credit cards.
CopyEscape (CVE-2026-17106) is a critical race condition in the docker cp command that allows a malicious container to escape its boundaries and overwrite arbitrary files on the host system. By swapping a directory for a symlink during the archive-copy workflow, attackers can force extraction to outside paths, achieving root code execution by overwriting critical host binaries like /usr/bin/runc. Docker has patched the vulnerability in Engine 29.7.2 and Desktop 4.86.0, requiring defenders to upgrade immediately, halt automated root-level copy operations, and ensure untrusted containers are stopped before retrieving files.
A cyberattack disrupted eight Ceva Logistics warehouses, delaying or canceling orders for many customers. Bol said attackers accessed two order-processing systems. Names, addresses, contact details, tracking data, purchases, and gift-card messages may be exposed. Valve is notifying affected European hardware buyers.
TeamPCP compromised LiteLLM after its CI pipeline automatically installed a trojanized Trivy release. LiteLLM versions 1.82.7 and 1.82.8 ran malicious code on every Python invocation. The packages were live for 40 minutes, exposing 434,000 CI/CD pipelines across 2,500 organizations. Treat LiteLLM-accessible credentials as exposed. Validate and rotate secrets, accounts, and sessions, then review logs.
Kimwolf v7 is an evolving IoT botnet that compromises Android TV boxes via unauthenticated ADB interfaces to launch HTTP/2 flood attacks using spoofed browser fingerprints. The malware utilizes a resilient, three-tier command-and-control architecture featuring Ethereum Name Service lookups, a hardcoded Tor hidden service fallback, and a localized proxy routing system. Defenders should restrict network ADB access, hunt for the masqueraded netd_service process, and monitor for anomalous outbound Ethereum RPC queries directed at the operator-controlled endpoint eth[.]rpcuniverse[.]com.
Socket researchers identified a massive campaign of 737 malicious Chrome VPN extensions, operated by a single threat actor branded as Muxa VPN, targeting Russian-speaking users seeking to bypass regional blocks. Once installed, these extensions abuse the chrome.proxy.settings API to silently force all browser traffic through a SOCKS5 relay on port 1082, with many utilizing DNS-over-HTTPS to evade plaintext DNS logging. While Google has removed some extensions, over 500 remain active, prompting defenders to block egress traffic on SOCKS5:1082 and VLESS-REALITY:443 and heavily scrutinize any extension requesting the proxy permission.
1Password's Off-by-1 Labs tested ChatGPT-5.5 and Opus 4.8's abilities to generate patches for six recent, high-profile CVEs when running as part of the respective organizations' cyber reduced guardrails programs. The test setup involved generating 540 patches per vulnerability in batches of 20 and testing whether they fixed the vulnerability, changed application behavior, and/or introduced new vulnerabilities. 1Password found that only 26% of patches fixed the vulnerability without changing application behavior or introducing new vulnerabilities.
OpenAI has expanded its Daybreak cybersecurity program with two new access tiers, Daybreak Blue and Daybreak Red, alongside the introduction of a specialized model named GPT-5.6-Cyber. By explicitly reducing refusals on high-risk tasks, this purpose-built model achieved a 95% completion rate on advanced exploit-chain benchmarks and recently uncovered critical zero-day vulnerabilities like a Chrome V8 heap sandbox escape (CVE-2026-15903). To mitigate the inherent risks of bypassing standard safety guardrails, OpenAI is restricting access to approved defenders and mandating hardware security keys for all accounts starting September 1.
Corma provides an AI foundation model for cybersecurity defense. It analyzes system events, audit logs, and network traffic to spot multi-stage intrusions, then deploys automated agents that work alongside security teams.
Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering results, and inspecting ETL/JSON/CSV recordings from one desktop tool.
ADR is Uber's production agentic AI detection and response tool. It helps organizations secure employee and customer-facing agents.
A malicious Chrome extension named "AI Sidebar with DeepSeek ChatGPT Claude and more" has bypassed a previous Web Store ban and returned with a new fraudulent monetization scheme. Netskope Threat Labs discovered that version 1.7.3.0 contains a script that farms affiliate commissions through an AI video platform during every update and overwrites the uninstall URL to ensure even removing the extension generates a referral payout. Defenders should immediately block and remove this extension, classified as Trojan.GenericFCA.Script.37952, which falsely masquerades as an official DeepSeek AI product to deceive users.
Cloudflare's H1 2026 DDoS Threat Report highlights a massive escalation in attack volume, recording 935 incidents exceeding 1 Tbps driven by a shift toward DNS-based floods and a 580 percent quarterly surge in CLDAP reflection. Real-world geopolitical events heavily dictated targeting patterns, with Operation Epic Fury triggering a massive spike in attacks against government infrastructure and the Ankara NATO Summit pushing Turkey into the top three most-attacked countries. Furthermore, Brazil has officially overtaken the United States as the primary source of global attack traffic, while the media sector remains the most targeted industry globally.
Microsoft Threat Intelligence is tracking a financially motivated threat actor that was previously affiliated with the Medusa ransomware operation and is currently deploying a new ransomware strain called StormEncryptor. The threat actor has been exploiting vulnerabilities in the N-Central RMM software to breach systems, followed by using AnyDesk or SimpleHelp for remote management, Advanced IP Scanner for network discovery, and Mimikatz for credential dumping. The StormEncryptor ransomware is a C++ malware that appends encrypted files with the “.encrypted” extension and drops a ransom note, which gives victims three days to negotiate with the attackers before data is leaked, in each scanned directory.
Cisco released emergency hotfixes for an actively exploited zero-day (CVE-2026-20349) that allows unauthenticated attackers to crash Secure Firewall ASA and FTD appliances via crafted HTTP requests to the Remote Access SSL VPN service, prompting a CISA mandate to patch by August 14.
Zoom patched three annotation bugs that let meeting participants send malformed drawing data to another client.
The FBI warns that attackers are taking over adults' and children's social accounts to steal explicit images and videos.
Sponsored
With AI, non-technical employees are shipping apps, agents, and automations faster than IT can track. The best companies are letting everyone build, without putting their core operations at risk. On August 19 [4], join Tines to hear from HEADSPACE'S Director of AI Enablement for an exclusive look at how Headspace enables everyone to build securely with AI [5] at scale: > HOW HEADSPACE GOVERNS WILD CODE AT SCALE: gaining visibility into tools built outside IT's radar. > GIVING TEAMS THE FREEDOM TO BUILD WITHOUT OPERATIONAL RISK: adding governance and control, without slowing innovation. > MONITORING AI-BUILT WORKFLOWS IN PRACTICE: understanding what's running, how it's performing, and where it's spending.
There is an ongoing campaign targeting guest-accessible Salesforce Experience Cloud sites and ServiceNow Service Portals from infrastructure linked to the IP address 158.220.87[.]79. The actor uses Salesforce Aura and previously undocumented Salesforce LWR UI-API techniques, plus a ServiceNow search endpoint, to extract records.
Two-thirds of surveyed enterprises now run AI workloads in production, but many still lack visibility into infrastructure costs and utilization. The gap is becoming more important as inference becomes a continuous operational expense.
Cloudera found nearly every surveyed organization delayed or canceled AI projects over the past year, with governance and compliance among the biggest blockers. Nearly three-quarters said AI has made data governance more complex.
Salesforce's AI strategy will transform CRM into “agentic revenue orchestration,” with agents handling prospecting, research, pipeline management, and quoting. Its vision of a “headless CRM” surfaced through tools such as Slack and ChatGPT, while claiming that AI will augment rather than replace sellers and push pricing toward consumption and outcomes.
The future cloud growth of Microsoft, Google, and Amazon is increasingly dependent on Anthropic and OpenAI sustaining enormous, largely venture-funded compute spending. The two AI companies may need to spend more than $200 billion on compute in 2027 and raise roughly $250 billion to $300 billion to finance it, creating substantial risk if end-customer returns fail to materialize.
A survey of 101 enterprises found bad context behind many confidently incorrect agent answers. Organizations using governed semantic layers were substantially better at detecting those failures.
Sponsored
AI agents are managing critical workflows inside most organizations, and most IT teams have no systematic way to see them, own them, or shut them down. JumpCloud's new research from 800 IT leaders shows how deep the governance gap really goes.
Citrix announced two services expanding Platform Flex: Experience Insights Flex for managed workspace observability and SecurSpaces Flex for hosted, secure developer and agentic workspaces. The services use a shared credit pool, with Citrix managing analytics and infrastructure while customers retain control of identity, code, policies, and data.
IBM will deploy a large Nvidia HGX B300 cluster for Together AI on IBM Cloud, with availability expected in Q1 2027. The infrastructure is designed specifically for large-scale open-model inference.
Databricks acquired Electric, whose PGlite and sync technology lets agents keep fast local Postgres state synchronized with centralized databases. The team will join Neon to build infrastructure specifically for agentic applications.