Prediction markets get a seat at the crypto table, not the gambling one. Every story that day, by desk. 244 stories in all. Times are Pacific.
Security46 stories
- Courts Will Finally Count Government Hacking, But Only The Kind That Listens Live
- Seven agentic AI incidents, one front door: the identity metadata you publish on purpose
- A North Korean IT worker got hired by a federal agency. Vetting is a security control now.
- California's AI security push is really a hiring order: one AI cyber officer per agency
- Trezor was not breached. 13,689 of its customers were.
- A volunteer SOC for 45,000 water systems: what the Water Watch Center asks of operators
- RingCentral's platform held. Its customer records are on the internet anyway.
- The bug queue is about to invert: budget for reachability data, not patch throughput
- Arrests in the 30-million-euro German banking heist point at a payment provider
- At 65,000 expired domains a day, registration age has stopped meaning anything
- Anthropic is watermarking Claude's text everywhere, not just for Brussels
- ExfilSquad's 382GB haul may trace to one Power Pages permission, not malware
- The OAuth grant is the front door now, and Workspace controls are still watching email
- Thirteen new Metasploit modules close the patch window on SonicWall SMA1000, Ghost CMS and Langflow
- Card-present fraud without the card: WindRelay relays NFC from the victim's own phone
- Beacon cannot tell what the attacker took, so 1,000-plus charities must assume everything
- A contractor's six-month deal lapsed. The next day, a $2.5 million demand arrived
- Ukraine's 94-call-center sweep shows bank fraud runs on a shared supply chain
- WhatsApp's Scam Alert warns, does not block, and never sees the hijacked contact
- Apple's spyware alerts reached 110 countries, and they land on people, not fleets
- AWS gives email-validated certificates three 2027 deadlines, and the last one is a renewal cliff
- Chess.com's 7.3 Million-Record Leak Looks Scraped, And It Dragged Ad Segments Along
- One console, two businesses: Broadcom says Jewelbug runs espionage and crypto fraud together
- Dream Job now ships a kernel exploit: Lazarus pairs recruiter lures with a fresh AFD zero-day
- HoneyMyte's CoolClient adds a signed kernel driver that hides the backdoor from EDR
- The 2,500-org compromise was a Trivy problem. LiteLLM was the closing act.
- A free graph of ads.txt now shows which data brokers your own site authorised
- Clop's 43-victim batch puts PLM servers, not file transfer, at the centre of mass exploitation
- DGFiP breach started with a borrowed identity, not a bug
- Intel's 72 CVEs land in firmware, drivers and the AI tooling stack; AMD adds a dozen
- DeadLock reads its ransom chat address off Polygon, and seizures stop biting
- SAP's CVSS 10.0 Commerce Cloud bug needs a re-deploy, not just a patch window
- Eight warehouses down, six brands notifying: the Ceva outage nobody's plan modelled
- Kimwolf's new flood wears Chrome's fingerprints and takes orders from a blockchain
- ClickFix operators install the signed Deno runtime to run their remote JavaScript
- NIST concedes manual NVD enrichment no longer scales, and gives 62 days to argue about the fix
- The ransom is for silence now, and your restore drill does not price that
- SharePoint flaw went from PoC to honeypot hits in a day, and Microsoft's advisory is still silent
- The bottleneck moved: 622 CVEs in July, and no one left to write up the fixes
- The FTC wants ideological bias to be a Section 5 violation, and won't say how it would prove one
- CrowdStrike puts an allow-or-block decision inside Copilot Studio, before the tool runs
- Hugging Face breach ran 69 days: a containment failure, not a rogue-agent flash
- Five Eyes tell boards they have months, not years, and resilience becomes a governance question
- Bring Your Own Runtime: Sophos MDR maps a repeatable Deno-based intrusion chain
- Aeternum puts botnet C2 on Polygon, and leaves defenders no domain to seize
- CERT.PL says attackers reached a plant's OT network through a carrier private APN
Build92 stories
- The firm keeps the whole efficiency gain; the pipeline bill goes to everyone else
- Per-tenant Claude clients belong in the dependency graph, not in middleware
- PerceptionBench puts a number on the step your pipeline treats as free
- Kimi Work's feedback button ships your last five agent sessions, not the one you are reporting
- Laravel's session cookie is why your HTML never gets cached at the edge
- App Review rejections are design decisions you made six weeks earlier
- A coding agent deleted the rule its own rename had broken
- A reply bot's confidence score was always 0.85, because it was typed in, not computed
- Deltix's iOS agent only pays off if the successful run survives as a regression test
- The only gate that ran was a hand-typed enum, and it had never heard of the new value
- Three frontier launches in a day, all pitched on price. Open weights set the ceiling.
- Your token ratio, not the leaderboard, decides which model is cheap
- A Commerce Cloud RCE chain reached a honeypot three days after the patch shipped
- Unauthenticated root on macOS Screen Sharing: CVE-2026-65400 is already dropping miners
- GeoServer's jsonArrayContains filter is being probed at scale, with no patch and no CVE
- AmnesiaStealer drives your own browser, so session theft is the real macOS loss
- Nine If-Statements Beat One Model Call, Once Somebody Wrote The Cases Down
- Goish ports Go 1.25's runtime into no_std Rust to test what the concurrency model is worth alone
- If two people cannot reproduce the number, the dashboard is decoration
- The judge is the product: building the scorer for an AI malaria drug leaderboard
- The kill switch that deletes your evidence is not a kill switch
- Toast 1 claims MTEB parity with OpenAI. The cost math in the pitch is off by 1000x.
- Your agent needs the API call, not the API key
- OpenAI is paying for onboarding completion, and the price is set by remote config
- The free bank-data tier is gone, and your users have to re-authorize by hand
- MCP's caching hints will hand Alice's tool list to Bob unless identity is in the key
- A cached COPY --from=builder shipped yesterday's artifact under today's tag
- SEBI's algo rules turn your execution log into a compliance artifact
- Circle's eight World Cup agents are a machine-to-machine payments demo, not a betting stunt
- The Crypto Wars Ended, And The Prize Went To Whoever Owns Your Endpoint
- OCC clears World Liberty to hold its own USD1 reserves, taking BitGo's job in-house
- Starlink retires Global Roam on August 17, and ocean crews get the metered price list
- Draft State Department letter would make AI coalition membership an either/or for 35 countries
- Prompt injection is a permissions problem wearing a prompt engineering costume
- California's heavy-truck permits start a mileage clock, not a driverless freight service
- Flat logs cannot explain an agent run, and adding more of them makes it worse
- A Deleted API Key Kept Authenticating Because The Editor Froze It At Boot
- Making docs cite a test at a known commit turned into a coverage audit
- Grok 4.6 lands in Copilot two days after launch, and the model picker becomes a procurement problem
- A 1.5s speech-to-LLM win came from not sending silence and deleting a classifier
- A webhook that only verifies, claims and acks is the cheapest way to make delayed work safe
- A Linux terminal in one script tag, aimed at the day-one setup tax
- Your reviewing model is reading the diff when it should be reading the session
- Metrics live in RAM: why one observability pipeline hides three different failure modes
- Prisma v7 stops seeding for you, and the pooled URL will not finish the job
- Inference inside the SELECT: the point is the governance boundary, not the syntax
- 796 pages of semantic search with no vector database, and what it cost to skip one
- 211 Guards From 1,448 Sessions: One Operator's Case Against Prompting Agents Nicely
- One unsigned parent, dozens of children: why image signing keeps losing to scanning
- WRITER's new flagship is a post-train of Z.ai's GLM-5.2, and that is the story
- A green demo proves the agent can pass once; the shippable number is the failure rate
- Ontario wants new data centres in their own rate class, and the comment window shuts September 12
- Mixing self-hosted Qwen with Bedrock Claude costs you telemetry, not a rewrite
- AI referrals are 1.08% of visits, and the referral log is the wrong instrument
- Qwen 3.8's Apache-licensed 27B is the one you can actually own, and its KV cache is why
- The zero-false-accept memory result belonged to the proxy, not the model
- Proxylity's WireGuard listeners now admit strangers and hand each packet to Lambda
- Sluice puts a doorman in front of vLLM, because vLLM cannot tell who paid
- Nova Forge's serverless RL is GA. The reward function is still yours to get wrong
- GLM 5.3 adds no parameters, and its sharpest jump is in finding vulnerabilities
- vLLM's build now imports setuptools_rust unguarded, and that makes Rust non-optional
- The Jetson in the missile is a channel problem, not an AI problem
- JoyAI-Video-Edit ships weights and a 30 FPS causal pipeline you can time yourself
- GitHub agent apps move delivery integration from your CI config into the pull request
- Fabric Warehouse's one-minute floor turns your cheapest queries into your dearest ones
- Apple Intelligence stops being one runtime, and your test matrix doubles
- 1.5% of Hugging Face repos take 99.2% of downloads, and the ceiling is Chinese
- Two rejected papers: the shadow evaluation that undercuts autonomous AI research claims
- GLM-5.3 kept the base model and bought ten times the environments instead
- Two vendor counters, no benchmark: 1,816 parcels an hour is not a procurement number
- Uber and Pony.ai's 2,000-robotaxi Europe number is a fleet-ownership signal, not a schedule
- JetBrains says the JVM missed server rendering. Its proposed fix is Compose, not templates.
- Grafana Cloud folds its IP allowlists into one API; legacy formats expire January 31, 2027
- Claude opened 388 pull requests on Anthropic's own apps. 180 got merged.
- Qwen3.8's 27B dense checkpoint is the one operators can actually host
- Mistral is selling multi-year reservations on compute it has not built yet
- The 224,833-character prompt: how six months of style rules crowded out the job
- Looker's MCP endpoint retires the 292MB local binary, and most of the setup with it
- CrawlForge's SSRF guard checked DNS, so a decimal IP walked straight past it
- A fanless MacBook turned a thread-scaling sweep into a 54% error, and averaging would not fix it
- Meta's real announcement is the split: 30B on your GPU, everything else behind the API
- Cloudflare makes internal Workers private by default, conceding developer discipline never held
- 19 unsanctioned actions in 10 of 122 runs: nothing escaped, and that is the point
- A 160MB Attacker Workspace Is the First Real Parts List for Autonomous Intrusion
- SoFi's Coach Is A Plumbing Story, And Its 70% Number Is Not A Benchmark
- OpenAI puts latency on the price list: 750 tokens/sec, gated by workload fit
- Canada's federal AI register counts 409 systems, 42 agencies, and not much you can audit
- Freight autonomy splits in two: crew assist must be measured, driverless must be paid for
- GLM-5.3 is a paper, not an endpoint: Z.ai publishes research before weights
- Nobody owns the 150ms: why voice-agent pilots pass demo and fail on interrupts
- The infinite transition: a two-line CSS latch that keeps hover state and stores nothing
- Web Crypto hands you four hash algorithms free. MD5 is the one that bills you.
Invest69 stories
- A negligence claim over unsigned estate drafts moves stale-beneficiary risk onto the advisor
- ABFinance had the US licences and folded before it ever launched
- Texas got an exchange, not just a cheaper lease
- Taiwan just drilled the layer your continuity plan depends on: bandwidth, factories, ships
- Bank Indonesia's succession is settled before parliament votes on it
- $54 trillion lands with the surviving spouse. Most books are built for the other one
- Apple's Houston plant went from site pick to shipping hardware in under nine months
- A Yuanta broker out-earned his own CEO 24-fold in six months
- Single-family offices deploy billions and file almost nothing
- Agents that move money turn deposit stickiness into an assumption, not a fact
- LG's wheels ship in 2026, its legs get a launch event in 2027
- Three Claude agents, one task, and a malware turf war: the multi-agent bill arrives
- SharpLink routes $200M of ETH into Lido's wstETH, and DeFi risk onto its balance sheet
- GLM-5.3 Buys Buyers Time: Z.ai's Coding Model Cuts Tokens, Not the Closed-Model Lead
- Social Security's trust fund runs dry in six years, and the 22% cut is automatic
- Texas turns grid access into an audit, and Cipher treats the audit as an asset
- K-Beauty's Best Trade Is Now the Factory, Not the Brand
- Institutions trimmed the Magnificent Seven and bought chips. That is rotation, not an exit
- Justem's half-year profit triples last year's full year: capex has reached the invoice stage
- India's ₹1.275 trillion chip programme is, in practice, a power procurement decision
- Nvidia's $21bn SpaceX stake makes the chip vendor a part-owner of its own customer
- Prediction markets get a seat at the crypto table, not the gambling one
- Nvidia's $500bn GPU pool makes the seller the guarantor of its own demand
- Nearly half of ChatGPT's advisor citations were advisors' own websites
- Prop 40 leads 48-41, which is exactly the position a wealth tax loses from
- Washington's ballot budget warning survives, setting the template for tax repeal fights
- Metaplanet's 200 million yen bond debut is a plumbing test, not a raise
- BSC gives node operators until 02:30 UTC on August 25 to be running v1.7.7
- Lido's buyback only fires above $40M of revenue. Lido is running about $38M.
- A code review just made HKMA stablecoin compliance an on-chain question
- The Home Loan banks just became a political variable, not a funding constant
- BayFirst's $41.5M cleanup shows what a bad lending niche costs to exit
- Community banks want regulators, not their own lawyers, to fix AI vendor contracts
- Vance wants stable energy prices; the instrument is an indefinite blockade
- Convenience Store Stocks Are Being Priced As An AI Hedge. They Are A Fuel-Margin Bet
- Forty new unicorns in July, and 15 of them are under three years old
- Databricks raises $5B at $190B, and the multiple barely moved
- Klaviyo made agent fluency a condition of employment for 2,300 people
- Z.ai's 0.7-point CyberGym lead is a self-graded number on a model that is not yet open
- Speed becomes a SKU: OpenAI and Google put a separate price on latency
- Shinko's 22-layer glass substrate turns the AI packaging race into a heat problem
- MSCI puts a date on treasury-company selling: October 16 decision, November 2026 review
- Tokyo and Washington did not just move the yen, they moved the short base
- SMIC's binding constraint is floor space, and the AI crunch has reached power chips
- The SEC stopped grading exclusions, so issuers now mark their own proxy ballots
- Nvidia halves the Ohio backstop while the megawatts stay the same
- Washington licenses private hacking, and hands the contractor the liability
- Banks file 3% of the human smuggling reports and 61% of the dollars
- Brin's $102m Doesn't Fight Prop 40. It Funds Two Measures That Would Void It
- Code Metal's $80M WarMatrix award shows OTA is where defense revenue now shows up
- Reddit's index seat forces about $2.9bn of passive buying in a stock down 31% this year
- Unitree's $905M Shanghai listing prices humanoids at 35x sales while profit halves
- Tether's clean KPMG opinion moves the reserve argument from existence to scope
- Washington splits Kalshi's book: sports and elections geofenced by Aug 19, commodities untouched
- Citi buys Kard to make merchants pay for the rewards it funds today
- Nubank funds three bank charters out of a $1.1B quarter, with credit cost up 60%
- The OCC has a third answer on fintech charters, and it does not announce it
- Retail sales fell 0.6% in July, and the bad-news trade is about a hike, not a cut
- The White House put a $303B number on tariff evasion. Read it as an audit notice
- CFPB stops publishing complaint narratives just as the count hits 6.6 million
- The CFPB's Free-Then-Fee Open Banking Split Is a Litigation Budget, Not a Price List
- The 30-year cleared at 5.216%, and everything priced off the long end got dearer
- Shinhan Securities' 19.7% ROE rests on fee lines that have not met a drawdown
- SanDisk guides three years of near-peak margins and prices NAND as an AI input, not a commodity
- Korea swaps big housing numbers for near dates, and Namyangju is the test
- Korea's 3-million-won emergency loans jump 39.2% while banks squeeze everything else
- Nvidia is 13% of SK hynix sales. So is somebody else.
- ADP says AI is repricing tasks, not deleting jobs. That makes planning harder, not easier
- A DOJ privilege memo just moved the subpoena perimeter into the general counsel's office
Product30 stories
- Eleven minutes, three nodes, no humans: the real case for immutable node OSes
- Tor puts a censorship proxy on Google Play and makes bridge running a consumer install
- A dozen states, no marquee targets: the water hacks show where the attack surface actually is
- APIs built for human judgment now answer to agents that have none
- A builder edit is a deployment: define the deployable unit before it ships
- One dashboard, two answers: 41,900 units, then 43,100, with no code change
- Nvidia wants compute to be collateral, which moves the supply constraint from fabs to credit desks
- Chesky's own number: 159 of 175 YC companies are enterprise, and he sits on the board
- MSI's Claw EX finally makes a Windows handheld sleep, then asks $1,800 for it
- Lam Research puts $3bn into 50% more lab experiments, a five-year bet on memory tooling
- FTC signs deals not to enforce its own fair-lending orders against three auto-lending defendants
- Microsoft never announced a China exit. Five years of filings did it instead
- Cursor's case for being bought is unit economics, and the post-close note promises nothing else
- Made in EU starts at 5% concrete and says nothing about the software
- Three neoclouds, one pattern: revenue up, losses up, capex far ahead of both
- France's under-15 ban failed on the age check, not the age limit
- Canva's $7.1bn markdown is an inference bill, not a mood swing
- Washington puts a $120,000-a-day price on where Kalshi draws its category lines
- Copilot's ten-month feature lifecycle is the real story in Microsoft's August cull
- Mistral sold five years of compute it has not built yet, and used the money to ship endpoints
- Apple's Siri news pitch drops the one term publishers actually banked: the floor
- Washington licenses private hacking, and leaves the liability where the vendor stands
- Flock cuts plate-read retention to seven days, and admits defaults beat policy
- OpenAI's Computer History makes Mac activity logging an IT decision, not a personal preference
- VS Code moves agent sessions out of the editor and publishes the protocol under MIT
- Donato puts a number on Play compliance: 70 percent of phrasings must find rival stores
- Apple Ultra 3 vs Galaxy Watch Ultra 2: the deciding factor is software you cannot spec-sheet
- Vigor unveils USAV Craney Island, and the Army's landing craft plan finally has a hull
- Twilio's memory API removes the profile database from voice AI, and adds two model hops
- Washington's secret AI test is coming for open weights, and release dates go with it
Leadership5 stories
- Mangione's guilty plea puts pre-attack reconnaissance on the record
- Anthropic's invisible watermark lands hardest on the customers paying $100 a month
- Investors Are Pricing Anthropic Like Infrastructure. Check Your Exit Clauses.
- The client did the forensics: Sony's alleged WPP rebate audit is now everyone's template
- Anthropic watermarks Claude everywhere because it cannot yet watermark only Europe