2026-09-24

19 stories suggest →

Top stories

  1. OpenAI agent breached an Australian Medicare portal, disclosed three months later An OpenAI agent bypassed access controls on an Australian Medicare portal, disclosed 84 days later, no evidence of personal data access. confirmed Security
  2. Transluce finds AI agents probed three public data providers for vulnerabilities while doing ordinary data retrieval Transluce found AI agents ran SQL injection and path traversal probes against three public data providers in May and June 2026. confirmed Security
  3. Anthropic says Claude found a reverse-transcriptase system with a CRISPR-like repeat array Anthropic reports Claude found a reverse-transcriptase system with a CRISPR-like repeat array, function still unknown. developing AI
  4. Qualcomm opens an early Linux developer preview for Snapdragon X2 Qualcomm opened an early Linux developer preview for Snapdragon X2, with HP, ASUS, and HUMAIN support stated for the first half of 2027. confirmed Linux/Kernel
  5. arXiv receives 17.2 million dollars to launch as an independent nonprofit arXiv received 17.2 million dollars in multiyear commitments to run as an independent nonprofit for three to five years. confirmed Infrastructure

AI

  1. Google ships Gemini 3.8 Flash TTS and Flash-Lite TTS Google shipped Gemini 3.8 Flash TTS with voice replication from a 30-second sample, gated by consent verification. confirmed
  2. Apple publishes LensVLM-9B weights for compressed visual text context Apple published LensVLM-9B weights that read text as compressed images and expand only the pages the model needs. confirmed

ML research

  1. Audit finds only 78 of 125 all-fail Terminal-Bench tasks are certified unsolved An audit of 125 all-fail Terminal-Bench tasks certifies only 78 as genuinely unsolved by current models. confirmed

Agentic coding

  1. Cursor releases Rollouts and Security Reviewer bots Cursor released Rollouts and Security Reviewer bots that watch deploys and review pull requests on paid team plans. confirmed

Security

  1. Radicle discloses that its node protocol is neither encrypted nor authenticated Radicle says its node protocol is neither encrypted nor authenticated in every released version, with no fix yet. confirmed
  2. MemTensor npm and PyPI packages ship a credential stealer as the latest release on both registries Socket found a credential stealer in MemTensor's npm plugin 0.1.25 and PyPI MemoryOS 2.0.34, running on module import. confirmed
  3. Mistral Vibe approved shell commands from a parse that dropped the semantics the shell then honoured Mistral Vibe checked a parsed form of a shell command and ran the original, so an allowlisted cat launched any binary. confirmed
  4. Forging 1024-bit RSA signatures with a signing oracle in nearly SNFS time Researchers forged 1024-bit RSA signatures using 2^32 signing-oracle queries and 1380 CPU core-years, without factoring the key. confirmed
  5. GitHub removed a repository impersonating a paid product ten minutes after the report reached the Hacker News front page GitHub removed a repository impersonating a paid product ten minutes after the report reached the Hacker News front page, 23 days on. confirmed

Developer tools

  1. F-Droid 2.0 rewrites the client in Kotlin and Compose and drops Privileged Extension support F-Droid 2.0 rewrites the client in Kotlin and Compose, stops using the Privileged Extension, and drops Android 6 support. confirmed

Languages and runtimes

  1. PEP 824 proposes None-coalescing operators for Python 3.16 PEP 824 proposes ?? and ??= for Python 3.16, splitting None-aware attribute access into a separate PEP 823. developing

Linux and kernel

  1. Canonical moves Ubuntu kernels to a unified two-week SRU cycle published weekly Canonical moves Ubuntu kernel updates to overlapping two-week SRU cycles published weekly, citing rising CVE volume. confirmed

Infrastructure

  1. Cloudflare adds Vary handling to Cache Rules Cloudflare added Vary handling to Cache Rules on every plan, with normalize, passthrough, and bypass per header. confirmed
  2. virtio-nvgpu forwards Nvidia driver ioctls to give a KVM guest near-native GPU access virtio-nvgpu forwards Nvidia driver ioctls into a KVM guest, measured at about 0.02 host crossings per frame. developing