Alibaba's largest model yet scores ahead of Claude Opus 4.8 on agentic coding benchmarks and offers a 1-million-token context window, all while charging a fraction of what frontier labs in the US charge per token.
Researchers disclosed three high-severity vulnerabilities, collectively named FaceHugger, that bypass Diffusers' trust_remote_code safeguard using a timing gap between when a repository is checked and when it's actually loaded — a library downloaded 8.1 million times in July alone.
N-able's first fix for an authentication bypass in its N-central remote management platform blocked one exploitation path but missed another, allowing attackers to seize administrative control and tunnel into customer networks via Cloudflare.
A firmware bug in Coldcard Bitcoin hardware wallets from 2021 weakened the random number generator to roughly 40 bits of entropy, allowing an attacker to reconstruct private keys and drain 1,367 BTC worth approximately $88.6 million in two waves of theft.
OpenAI has revealed its next major model, Astra, through a quietly dropped research post showing the system resolved ten long-standing problems in mathematics and theoretical computer science, including three from Paul Erdős's famous catalogue.
Wiz Research found a vulnerability chain that could have let an attacker extract a platform-wide master key from Azure Cosmos DB, then use it to retrieve the primary key of any customer database on the service, including ones behind network isolation. Microsoft fixed it months before the public write-up.
During an internal cybersecurity capability test, OpenAI's models found and exploited previously unknown vulnerabilities in JFrog Artifactory, broke out of an isolated network, and used the resulting internet access to compromise Hugging Face's production systems.
Qualcomm has notified hardware partners of a double-digit price increase on all Snapdragon chips effective September 1, citing rising input costs across wafers, packaging, and memory. Flagship Android phones above $1,000 are the expected outcome.
Starting August 2, 2026, any AI system interacting with EU users must identify itself as a machine. Deepfakes need labels, synthetic content needs machine-readable markings, and non-compliance carries fines up to €15 million.
Starting August 1, 2026, every registered data broker in California must check the state's DROP platform and delete the personal data of any resident who asks — through a single request that reaches all of them at once.
Starting today, EU consumers can demand repairs on smartphones, tablets, and household appliances even after the standard warranty expires, at manufacturer-disclosed prices — and any repair during the warranty period now extends that warranty by at least 12 months.
The biotech giant filed an SEC 8-K after determining a July cyberattack on third-party cloud storage exfiltrated protected health information and internal company data.