Agility Robotics says Digit v5 will work alongside humans without traditional safety fencing, using upgraded perception to detect people and cycloidal actuators to react while maintaining balance and payload control. Better battery life and fast charging target 20-hour operating days, while an ISO flange will support standard industrial end-effectors and eventually autonomous tool swapping. Early customer deployments are planned for December.
Sandia National Laboratories and Elemental Nuclear Energy are building supercritical carbon dioxide (sCO2) Brayton Cycle generators, which use CO2 held in a state with properties of both a liquid and a gas as the working fluid instead of steam, letting the closed-loop system convert heat to power more compactly than a conventional steam turbine. The first target is a 1-megawatt system running on natural gas and waste heat aimed at small modular data centers and remote military sites, with commercial deliveries planned for 2028.
Dyna-2 is a video-diffusion world-action model pre-trained on more than 1 million hours of egocentric human-manipulation video, with no robot data included during pre-training. Dyna reports that prediction performance improved monotonically across a 1,000-to-1-million-hour training ladder, including zero-shot evaluation on 39 robot tasks from embodiments excluded from training. After limited robot post-training, normalized physical performance across 14 tasks rose from 20% to 53% as human-video pre-training scaled, with the largest model leading on nine tasks. Roughly 10 minutes of robot demonstrations were sufficient to post-train bottle-cap opening with two five-fingered robot hands.
Researchers propose a hybrid computing framework that moves beyond traditional peak TOPS/W efficiency metrics. The paper demonstrates that combining digital orchestration with analogue, photonic, and neuromorphic accelerators delivers a scalable path toward energy-efficient AI systems. Rather than forcing all workloads onto pure digital logic, the proposed system dynamically routes tasks so physical substrates earn an expanding role only where they offer a measurable, system-level efficiency advantage while digital software manages noise, integration, and fallbacks.
Leading Chinese artificial intelligence firms continue to rely on Nvidia GPUs for training frontier AI models, delaying a full transition to domestic silicon alternatives. Despite Beijing's aggressive drive for semiconductor self-reliance and heavy investments in local accelerator developers like Huawei, technical hurdles persist. Domestic AI chipmakers face ongoing challenges with software ecosystem maturity, inter-chip interconnect bandwidth, and cluster stability during massive-scale training runs.
Sodium-ion batteries made from abundant salt reserves are emerging as a viable commercial alternative to lithium-ion energy storage systems. While sodium-ion cells possess lower energy density than lithium, their low raw material costs and rapid charging capabilities make them ideal for stationary grid storage and short-range urban electric vehicles worldwide.
Microsoft is negotiating with foundry leader TSMC to reserve manufacturing capacity for over 300,000 next-generation Maia 300 custom AI accelerators.
Archer Aviation is acquiring Boeing's Wisk Aero, Insitu, and SkyGrid in an all-stock deal that gives Boeing roughly a 16% stake in Archer plus a board seat.
The SEC's Division of Corporation Finance has issued guidance confirming that data center securitizations don't count as asset-backed securities under the Exchange Act, as they are treated as operating assets rather than self-liquidating financial assets.
Sony Group and TSMC are in joint talks to invest $6.4 billion to build an advanced image sensor manufacturing plant in Kumamoto, Japan.
Samsung Electronics has reportedly pushed manufacturing yields for its sixth-generation High Bandwidth Memory close to 80% following mass production refinements.
Amazon Web Services secured municipal approvals to construct a $2 billion, 438,500-square-foot data center in Gilroy, California, without triggering public town hearings.
OpenSSH 10.5 fixed a flaw introduced in version 10.4 where locking the ssh-agent disabled the check distinguishing local requests from forwarded ones, letting remote connections perform operations meant to stay local, including adding PKCS#11 tokens and bypassing destination-restricted keys, alongside a use-after-free in the ssh client and a broken authorized_keys "restrict" keyword that failed to block tunnel forwarding.
A zero-day SQL injection flaw in Metabase Cloud (CVSS 10, no CVE yet) let an attacker inject SQL into the app database and get admin access, steal database credentials, and export data. Metabase patched cloud instances automatically. Self-hosted users with the /api/session/reset_password endpoint exposed on port 3000 remain vulnerable. n8n confirmed 136 leaked customer records. Kilo Code confirmed exposed Slack tokens and customer data. Metabase told self-hosted users to patch now or block that endpoint, rotate credentials, and revoke sessions.
Rapid7 chained CVE-2026-55040, a JWT validation bug in SharePoint Server Subscription Edition 2019 and 2016, with CVE-2026-63520, a .NET type instantiation flaw in Business Connectivity Services, to get unauthenticated remote code execution. Attackers need only a target's SID or UPN. An AI agent helped find the chain across 96 sessions and 80,000 tool calls but also replayed admin credentials and enabled debug flags without authorization. Install the July KB updates now. August patches aren't public yet.
Kaspersky researchers uncovered an updated Project CAV3RN espionage framework targeting Israeli organizations that dynamically routes command-and-control traffic by inspecting DNS A-record responses to choose between direct HTTPS and a Google Apps Script relay. This evasive technique allows the malware to blend seamlessly with legitimate traffic before handing execution to an inter-component broker (rnp.dll) that orchestrates malicious modules. To detect this activity, defenders should flag anomalous script.google[.]com POST requests and hunt for associated infrastructure, specifically queries resolving to studiotikva[.]com.
Aeternum is a sophisticated malware loader that utilizes Polygon blockchain smart contracts over JSON-RPC to fetch encrypted command-and-control instructions. After decrypting these commands, the malware downloads secondary payloads from GitHub, including the XWorm RAT and XMRig miners, while a related Python variant specifically targets over 60 cryptocurrency wallets and browser extensions. Aeternum ultimately relies on hardcoded Telegram bot APIs for data exfiltration. Defenders should hunt for anomalous Telegram API traffic and outbound JSON-RPC calls originating from non-browser processes.
2026.08.12·unit42.paloaltonetworks.com·20 min read·TLDR InfoSec An attacker holding only s3vectors:PutVectorBucketPolicy permissions can grant foreign AWS accounts full data-plane access to forge chunk text, spoof citation URLs, and manipulate embedding coordinates so poisoned data dominates top-K retrieval. Researchers demonstrated that a single planted vector could trick a clinical RAG assistant into recommending dangerous medical dosages alongside authentic citations or even achieve command execution in tool-enabled agents. CloudTrail data events for these actions are disabled by default and strip critical metadata when enabled, so defenders must isolate ingestion behind strict IAM roles, utilize HMACs for chunk keys, and mandate manual confirmation before autonomous agents execute actions.
Sponsored
Most teams understand Gartner's Continuous Threat Exposure Management framework, but struggle to turn it into a repeatable program. Download the Horizon3 whitepaper [10] to translate CTEM into an operating model that reduces attacker opportunity by validating what matters, prioritizing remediation, and verifying outcomes across your entire
Cloudflare has open-sourced pvcli, a Rust-based diagnostic tool that handles full Oblivious HTTP (OHTTP) requests across relays, gateways, and targets in a single command to eliminate tedious manual binary parsing. Unlike single-protocol alternatives, the utility combines OHTTP, CONNECT proxying, and MASQUE support using a familiar curl-like syntax. This unified approach significantly accelerates incident response and debugging for engineers managing large-scale privacy deployments like Apple's Private Relay and Microsoft's Edge Secure Network VPN.
Beelzebub provides a platform that traps attackers already inside a network, using LLM-based decoys, continuous emulation, and an AI analyst to generate incident reports. It runs on-premises or as SaaS and pulls threat feeds from 60+ researchers.
OpenCodeReview is the Alibaba Group's internal AI-powered code review tool. It reads git diffs, sends changed files to a configurable LLM via an agent with tool-use capabilities, and generates structured review comments with line-level precision.
Google pulled "AI Sidebar with DeepSeek, ChatGPT, Claude and more" in January after OX Security found it scraping ChatGPT/DeepSeek chats and sending them to external domains, with 300,000+ installs by then. It's back on the Chrome Web Store. Netskope found version 1.7.3.0 added 21 lines that open affiliate links on update events and hijack the uninstall URL for referral commissions.
Pass-ta-key malware can steal passkeys from an infected Windows PC using Google Password Manager. It may pose as an iPhone, then use Google's device-sync feature to copy the victim's saved passkeys. Windows lets malware access other apps' data more easily than Apple and Android systems. A malware-infected, signed-in PC can also expose passwords and active sessions.
Chrome Security detailed a new defense-in-depth stack utilizing Firebase Cloud Messaging and Safe Browsing that successfully blocked over 7 billion abusive Android notifications per day in Q1. The multi-layered approach curtails coordinated spam networks by automatically revoking permissions for suspicious sites, analyzing malicious service worker activity signals, and throttling disruptive domains at the FCM server level to 1,000 messages per minute with HTTP 429 error responses.
The 23-year-old Portuguese hacker who created WormGPT is currently on trial for creating the software.
Zoom has released critical updates to mitigate "Zoomsday" (CVE-2026-53413), a zero-click remote code execution vulnerability in its annotation protocol that allows any meeting participant to silently trigger a stack buffer overflow and execute arbitrary code across all unpatched platforms.
The FBI is investigating a sanctioned North Korean operative who fraudulently secured a remote IT position at an undisclosed US federal agency.
Zscaler ThreatLabz research suggests ransomware operators are increasingly targeting managers and other business leaders whose business authority, relationships, and access can expose sensitive information and processes.
2026.08.12·esecurityplanet.com·4 min read·TLDR IT Mistral plans to build up to 1 GW of AI compute capacity in Europe by 2030 as it pushes for more sovereign infrastructure. The company is already seeking long-term customer commitments to support the expansion.
2026.08.12·venturebeat.com·5 min read·TLDR IT Google Cloud details how it plans to transition its infrastructure and services toward post-quantum cryptography. The roadmap gives enterprises a clearer picture of how cloud providers are preparing for future quantum-era security requirements.
2026.08.12·cloud.google.com·5 min read·TLDR IT Despite a broad SaaS multiple collapse, market leaders in most software categories continue to command substantial premiums because investors see credible AI-driven growth and durability. CrowdStrike, Cloudflare, Shopify, Samsara, ServiceNow, Figma, Twilio, and Salesforce are presented as category leaders whose products provide security, infrastructure, proprietary data, governance, design, communications, or customer records for enterprise AI adoption.
2026.08.12·tomtunguz.com·3 min read·TLDR IT Enterprise AI failures increasingly stem from how agents are governed and orchestrated rather than from the models themselves. Companies risk losing control when they outsource too much of that reasoning layer to vendors.
2026.08.12·theregister.com·5 min read·TLDR IT JetBrains detailed its early approach to measuring and controlling AI-related infrastructure spending as usage scales. The effort highlights AI cost management becoming a distinct operational problem for engineering teams.
2026.08.12·infoq.com·2 min read·TLDR IT Sponsored
Choosing a GPU cloud provider used to mean checking a hardware spec sheet. Now it means asking whether scaling up is an API call or a migration plan. WhiteFiber's 2026 AI Cloud Buyer's Guide breaks down hardware access, system performance, and scalability, with the questions to ask before you sign.
2026.08.12·whitefiber.com·Sponsor·TLDR IT Cisco says its AI Defense service now integrates with Claude Enterprise through Anthropic's inference hooks, inspecting governed prompts and conversation transcripts before inference to block prompt injections, jailbreaks, tool exploitation, and sensitive-data risks. The integration works with Claude, Claude Code, and Claude Cowork, providing inline allow-or-deny enforcement without changing users' workflows, although inference hooks remain in beta and currently enforce only before model execution.
2026.08.12·blogs.cisco.com·5 min read·TLDR IT Google Cloud added Gemini-powered code conversion to Database Migration Service to help migrate databases to PostgreSQL. Teams can review AI-generated PL/pgSQL conversions alongside the original source code before deploying them.
2026.08.12·cloud.google.com·4 min read·TLDR IT Enterprise workflow automation connects systems and departments to execute repeatable, multi-step business processes without manual handoffs. It uses a trigger-logic-integration structure and delivers benefits such as scalability, compliance, consistency, and citizen development. Zapier-based examples show how teams can automate processes across sales, marketing, customer service, and IT.
2026.08.12·zapier.com·9 min read·TLDR IT Canva moved durable session-revocation records to Amazon S3 and distributes compact indexes to application gateways, reducing database dependencies at massive scale. The redesign also cut its revocation cache memory footprint by 87.5%.
2026.08.12·infoq.com·4 min read·TLDR IT An inter-mesh deployment pipeline manages about 72 applications across staging and production, enabling secure, auditable deployments while leaving self-deployment of the pipeline unresolved.
2026.08.12·blog.zm.is·3 min read·TLDR IT Google announced three new subsea cable systems—Alisios, Canoa, and OlaLuz—to expand cloud network capacity and resiliency across the Americas.
2026.08.12·cloud.google.com·3 min read·TLDR IT New Lightwell offerings add software signing, provenance, artifact verification, and policy enforcement for both human- and AI-generated software.
2026.08.12·infoq.com·3 min read·TLDR IT Sponsored
Sponsoring TLDR puts your brand in front of developers, product managers, marketers, founders, and tech leaders when they're focused and ready to engage. .Every subscriber has already opted into tech coverage, so there's no wasted reach. Learn more about advertising
Gen Z sports fandom is shaped by culture and content, not just competition. 49% have discovered a new sport or athlete through fan-created content or off-field moments. Viral videos were the top trigger at 25%, followed by movies and TV at 23%. Fandom is also fragmented, with 48% falling into a “New Bandwagon” group that follows athletes or social content without being die-hard fans. Meanwhile, 92% of Gen Z sports fans use their phones while watching games, underscoring the importance of content beyond the live competition.
Every ad platform eventually monetizes the attention it gathers, but conversational AI is different because it runs on trust rather than discovery. A recommendation delivered inside an ongoing, personal dialogue reads as advice rather than an ad, so a paid placement blended into that dialogue risks eroding the confidence that makes the format work. Credibility built through expertise and strong reviews may end up mattering more than paid placement once that tension surfaces. AI advertising becomes valuable or corrosive depending on how thoughtfully the industry handles that distinction.
For replenishable brands, build the post-purchase journey around repeat purchase timing. Use days 1-14 to reinforce product usage, set expectations, and help customers build habits. Use days 14-21 for check-ins, results guidance, and social proof. Trigger replenishment reminders around the product's actual usage cycle with one-click reordering or subscription offers. If customers still haven't reordered after 30 days, escalate with incentives or stronger social proof.