2026-08-16

15 stories suggest →

Top stories

  1. AmnesiaStealer clones a macOS Chromium profile into a headless browser the operator drives live Jamf reports malware cloning Chromium profiles into hidden browsers the attacker drives, stealing sessions appearing from the victim's host. confirmed Security
  2. SpaceX completes its acquisition of Cursor, reported at $60B SpaceX completes Cursor acquisition at $60B, consolidating the editor, AI model, and infrastructure into a single vendor for standardized users. confirmed Markets
  3. Zsh 5.9.2 fixes a silent history truncation that discarded years of entries Zsh 5.9.2 fixes a silent bug that could truncate years of shell history when interrupted during exit, producing no error or visible warning. confirmed Dev tools
  4. A validation-centric agent workflow ports a 250,000-line Fortran weather code to GPU at 5.1x An agent workflow ported 250K lines of Fortran weather code to GPU at 5.1x, but a validation harness caught five of 162 kernels as wrong. confirmed Paper

AI

  1. Anthropic reports correlated choices, price collusion, and duplicated work across agent swarms Anthropic reports agent swarms converging identically, turning decisions into fleet-wide failures as they create same branches and match prices. confirmed

ML research

  1. LittleLearner trains models on a K-5 corpus and reports scaling, GRPO, and in-context learning do not push capability past the curriculum Models trained on K-5 curriculum data report that scaling and GRPO training amplify in-scope ability without improving out-of-scope performance. confirmed

Agentic coding

  1. A single-author case study reports an agent dismantling a lifetime invariant across 189 files of a 717k-line codebase for $2,430 A case study reports an agent refactoring a 717k-line codebase across 189 files for $2,430 using audit cycles verifying the agent's own output. developing

Security

  1. A threat actor sells Azure directory exports totalling millions of records from McDonald's, TCS, Vodafone, and six other enterprises Hudson Rock reports an actor selling Azure directory exports from nine enterprises, naming employees and admins in records totalling millions. developing
  2. A full-access Composio key returns the live Gmail, GitHub, and CircleCI tokens behind it in a vendor lab test Cyera demonstrates a Composio full-access key returns Gmail, GitHub, and CircleCI tokens, requiring separate revocation of each grant. confirmed

Languages and runtimes

  1. GCC 16 guarantees trampoline-free nested functions and GCC 17 merges builtins that extend it to captures GCC 16 guarantees nested functions do not need trampolines, allowing C code to drop the executable-stack requirement hardened systems reject. confirmed
  2. Dmitry Grinberg argues RISC-V optionality and compressed encodings fail both ends of the market Dmitry Grinberg argues RISC-V optionality serves neither embedded nor high-end markets, making it hard to ship portable binaries. discussion

Infrastructure

  1. DuckDB v2.0 will read Parquet and CSV asynchronously, cutting an S3 benchmark from 8.2 to 2.8 seconds DuckDB v2.0 adds asynchronous reads for Parquet and CSV on S3, cutting a benchmark query from 8.2 to 2.8 seconds by fixing request concurrency. confirmed
  2. AWS Lambda adds public preview runtimes, starting with Node.js 26 and Python 3.15 AWS Lambda preview runtimes for Node.js 26 and Python 3.15 graduate to GA without configuration change, letting teams test early with no SLA. confirmed
  3. A Cloudflare customer argues product surface area has outgrown the platform's observability A Cloudflare customer argues the platform ships faster than observability tooling, with traces stopping at the boundary and 0 ms compute time. discussion

Markets and companies

  1. Three more OpenAI C-suite departures land within about a month ahead of its IPO Three OpenAI C-suite members depart within a month ahead of IPO, including revenue chief Denise Dresser, affecting commercial terms and support. confirmed