Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
A removed Flock camera exposed 1.6 million images and records of 50,200 vehicles over 21 days. Unencrypted Android partitions stored a key for footage encryption, and the device ran about 20 custom apps and captured bursts of vehicle images. Uploaded records could be searched by more than 2,000 agencies, including out-of-state users.
Hacktron AI researchers used Anthropic's security tool to exploit an OpenAI community-forum configuration flaw. They obtained internal sign-ons, accessed an employee's ChatGPT account, and reached GitHub-linked code. OpenAI paid the team $6,500 through its bug bounty program after disclosure, and OpenAI said it fixed the reported issues.
OpenAI released a disclosure process and six incident reports. Cases include 27 summaries containing prompt injections, use of an exposed API key, fabricated county data, unauthorized file uploads, repository writes, and public file-sharing. Reports can be delayed when third parties or undisclosed vulnerabilities require investigation and notification.
A cyberattack took much of the International Meteor Organization's aging web infrastructure offline.
Plugin4Shell bypasses SHA pinning in Claude Code, Codex, GitHub Copilot, and Gemini CLI plugins.
Attackers are actively exploiting a critical pre-auth RCE (CVE-2026-58138) in Orkes Conductor by escaping unsandboxed GraalVM evaluators to execute arbitrary OS commands, requiring an immediate upgrade to version 3.30.2.
Anthropic has chosen Accenture and its AI business Faculty as its first embedded evaluator to help implement a proposed slowdown in AI development. The partnership aims to evaluate models, conduct alignment assessments, and test safeguards. Anthropic and Accenture each expect to invest at least $1 billion in the project over the next five years.
Researchers disclosed two flaws that allowed OpenAI Codex to escape its sandbox, including one that could execute commands on a developer's machine from the strictest read-only mode without an approval prompt. OpenAI fixed both issues, but the incident is another reminder that coding agents should be treated like privileged software: keep clients updated, limit local permissions, and be cautious about opening untrusted repositories with agentic tools.
AI can only be as effective as the enterprise's understanding of its own data, relationships, and decision-making rules. Without a clear ontology and traceable path from data to action, AI can automate the wrong interpretation at scale. This makes governance, context, and organizational learning more important, not less.
AI agents complicate traditional IAM because one employee action may now pass through a model, agent, plugin, service account, API, and downstream application before anything actually happens. Companies need to govern agents as identities themselves, including defined permissions, attributable actions, access reviews, and audit trails that can reconstruct the full chain from the human request to the resulting business action.
Microsoft has introduced two new features to its Cloud Rebuild Windows recovery tool in Windows 11 Experimental Insider build 26340.9502: Drive Sanitization and Remote Deployment via Recovery CSP. These additions allow IT administrators to securely sanitize device storage hardware and remotely trigger full Windows 11 reinstalls without requiring a USB installer.
Cloudflare explains how relatively small changes to the consistent-hashing implementation used by one of its Pingora services allowed it to reclaim more than 100TB of RAM across its global infrastructure. It is a great example of how engineering economics change at hyperscale: shaving bytes from a data structure and reducing unnecessary hash replicas can turn into infrastructure savings measured in hundreds of terabytes.
Supabase Auth can support unsupported SMS providers through the Send SMS hook, while GoTrue handles code generation, hashing, expiry, and session issuance. This approach keeps authentication logic within GoTrue and delegates only SMS delivery to a custom endpoint, avoiding the security risks of building a separate auth subsystem.
Google is expanding Workspace Studio with custom triggers, Apps Script-powered steps, webhooks, and integrations with tools including Slack, Jira, Salesforce, HubSpot, Asana, and QuickBooks. The end-user rollout begins September 21, and the important detail for IT is that these capabilities are off by default with admin controls for integrations, webhooks, approvals, and URL allowlists - exactly the governance layer increasingly needed for employee-built automations.
A six-stage operating model for building an operational technology (OT) security program that prioritizes process availability and safety over IT-style confidentiality.
The September 18 release adds expanded voice translation, translated in-meeting chat, 4K/60fps content sharing, meeting-summary participant lists, redesigned host controls, and other Workplace improvements.
Sponsored
🔍 See what's really behind your media performance. 🛡️ Evaluate invalid traffic, brand safety, and viewability together. 📊 Make smarter media decisions with unified, explainable verification.
Founders are investing in businesses built around offline connection. New ventures include social groups, hands-on craft schools, and shared gaming experiences. People are wanting real-world interaction as technology makes socializing more isolated. Some founders are also targeting younger consumers seeking alternatives to traditional education or more meaningful ways to spend time offline.
Creator content is particularly relevant to younger shoppers, with 65% of Gen Z and millennials preferring AI recommendations that cite creators. However, only 29% say those citations increase their likelihood of purchasing. Creators are most useful for discovering brands and comparing products. Credibility matters more than audience size when consumers assess their recommendations.
Lowering CAC on Meta and Google starts with giving platforms the right signals and creative. Ads should lead with novel hooks tied to customer pain points and use language that reflects the target audience. Brands should optimize for new-customer purchases rather than total purchases. Then, test creative across personas, angles, and formats. 5 levers ultimately drive CAC: the offer, creative, account structure, landing page, and optimization signals.
Free audiences are much harder to monetize than paying customers. A campaign generated 3 paid subscribers from 7,500+ free readers versus 34 from roughly 350 existing customers. Instead of building an audience or product in isolation, build a small product, share the process publicly, and build relationships with potential customers. This creates distribution and trust while validating demand before scaling.
Sponsored
Tomorrow, Rachel Duffy from The Times and The Sunday Times sits down with Standing on Giants to unpack what it takes to build trust on Reddit, including the near misses along the way + Live Q&A. Can't make 11am ET / 4pm BST? Register for the recording.
Semrush MCP connects Semrush data to Claude and ChatGPT for live SEO research through natural language. The guide shows how to apply it across common SEO workflows using 16 copy-paste prompts. Examples walk through finding keyword opportunities, analyzing competitors, and diagnosing SEO issues without manually working through Semrush.
A panel of B2B marketers on September 25 will share how they use AI across creative workflows, from brainstorming through production. This session focuses on tools and prompts teams rely on and what they've stopped using. It also covers how to balance AI's speed with creative quality and includes live Q&A plus a vote on which workflow attendees plan to try.
Google is testing a model that pays publishers when their content materially contributes to AI-generated search results. The AI Contribution Pilot includes dozens of mostly small and midsized publishers across various industries. It could create a new revenue stream as AI Overviews reduce traffic from traditional search and establish a model for compensating publishers based on their content's contribution to AI answers.
A design brief often reveals only what clients know how to articulate. The real brief may emerge later through casual comments about how the brand will actually be used. For TrueRoll Golf Club, that meant designing for golf courses rather than travelers. The identity used familiar green and gold and minimal golf imagery. Designing for physical applications also shaped the system. Listen beyond the form and design for the brand's real audience and use cases.
OpenAI and Microsoft reportedly knew AI search could cut publisher traffic.
Across 34 of 37 countries surveyed, more people expect AI to eliminate jobs than create them.
Sponsored
Agents are smarter when they can search the web. But scraping Google gets expensive when you're burning extra tokens to parse messy SERPs into readable text. SerpApi [4] is the web search API [4] that gives you exactly what you need, out of the box: 👉 SCRAPE GOOGLE AND OTHER SEARCH ENGINES 👉 INTEGRATE WITH A SIMPLE GET REQUEST that any agent can make; get RESULTS IN .MD OR .JSON that any agent can read. 👉 Used by NVIDIA, ADOBE, SHOPIFY, and even the United Nations.
Anthropic claims that its Claude chatbot drives more than a quarter of its research and development work. There are over 30,000 agents doing research and engineering work at Anthropic at any one time. Its staffers collaborate with the chatbot for about 90% of their work. The company is trying to create a framework to track agents and monitor the amount of work they do.
Huawei plans to release two new AI chips next year. The company has now shipped more than 1,000 of its AI-computing systems to over 370 customers. China's AI chip market is projected to grow to $67 billion by 2030. Huawei's chip-making technology still trails Nvidia's, but the company is developing workarounds and new designs to squeeze in more computing power while using less advanced equipment.
Helix 2.5 is an advanced neural network pretrained on Index, Figure's global-scale dataset of human behavior. It can tidy living rooms, fold towels, and make beds in homes it has never seen. The model is the first evidence that whole-body intelligence can be learned from human experience and transferred to new scenarios. Index is now generating roughly 35 minutes of new human experience every second - if Helix 2.5 is any guide, more data and compute should translate directly into more of the physical world learned before a robot ever enters a new home.
The differences between the versions of the Raptor rocket engine are stark. Many people initially didn't believe SpaceX when the company released a picture of the three generations of the design. The streamlining of the design also brought meaningful gains in performance - the Raptor 3 provides about 35% more thrust than the Raptor 1. This article looks at what specifically SpaceX changed that allowed it to take the Raptor from a tangle of wires and pipes into the svelte, streamlined engine it is today.
Sponsored
Ads get ignored on social media but not in TLDR! Reach developers, PMs, marketers, founders and other tech leaders where they actually pay attention. Learn more about sponsorship opportunities [9].
Researchers chained two critical vulnerabilities to compromise multiple OpenAI employees' ChatGPT accounts in July. The accounts could access internal OpenAI repositories and potentially many other connectors. They used one employee's Codex to open a PR in OpenAI's internal monorepo. This post provides a full timeline of the disclosure process and details about how the vulnerabilities were discovered.
The release notes on the WebKit features for Safari 27.0 are the longest yet, detailing 83 features, including Safari MCP. Safari MCP makes working with coding agents dramatically easier. It gives users' agent of choice control over the browser window so it can see how code renders. The MCP provides access to the DOM, network requests, screenshots, and console output, allowing agents to do more with less effort from users.
Crusoe built one of the world's biggest AI supercomputers in Abilene, Texas. The company is now investing heavily in smaller data centers. It is manufacturing them in factories, loading them onto flatbed trucks, and deploying them wherever it can find available power. The company believes this is a faster and cheaper method than solely relying on large construction projects. Giant clusters with hundreds of thousands of chips are useful for training, but inference can be done with considerably smaller amounts of chips.
Anthropic's Mythos model sparked a shift within the White House as officials started realizing that AI can be used to launch cyberattacks and pose national-security threats. White House officials and AI executives are working on regulatory efforts, but when they disagree, the executives have gone directly to Trump. Trump has remained resolute that the nation needs to accelerate AI development and continue to build the data centers that are powering the AI boom.
Sponsored
Get hands-on with context-aware, omnichannel AI agents at Twilio Assemble SF on Sep 23. See live demos, connect with SF builders, and
You can turn any LLM into a System One model by batching prompts that generate a single token with structured output.
Bend is a language for communicating intent to AI.
The agreements provide each of them with 12 months of base salary paid out as a lump sum, an accelerated vesting schedule for their equity, the ability to exercise their vested stock options, and another year of health coverage.
Sponsored
AI is reshaping how software gets planned, built, and run. Join Atlassian and Vercel's CEOs and leaders from DX, Lovable, and more on how they're adapting for the AI era. Reserve your spot [19].
Bitcoin's quantum migration is a question of how to minimize total property-rights violations once elliptic curve signatures no longer reliably authenticate rightful ownership.
Code review used to be slow, but agentic review took that bottleneck away almost entirely.