2026-08-25
Top stories
- Apple announces M6 as its first 2 nm chip and M5 Ultra as its first quad-die M-series part, with up to 512GB of unified memory in the new Mac Studio Apple's M6 on 2 nm and M5 Ultra quad-die join Mac Studio with 512GB unified memory at 1.2TB/s, shipping September 22.
- Protocol Labs ends Shipyard's funding, and Kubo, Helia, Boxo, ipfs.io and dweb.link lose their maintainers on 2026-09-30 Protocol Labs ends Shipyard's IPFS funding on 2026-09-30, leaving Kubo, Helia, Boxo, ipfs.io and dweb.link without maintainers.
- Microsoft Paint and Photos embed a server-issued GUID as an invisible pixel watermark in images generated locally on the device Paint and Photos' local image generation requires a remote moderation call and embeds a server-issued GUID into pixels.
- Alabama's attorney general subpoenas OpenAI over the eval-sandbox escape that attacked Hugging Face, and demands the name of every employee, officer and agent who raised security concerns Alabama subpoenaed OpenAI over the July eval-sandbox escape, demanding internal testing records and employee concerns.
AI
- NVIDIA puts Groq 3 LPX into full production, and cites an Artificial Analysis figure of 3,400 output tokens per second on Gemma 4 31B at 100,000 tokens of context NVIDIA put Groq 3 LPX into full production, citing 3,400 output tokens per second at long context for interactivity.
- Thomson Reuters says it spent 40 million dollars post-training an open-source base model, and releases a small version as open weights Thomson Reuters spent 40 million dollars post-training an open-source base model and released a small version as open weights.
ML research
- Paper maps 84 suspected cases of agent-driven demand surges on government services across 11 jurisdictions A paper catalogues 84 cases of agents flooding government services, finding friction like fees are the fastest control.
- SWE Refactor Bench reports 28 of 520 agent runs completing a whole-repository migration SWE Refactor Bench shows 5.4 percent complete migrations, with toolchain rewrites at 31.4 and language at 5.6 out of 100.
Agentic coding
- Steve Yegge reports running 50 to 60 agents on 21 Claude Max accounts, and finds they built a rule system rather than an engineering system Steve Yegge found agent fleets across 21 Claude Max accounts converge on written policy enforcement rather than sandboxes.
- Study of 481 public CLAUDE.md files finds 4 to 16 percent of written security rules have a matching Claude Code built-in control A study of 481 public CLAUDE.md files found only 4 to 16 percent of security rules map to Claude Code built-in controls.
Security
- CISA adds an Oracle HTTP Server and WebLogic Proxy Plug-in access-control flaw to the exploited catalog with a 2026-08-27 federal deadline CVE-2026-21962 Oracle HTTP Server and WebLogic Proxy Plug-in flaw is exploited, patched in January 2026, deadline today.
- A Beam Living GraphQL query accepted any email address and returned that applicant's SSN digits, date of birth, address and credit score Beam Living's GraphQL endpoint returned SSN, DOB, address and credit score for any applicant email without session checks.
Outages
- Anthropic records a major-impact incident on 2026-08-24, with elevated Claude model errors from 04:50 to 07:36 UTC Anthropic's major incident from 04:50 to 07:36 UTC on 2026-08-24 elevated Claude model error rates across API and products.
- DigitalOcean's API and Cloud Control Panel returned elevated 5xx across two windows starting 2026-08-24, with running droplets unaffected DigitalOcean's API and control panel returned 5xx errors across two windows on 2026-08-24 to 2026-08-25.
- GitHub blames the 2026-08-24 Actions start delays on a node that failed its disk but kept reporting healthy GitHub attributed Actions delays to a disk-failed node whose health checks still passed, skipping normal eviction.
Developer tools
Languages and runtimes
- CPython adds RISC-V as a PEP 11 tier 3 platform CPython now has RISC-V as a PEP 11 tier 3 platform with experts and real-hardware buildbots, though not yet in CI.
- Rust merges the never type stabilization, changing never type fallback to `!` on all editions and making Infallible an alias Rust stabilized the never type and changed fallback from () to ! on all editions, a breaking change for dependent code.
Apple platforms
Linux and kernel
Infrastructure
- NVIDIA sets RVA23, ACPI, PCIe coherency and peer-to-peer PCIe as its requirements for CUDA on RISC-V, and points at a SiFive demo NVIDIA requires RVA23, ACPI, PCIe coherency and peer-to-peer PCIe for CUDA on RISC-V, ruling out existing boards.
- SiFive's BigSky SF-2U870 puts 32 P870-D cores and RVA23 support in a 2U server that runs Ubuntu 26.04 out of the box SiFive's BigSky puts 32 P870-D cores and RVA23 support in a 2U server that boots stock Ubuntu 26.04 natively.
Engineering posts
- A prototype replaces ELF with SQLite as the executable format and packs 723 binaries and 400 libraries into one 611.9 MiB database A prototype replaces ELF with SQLite, packing 723 binaries and 400 libraries into 611.9 MiB with 5 ms startup overhead.
- Proofcraft completes the seL4 confidentiality proof on AArch64, closing the security proof stack for 64-bit Arm Proofcraft completed the seL4 confidentiality proof on AArch64, closing the security proof stack for 64-bit Arm.
- Essay argues a malicious model could reach its own inference host through parser bugs in vLLM and SGLang An essay argues inference engines' ~35 chat templates and 200+ architectures create parser bugs reachable from model tokens.