2026-08-19

19 stories suggest →

Top stories

  1. GitLab ships a critical patch for an unauthenticated GraphQL code injection rated CVSS 9.4 GitLab released emergency patches for CVE-2026-19478, a CVSS 9.4 unauthenticated GraphQL injection affecting multiple versions. confirmed Security
  2. Apple moves EU app distribution to one set of terms and replaces the Core Technology Fee with a 5 percent commission Apple consolidated EU app distribution effective 2026-10-01, replacing the Core Technology Fee with transaction-based commission rates. confirmed Apple
  3. GitHub publishes the root cause for its 7 hour 47 minute outage: an Istio sidecar scaling gap, HAProxy flow exhaustion, and a VS Code retry storm GitHub's 2026-08-17 outage traced to Istio sidecar concurrency limits, HAProxy flow exhaustion, and client retry amplification from VS Code. confirmed Outage
  4. Modular open sources the Mojo compiler and toolchain under Apache 2.0 with LLVM exceptions Modular open-sourced the Mojo compiler and standard library, making the code readable and forkable with contributions opening by year-end. confirmed Languages

AI

  1. Cerebras announces the CS-4 with three WSE-3 Turbo wafers per system and first shipments this quarter Cerebras announced the CS-4 with three WSE-3 Turbo wafers, claiming 30 times faster inference than production GPU systems this quarter. confirmed
  2. OpenAI publishes a post on pacing model development against cyber-capability thresholds OpenAI published a post on pacing frontier model development against cyber-capability thresholds, but openai.com returned 403 for two days. developing

Agentic coding

  1. Linear reports coding-agent teams roughly tripled weekly pull requests over two years Linear reports coding-agent teams went from 21 to 65 pull requests per week over two years while non-agent teams went from 8 to 10. confirmed
  2. Anthropic extends the 50 percent Claude Code weekly limit increase through 2026-08-31 Anthropic extended the 50 percent Claude Code weekly limit increase through 2026-08-31, after which the promotion ends and limits return. confirmed
  3. Vercel Labs publishes fx, a Zig coding agent that embeds through WebAssembly and ACP Vercel Labs released fx, a Zig coding agent harness with WebAssembly compilation and Agent Client Protocol support for embedded deployment. confirmed
  4. Agent2Agent joins the Agentic AI Foundation alongside MCP under Linux Foundation governance The Agent2Agent protocol moved under Agentic AI Foundation governance alongside MCP, removing vendor control over multi-agent handoff specs. confirmed

Security

  1. Microsoft patches CoSnitch, a one-click Copilot exfiltration chain that Copilot itself disclosed Microsoft patched CVE-2026-24301, a critical one-click Copilot exfiltration chain that the researchers found by meta-hacking Copilot itself. confirmed
  2. Linux bridge STP timer use-after-free yields a control-flow hijack primitive, fixed upstream A use-after-free in Linux bridge STP timer cleanup yields control-flow hijack if the bridge is deleted while administratively down. confirmed

Outages

  1. Anthropic reports 2 hours 12 minutes of degraded performance across Claude models Anthropic experienced 2 hours 12 minutes of degraded performance across Claude models on 2026-08-18, traced to elevated errors on Opus 5. confirmed

Developer tools

  1. OpenLogi publishes a local-first Rust configurator that drives Logitech devices over HID++ OpenLogi released a Rust Logitech device configurator that keeps settings in plain TOML and needs no account or vendor service. confirmed

Infrastructure

  1. turbovec publishes a Rust TurboQuant vector index with reproducible benchmarks against FAISS turbovec published an MIT-licensed Rust vector index with reproducible benchmarks and committed scripts, outperforming FAISS in some regimes. confirmed

Engineering posts

  1. A failed Framework BIOS update leaves no recovery path short of external SPI flashing A failed Framework BIOS update bricked the machine with no recovery path except external SPI flashing, exposing the lack of firmware recovery. confirmed

New videos

  1. Rack-level teardown of the Cerebras CS-4 from a media day briefing TechTechPotato published a rack-level teardown of the CS-4 from a Cerebras media day, covering power, cooling, and roadmap to CS-5. discussion

Markets and companies

  1. Anthropic annualized revenue run rate reported above $65 billion ahead of an IPO Reuters and Bloomberg reported Anthropic's annualized revenue run rate above 65 billion dollars ahead of an IPO, both from unnamed sources. developing

Reddit and social pulse

  1. r/cursor carries a same-day cluster of slowdown, capacity, and usage-limit reports r/cursor saw same-day posts reporting UI slowness, high-demand messages for Composer 2.5, autocomplete degradation, and quota exhaustion. discussion