ByteDance, the Chinese tech company behind TikTok and other content platforms, is developing a potential AI model with 10 trillion parameters, making it roughly 2 trillion parameters larger than Anthropic's Mythos, according to sources familiar with the project.

Source

Cloudflare shares surged 17% after hours after the web security and connectivity provider beat second-quarter 2026 revenue and earnings estimates and raised its full-year outlook. Revenue increased 36% year over year to $696.1 million, sending the stock above its previous 52-week high.

Source

Google helped create many of the technologies behind modern artificial intelligence, yet the company appears to have struggled to turn that advantage into sustained product leadership. Matthew argues that Google’s dependence on Search, caution about disrupting its advertising business, and internal organizational friction contributed to a surprising decline in its AI position.

Source

CISA has confirmed that attackers are using the WinRAR vulnerability CVE-2025-8088 in ransomware attacks, months after adding the flaw to its actively exploited list. Organizations still running versions older than WinRAR 7.13 should treat archive handling as a potential ransomware entry point.

Source

Proxmox VE 9.2 is the first release to offer official Arm64 support, extending its KVM, LXC, storage, clustering, and management platform beyond x86-64. The initial support is narrowly targeted at Nvidia Grace Hopper and Vera-based servers, not Raspberry Pi or other single-board systems.

Source

Human review failed to stop about one-third of malicious AI coding-agent requests in more than 40,000 simulated sessions. The miss rate rose to nearly 65% when dangerous behavior was hidden behind familiar script names, exposing approval fatigue as a serious security risk.

Source

GitHub Actions suffered a multi-hour outage on August 6, with failed workflows, REST API errors, rate limiting, and delayed webhooks. The disruption also spread to GitHub Pages, Copilot code review, the Copilot coding agent, hosted runners, and Enterprise Importer migrations—making it the platform’s sixth incident in the first six days of August.

Source

Amazon, Cursor, Microsoft, OpenAI, and Vercel have released Agent Plugins 1.0.0, an open standard for packaging AI-agent extensions once and deploying them across competing tools. The format combines reusable Agent Skills with optional MCP server configurations, targeting compatibility with ChatGPT, Codex, GitHub Copilot, VS Code, Cursor, and Amazon Kiro.

Source

Microsoft’s open-source code-testing-generator does more than create unit tests: it compiles and runs them, checks their assertions, and uses mutation-style checks to determine whether they can detect real code changes. The AI agent supports.NET, Python, Go, TypeScript, Java, and Rust through GitHub Copilot CLI and preview plugin support in Visual Studio Code.

Source

A malicious GitHub issue could reach CI workflow secrets and execute code through Anthropic’s Claude Code and Google’s Gemini CLI. Both vulnerabilities are patched, but OpenAI’s related Codex issue has no product update to install and requires workflow changes instead.

Source

Malware running inside a user’s signed-in Windows session can invoke Windows Hello for Business keys without stealing the PIN, extracting a TPM key, or triggering biometric approval. The resulting authentication may satisfy phishing-resistant MFA and let attackers register their own device, obtain long-lived Entra ID tokens, and add credentials where tenant policies permit.

Source

NatJack research presented at Black Hat USA 2026 found exploitable behavior in all 32 tested NAT products and configurations, spanning Windows, Linux, and macOS. The attack class can hijack active connections, poison DNS responses, or disable connectivity without requiring IP spoofing or Layer 2 access.

Source

A new TONTOU “interrupt injection” attack can re-poison branch predictors after Spectre v2 defenses run, allowing unprivileged code to extract sensitive data from Linux kernel memory. An AMD kernel fix is already available, but shared hosts remain at risk until administrators deploy it and review workload isolation.

Source

Switzerland’s federal IT office is reinstalling its on-premises Microsoft SharePoint servers after attackers compromised about 200 user and technical accounts. External access remains blocked while investigators determine which SharePoint vulnerability was exploited and whether anything beyond credentials was accessed.

Source

Broadcom is adding on-premises malware sandboxing, offline threat-intelligence updates, and AI-assisted operations to VMware Cloud Foundation. The VMware vDefend and Avi Load Balancer updates also introduce a guided security deployment workflow and native API protection for virtual machines, Kubernetes services, and AI workloads.

Source

Microsoft is rolling Planner into New Outlook for Windows, giving users a shared task-management hub beside email and calendars. The gradual rollout should reach everyone by the end of August 2026, while Outlook Classic and Microsoft To Do remain largely in maintenance mode.

Source

After weeks of silence, Microsoft has acknowledged that OneDrive Photos was force-installed on Windows 11 PCs, including systems that were not enrolled in Windows Insider. The AI-powered app’s rollout also reached enterprise devices managed through Intune, despite being designed for personal Microsoft accounts.

Source

Anthropic says a rewritten Claude Fable 5 biology classifier has reduced false-positive fallbacks by about 85% across its products. Users should see fewer switches to Opus 5 for health, lab-result, symptom, educational, and routine clinical questions, while high-risk biology research remains restricted.

Source

Microsoft’s August 2026 Patch Tuesday is expected to remain large, but the more urgent development is how administrators should respond: stop treating every CVE as an emergency and prioritize exploited, Internet-facing, and business-critical exposures. The guidance follows July’s record-breaking release and a newly confirmed SharePoint exploit.

Source