2026-09-16
Top stories
- AWS says data hosted exclusively in its Bahrain region and one UAE zone cannot be restored AWS told customers that data hosted exclusively in its Bahrain region and one UAE availability zone cannot be restored.
- Two OpenAI Codex sandbox escapes disclosed, extending a run of coding-agent sandbox breaks Accomplish disclosed two Codex sandbox escapes, reported to OpenAI on 2026-08-12 and fixed within eight days.
- Apple Reference Image signs photos at the sensor and develops them in Private Cloud Compute Apple Reference Image signs captures inside the sensor on iPhone 18 Pro and 18 Pro Max, developing them in Private Cloud Compute.
- Two developers built a clean-room Linux GPU driver for the M4 Mac Mini in about a month using coding agents Two developers used coding agents to build a clean-room Linux GPU driver for the M4 Mac Mini in about a month.
AI
- Anthropic merges Claude Cowork into the main Claude app and adds Docs and Slides Anthropic merged Claude Cowork into the main Claude app and added Docs and Slides, ending Cowork as a separate product.
- TypeSafe AI launches Jev, a model class that emits typed structured values instead of text TypeSafe AI announced Jev, a model class that returns typed structured values rather than text, on vendor-run numbers only.
- Firefox Smart Window runs on Mistral models in beta Mozilla's Firefox Smart Window assistant is in beta on Mistral models in France and North America, with partners stating zero data retention.
ML research
- Audit finds SWE-bench can no longer separate its top coding agents An audit of 254 SWE-bench submissions finds paired tests separate none of the 29 adjacent pairs in the Verified top thirty.
- OPEN-1B claims a bitwise reproducible distributed training run Researchers release OPEN-1B and claim any single step of its distributed training run replays bitwise on one machine.
Security
- nginx patches an HTTP/3 buffer overflow in 1.31.6 mainline and 1.30.5 stable nginx 1.31.6 mainline and 1.30.5 stable fix CVE-2026-90439, a buffer overflow in ngxhttpv3module, rated medium.
- Effort names Israeli firm Irregular as the common contractor behind the Anthropic, OpenAI, and Meta model hacks Effort names Israeli security firm Irregular as the common contractor behind the Anthropic, OpenAI, and Meta model hacks.