Top stories

  1. Nvidia agrees to acquire Hugging Face for $12.93 billion and states its own compute will not be required Nvidia agreed to acquire Hugging Face for $12.93 billion and states its own compute will not be required to use the platform.
  2. OpenAI and Anthropic ran model outages on the same day, 2026-09-03, with no stated common cause OpenAI and Anthropic each ran model outages on 2026-09-03, and neither vendor states a cause or references the other.
  3. Meta ships Muse Spark 1.3 to Muse Code and the Meta Model API, holding max reasoning back for safety testing Meta shipped Muse Spark 1.3 to Muse Code and its Model API, holding the max reasoning mode back for safety testing.
  4. GitHub measures that shortening agent tool output raised total task cost in its own harness GitHub reports that truncating agent tool output with RTK raised total token use and task time in its own harness.
  5. Cursor moves cloud-agent tool execution onto customer machines while the agent loop and transcripts stay in its cloud Cursor's Self-Hosted Machines runs agent tools on customer hardware while inference, planning and transcripts stay in its cloud.

AI

  1. OpenAI begins a phased rollout of GPT-6 Astra, giving cybersecurity-program participants first access OpenAI began a phased GPT-6 Astra rollout, giving a limited group in its Daybreak cybersecurity program access first.
  2. IFM releases K2 Horizon, six Apache-2.0 models published with intermediate checkpoints, training code and logs IFM released K2 Horizon as six Apache-2.0 models with intermediate checkpoints, training code, data mixture and per-stage logs.
  3. Anthropic ships a browser-side checker for C2PA content credentials on files Claude produced Anthropic shipped a browser-side page that reads C2PA content credentials on files Claude produced, text excluded.
  4. Multiverse Computing releases Quasar 438B and cites Artificial Analysis for a score of 43 on its intelligence index Multiverse Computing released Quasar 438B and cites Artificial Analysis scoring it 43 on its intelligence index.

Security

  1. Five OpenChoreo advisories, one rated critical at CVSS 9.0, entered the GitHub Advisory Database four to five weeks after the project published them Five OpenChoreo advisories, one critical at CVSS 9.0, reached the GitHub Advisory Database four to five weeks after disclosure.
  2. Claude Code stores MCP OAuth tokens in a plaintext file on Linux and Windows A report finds Claude Code 2.1.257 storing MCP OAuth access tokens in a plaintext file on Linux and Windows.

Developer tools

  1. Audacity 4.0 rebuilds the interface on Qt, adds the one-way .aup4 project format, and ships without the scripting pipe Audacity 4.0 rebuilds its interface on Qt, converts projects one way to .aup4, and ships without the scripting pipe.

Languages and runtimes

  1. Polars 2.0 release candidate makes the streaming engine the default and drops the row-order guarantee for joins and group_by The Polars 2.0 release candidate makes the streaming engine default and drops row-order guarantees for joins and groupby.
  2. Wasmi 2.0 reports a 2.2x execution speedup and publishes the interpreter design behind it Wasmi 2.0 reports a 2.2x geometric-mean speedup over 1.0 and publishes the interpreter changes behind it.

Infrastructure

  1. A .name registrant reports ICANN approved destroying the entire third level of the gTLD, with reuse of the second level as the stated hijack risk A .name registrant reports ICANN approved retiring the gTLD's entire third level, leaving 22,000 registrants and a hijack path.

Engineering posts

  1. A developer emulating fused multiply-add finds the same subnormal rounding bug in Rust's standard library and in musl libc A developer emulating fused multiply-add found the same subnormal rounding bug in Rust's std and in musl libc.