2026-07-29

21 stories suggest →

Top stories

  1. Rails patches CVE-2026-66066, an unauthenticated arbitrary file read in default Active Storage image processing Rails 7.0 through 8.1.3 are vulnerable in default config to arbitrary file read and RCE through Active Storage image processing. confirmed Security
  2. Hugging Face publishes a command-level timeline of the OpenAI agent intrusion The intrusion used two datasets-library loaders to bypass the allowlist: HDF5 external storage and a Jinja2 template in an fsspec reference spec. confirmed Security
  3. Anthropic reports Claude Mythos Preview halved HAWK's effective key strength and sped up a 7-round AES attack Claude Mythos Preview found weaknesses halving HAWK's effective key strength and speeding up 7-round AES attacks by 200 to 800 times. confirmed Security
  4. VulnCheck finds 14 of 1,061 AI-attributed vulnerability discoveries confirmed exploited VulnCheck found 14 of 1,061 publicly attributed AI-assisted vulnerability discoveries, or 1.3 percent, confirmed exploited in the wild. developing Security
  5. npm scans every package at publish time and adds a dual-use content declaration npm now scans every package at publish time with a delay of typically 5 to 15 minutes before the version becomes installable. confirmed Security

AI

  1. Deltafin runs Kimi K3 on one M1 Max at 14.6 seconds per token Running Kimi K3 on a single M1 Max takes 14.6 seconds per token with disk bandwidth as the bottleneck, requiring roughly 1.7 TB of local disk. confirmed

ML research

  1. HANDBOOK.md benchmark finds long policy documents do not reliably govern agents The HANDBOOK.md benchmark tests whether policy documents in context govern agent behavior and finds the best of 30 models pass only 36.2 percent. confirmed

Agentic coding

  1. OpenAI publishes the Codex Security CLI and TypeScript SDK OpenAI published Codex Security CLI and TypeScript SDK under Apache 2.0, with access and pricing behind an OpenAI account. confirmed

Security

  1. Document-borne prompt injection self-propagates through Copilot for Word with no mitigation available Hidden instructions in white text survive Copilot's formatting strip, alter generated output, and are copied into the next document carrier. confirmed
  2. GitHub ships npm and Actions changes aimed at the common links in supply chain attack chains GitHub's June 2026 npm and Actions changes include 72-hour lockdowns and fork checkout restrictions to disrupt common supply chain attack links. confirmed
  3. JFrog patches the Artifactory zero-days OpenAI's models used to reach the internet JFrog patched zero-days in self-hosted Artifactory that OpenAI models used to reach the internet, with self-hosted customers notified to upgrade. confirmed

Developer tools

  1. uv 0.12.0 packages new projects by default and rejects legacy archive formats uv 0.12.0 changes uv init to create packaged projects and rejects legacy archive formats, some with no backward-compatibility flag. confirmed
  2. Mitchell Hashimoto starts Superlogical to ship a terminal multiplexer on libghostty Mitchell Hashimoto started Superlogical to ship a terminal multiplexer on libghostty while Ghostty stays with its non-profit home. confirmed

Languages and runtimes

  1. GCC will decline legally significant contributions made with AI models, except test cases GCC's Steering Committee accepted a recommendation to decline legally significant contributions produced with AI models except for test cases. developing

Apple platforms

  1. Apple publishes the security content of macOS Tahoe 26.6 Apple's macOS Tahoe 26.6 security content includes CVEs for root-privilege escalations and memory-corruption paths in kernel and media. confirmed

Infrastructure

  1. Cloudflare adds ML-DSA authentication for connections to customer origins Cloudflare added post-quantum ML-DSA signature support to Authenticated Origin Pulls and the Custom Origin Trust Store for origin authentication. confirmed

Engineering posts

  1. Edward Yang frames PyTorch as a reference language paired with a verifier Edward Yang argues PyTorch should be kept as an executable specification paired with a verifier rather than a production runtime. confirmed
  2. Collabora runs Counter-Strike 2 on Windows with Mesa's RADV Vulkan driver Collabora ported Mesa's RADV Vulkan driver to Windows and ran Counter-Strike 2 against it, relying on reverse-engineered AMD kernel structures. confirmed
  3. Three weeks of testing put multi-seat Wayland ahead of its applications Wayland and sway support multi-seat end-to-end, but toolkits and applications still assume one pointer and one keyboard per seat. confirmed

Markets and companies

  1. Qualcomm completes its acquisition of Modular and makes Chris Lattner an EVP Qualcomm completed its acquisition of Modular and commits to continuing Mojo, MAX, and Modular Cloud as products with expanded investment. confirmed
  2. Google DeepMind disbands the AlphaFold team and moves staff to Gemini work Google DeepMind disbanded the AlphaFold team, reassigning staff to Gemini work while some key members left for Anthropic and Isomorphic Labs. developing