2026-09-02

16 stories suggest →

Top stories

  1. A git config flaw runs attacker code in coding agents before the workspace-trust prompt Manifold Security reports coding agents run a repository's core.fsmonitor program before the workspace-trust prompt. confirmed Security
  2. Google ships Gemini 3.8 Flash and a cyber variant gated to trusted defenders, at 3.7 Flash's price Google shipped Gemini 3.8 Flash and a separate 3.8 Flash Cyber model gated to trusted defenders, at 3.7 Flash's price. confirmed AI
  3. FBI investigates an apparent breach at idscan.net after a service lists 153 million license scans Krebs reports the FBI's New Orleans field office opened an investigation into an apparent breach at idscan.net. developing Security
  4. Apple sets macOS 27 as the last release with general Rosetta support Apple states macOS 27 is the last release with general Rosetta support, with an exception for older gaming titles. confirmed Apple

AI

  1. World Labs introduces Atlas, a world model that takes camera pose and depth as native inputs World Labs introduced Atlas, an early-access world model taking camera pose and depth as native inputs and emitting 3D splats. confirmed

ML research

  1. A paper reports that replacing a network's representation process with a closed-form symbolic structure leaves its behavior largely unchanged A paper reports replacing a network's representation process with a closed-form symbolic structure leaves behavior largely unchanged. confirmed

Agentic coding

  1. GitHub Copilot code review can now approve pull requests in public preview GitHub put Copilot pull request approval into public preview, off by default and configurable at three admin levels. confirmed
  2. The ChatGPT Codex desktop app keeps a 1.7 GB runtime cache holding Python, Node.js, git, Poppler and LibreOffice Simon Willison found the ChatGPT Codex desktop app ships a 1.7 GB cache with Python, Node.js, git and LibreOffice. confirmed

Security

  1. curl 8.22.0 fixes nine CVEs, six of them credited to an AI system after two frontier cyber products returned no findings curl 8.22.0 fixes nine CVEs, and a security vendor claims six of them after both frontier cyber products found zero. confirmed

Outages

  1. Proton resolves a six-hour degradation that followed database maintenance Proton resolved a six-hour degradation across Mail, VPN and other services after a tested database maintenance change. confirmed

Developer tools

  1. Neovim merges native multiple cursor support Neovim merged a pull request adding native multiple cursor support, a capability previously supplied only by plugins. confirmed

Linux and kernel

  1. LWN raises subscription prices about 20% from 2026-09-15 and states subscriber growth has stalled LWN raises subscription prices about 20% from 2026-09-15, its first increase since early 2022, and cites stalled subscriber growth. confirmed

Engineering posts

  1. Cloudflare prototypes compressing its cache with Zstandard inside Pingora Cloudflare published an intern prototype that recompresses cache objects to Zstandard inside its Pingora proxy. confirmed
  2. A measurement of Perplexity's grounding finds three sites publishing 215,128 machine-generated buying guides among its most-cited sources A report finds three sites publishing 215,128 machine-generated buying guides among Perplexity's most-cited sources. confirmed
  3. An audit reports a third of Perplexity's numeric citations point at a page that does not carry the figure An audit reports 34.7 percent of Perplexity's numeric citations point at a page that does not carry the figure. confirmed

Markets and companies

  1. Uber cuts about 10 percent of staff and ends remote work for all but roughly 1 percent of employees Uber cuts about 10 percent of staff and ends remote work for all but roughly 1 percent of its employees. confirmed