Four AGs put Meta's engagement design on trial, not its content moderation. Every story that day, by desk. 495 stories in all. Times are Pacific.
Security35 stories
- Two loops, one blocklist bypass: Elementor Pro's upload field becomes unauthenticated RCE
- Zombie cards: expired plastic still pays because nobody owns the expiry check
- A JWT Walks Out of a Cloudflare Worker at 12 Bits a Second
- CISA's KEV clock now runs on BOD 26-04, and your patch SLA cites the wrong directive
- SilkParasite: AI turns up as a build tool inside a human-run espionage kit, not as the author
- The 155x spray spike is a scope problem: MFA that never covered Azure CLI
- Defender broke on a signature update, and the fix Microsoft offered was to roll forward
- 659 live Stripe keys and 35GB of payment data for sale: scanning is now a fraud control
- CareCloud's Breach Went From 350,000 to 3.7 Million, and the State Filings Still Say 350,000
- 14,530 Dahua cameras in 35 days, and the only exotic tool was masscan
- Ukraine's asset agency was attacked on the tender calendar, not the network map
- NASA's AIT-GUI Ground Console Shipped Without Auth: CVSS 9.4, Fixed in 2.5.2
Build130 stories
- Your inference gateway now has an owner: Stripe took OpenRouter, Ramp is buying share at zero fees
- AI-written snap7 scripts move the scarce resource in OT attacks from skill to exposure
- Ornith-1.5 moves the RL loop upstream, and the hard job becomes reward design
- SpaceX went shopping for a second AI coding company five days after closing Cursor
- The sandbox is the product: what user-generated features actually require
- Grok Bot's entry price is $300 a month, and all 50 of your bots share one machine
- The best grade for controlling in-house AI agents is a C+, and buyers can now cite it
- Grok 4.6 lands on Bedrock at $2/$6, turning an xAI decision into a line item
- Vivodyne is spending venture money on wet-lab throughput, not bigger models
- OpenAI slows training after its own model breached Hugging Face: a safety gate builders must plan for
- GLM-5.3 changed nothing but the training environments. That is the whole test.
- TrueFoundry open-sources an agent harness and calls managed agents a lock-in play
- The $559M-versus-$12.3B quarter matters more than the $65B run rate
- The $40M order matters more than the $22M SAFE at Relativity Networks
- 128GB of DDR5 is $3,399: your 2026 memory budget is void
- Mojo is Apache 2.0 now. The licence was never the hard part
Invest97 stories
- OpenAI puts a date on its IPO: 2027, on a $40B run rate it has yet to bank
- A $12m Shanghai insurer sold most of itself for 2,380 Bitcoin
- Fairshake won four primaries cheaply and lost the one race it actually tried to buy
- Cypherpunk paid $33.33m for Zcash rigs in shares, and its own backer was the seller
- An AirTag in a book shipment reveals what legally clean training data actually costs
- Crypto's market structure bill is now a lame-duck problem, at best
- Marvell just put Google's purchase orders on its cap table
- Moderna doubles on a Phase 3 win whose effect size has not been published yet
- Anthropic's reported $11.6B quarter puts OpenAI's 18% on the defensive before either lists
- 23 of 40 New Bank Charter Applications Now Involve Digital Assets, OCC Says
- Amazon takes drones to 500 cities, and the bill comes in launch sites
- Nvidia is brokering the Nordic build-out, not just supplying it
- Also raises $150M past a $1B valuation, and the e-bike is the least of it
- Unitree's debut prices 5,500 robots at $66 billion, or 262 times revenue
- Pennsylvania makes the data center tax break conditional and the fast track a reward
- Samsung Finally Has Foundry Pricing Power, and It Is Charging China For It
- Kalshi asks the CFTC to put crypto's perpetual futures on US stocks and copper
- Nvidia's H200 clears customs in China just as its share there heads for 8%
- Tokenized stocks hit $9B in onchain volume, and the cause is distribution
Product104 stories
- Waymo's cheap-to-build robotaxi goes general in three cities: 300 deployed, thousands inbound
- Apple's reply narrows the io case to a bug and a download, not a phone call
- A GOP memo moves data-center siting from a permitting problem to an electoral one
- Cyberleek dumped GTA 6 footage nine days early, with a memecoin attached and no provenance
- Also raised $150M for a parts bin, not a bicycle
- OpenAI turns zero retention into a sales pitch with Private Safety Processing
- A $750 camera with snap-on propellers tests where the drone ban stops
- Temporal's second doubling in a year prices durable execution as agent plumbing
- Amazon's drone service goes from 11 sites to nearly 500 towns, and the aircraft is not the constraint
- Google gives US students a $200 AI plan free, plus a renewal date and 5TB of switching cost
- Valve's leaked setup videos settle the Steam Frame's hardware. Price is the last blank
- A robot used a dustpan as a brush: what that proves, and what it does not
- Rillet's $1bn bet: rebuild the general ledger around agents, not bolt a copilot onto it
- Meta's Mac app is a data connector wearing a chatbot's clothes
- Stripe buys the toll booth: a reported $7.5bn for OpenRouter, and the routing layer
- The Pixel 11's hardware changelog: a glass camera bar and seven grams
- Code in TikTok's US app puts the wallet in the inbox, not at checkout
- Marvell's $12.2bn warrant pays Google in Marvell stock, one $500m order at a time
- Nebius funds $4.5bn of AI capacity on terms that pay lenders mostly in stock
- Four AGs put Meta's engagement design on trial, not its content moderation
- The $40m repeat order, not the $22m SAFE, is Relativity's real disclosure
- Google moved the Pixel 11 Pro's upgrade case into software. Judge it on rollout risk.
- Pixel Watch 5 costs $50 more for health features that ship next month, or later
- Harness hands vulnerability triage to agents, and concedes code fixes cannot keep pace
- A five-hour script beats Claude's watermark, so stop treating it as provenance
- Prevalent AI takes $22m after nine years, betting security teams need an inventory not another feed
- LandSpace recovers a steel booster while Super Heavy waits on clearance
- Adronite's Codistry makes token count, not context window, the axis of competition
- A "private and secure" face search left 9 million images in an open bucket
- IBM cools and links its first two quantum fridge modules, with Starling still dated 2029
- Flock built the thing it said it could not do, then left the prompts on a public server
- Cerebras's CS-4 is three old wafers in a new rack: price the packaging, not the silicon
- Nvidia's H200 finally lands in China at about 1% of the order book
- Pennsylvania Makes Data Centre Siting a Signed Consent Order, Not a Permit Queue
Leadership35 stories
Science94 stories
- Whales at 70 north: East Greenland's food web is being rebuilt in one career's span
- Cats leave a 13-compound calling card in urine, and the kidney may be the warehouse
- Shrew skulls do not simply shrink for winter: the snout grows while the braincase flattens
- NASA finds hitchhiking microbes could persist at the lunar south pole, on a one-day clock
- In people past 110, one rare T cell keeps growing instead of fading
- Beijing's willows are now an air-quality decision, not a landscaping one
- A star with an 8.7-year orbit turns black hole spin into an observing schedule
- Merck and Moderna clear the Phase 3 bar on a personalized cancer vaccine, minus the numbers
- USDA files to rescind the Roadless Rule, and its fire rationale runs against the ignition data
- A 4 cm fish from a Bihar handpump is the first ever recorded in the Gangetic aquifer