News from Friday, 10 July 2026
48 articlesAI Models & Capabilities
- OpenAI releases the GPT‑5.6 family (Sol, Terra, Luna) across ChatGPT Work, Codex and the API, with higher intelligence per token, lower cost for complex work, and stronger agentic performance; a new "ultra" effort level coordinates multiple agents in parallel for demanding tasks [1, 2, 3, 4, 5, 6].
- Meta launches Muse Spark 1.1 in its Model API, positioning it as state‑of‑the‑art for agentic reasoning and tool use, and introduces a paid tier priced at roughly 25 % of competing top models [1, 7, 8].
- GPT‑5.6 Sol wins an ARC‑AGI‑3 public game by correctly orienting itself in a new environment, marking a first for public models [4].
- Cognition reports that Claude Fable 5 is the first model it would trust to run overnight inside its Devin autonomous coding agent, citing reliability and multi‑step task execution [9].
LLM Tooling, Agents & Evaluations
- ChatGPT Work and Codex are positioned as a unified superapp; Work conversations in the cloud and desktop Work threads remain local and do not sync at launch [10, 11, 6].
- OpenAI retires Atlas browser and folds its agentic browsing features into ChatGPT’s desktop app and a Chrome extension [12].
- PostHog proposes delegating AI‑generated code reviews to agents to remove the human bottleneck while maintaining quality [13].
- GitHub improved Copilot code review by rewriting instructions for PR workflows, achieving ~20 % lower average review cost while maintaining quality [14].
- Researchers demonstrate a proof‑of‑concept attack ("Friendly Fire") that hijacks defensive cyber AI agents (Claude Code, OpenAI Codex) into remote code execution via prompt injection in tampered open‑source libraries [15].
- Cursor reports large disparities in coding productivity: top 1 % power users generate up to 40,000 lines/week vs. a median of 700; input tokens account for ~90 % of AI token usage during coding [16].
- Ruflo (formerly Claude Flow) is an open‑source agent meta‑harness wrapping Claude Code and Codex with 100+ specialized agents, coordinated swarms, self‑learning memory, and federated cross‑machine collaboration [17].
- Traycer is an open‑source AI orchestration app enabling parallel agent operations with shared memory, model switching, and team collaboration [18].
- socbench is a new benchmark for evaluating frontier reasoning models as SOC agents [19].
MLOps / DevOps & Engineering Practices
- GitHub assigned validated owners to every active internal repository in under 45 days, archiving the rest, to make ownership the foundation for security and operations [20].
- GitHub Mobile adds improved filters and sorting for Copilot sessions (status, repository, type, agent) with preserved sort context on iOS and Android [21].
- GitHub CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection for JavaScript/TypeScript, plus improved analysis accuracy across multiple languages [22].
- GitHub clarifies secret scanning detector types with new names (e.g., "AI‑detected secrets" → "Copilot secret scanning") without changing detection behavior [23].
- GitHub adds a REST API endpoint to retrieve per‑user states for multi‑user budgets, enabling faster spend tracking across large enterprises [24].
- npm 12 disables install scripts, git dependencies, and remote URL installs by default, requiring explicit allowlists; pnpm 11.10 tightens registry auth binding [25].
- AWS Secrets Manager adds managed external secret rotation for Paddle and GitLab tokens [26].
Cloud, Infrastructure & On‑Device AI
- Cloudflare improves Smart Tiered Cache for public cloud regions by accepting a cloud region hint, enabling better primary and fallback upper-tier selection for anycast/regional origins [27].
- Cloudflare announces Meerkat, an experimental global consensus service using the QuePaxa algorithm for leaderless, timeout‑free writes across 330+ data centers, targeting control‑plane state like database leadership [28].
- Cloudflare evolves AI search with content freshness signals to reduce unnecessary crawling and shifts Pay Per Crawl toward Pay Per Use, with experimental creator compensation and analytics [29].
- Apple explores running larger models (e.g., a 27B‑parameter Qwen 3.6 shrunk via PrismML) on iPhones to enable more on‑device Apple Intelligence features and enhance privacy [30].
- DigitalOcean launches Managed Weaviate in public preview, offering the open‑source vector database as a fully managed service with flat pricing starting at $20/month [31].
- etcd v3.7.0 introduces RangeStream for chunked large result sets, reduces CPU usage for Kubernetes control planes, and completes a protobuf overhaul [32].
- Calico v3.32.0 enables live migration of KubeVirt VMs without network disruption, preserving IP and identity during node‑to‑node moves [33].
- Bun is rewriting large parts of its runtime from Zig to Rust while keeping Zig for JavaScriptCore bindings, citing stronger ecosystem support and safer concurrency [34].
Developer Tools, Profiling & Performance
- Hugging Face publishes a guide on profiling attention in PyTorch for performance analysis of transformer models [35].
- PyTorch presents kernel fusion techniques (Lazy Pre‑Norm, Multi‑CTA Norm Fusion) that hide up to 90 % of normalization latency by fusing LayerNorm/RMSNorm into GEMM and attention kernels, and introduces FlashNormAttention for multiple normalizations around GDPA [36].
- Fal.ai details optimizations (FP4 computation, epilogue fusion, quantization‑aware distillation) that cut Ideogram v4 image generation from 2.75 s to 0.44 s without quality loss [37].
- NVIDIA Research introduces Flexible Video Diffusion (Flex‑Forcing) to switch between bidirectional and autoregressive generation, improving inference speed, video quality, and long‑range stability [38].
- PostgreSQL can prune partitions on non‑partition‑key filters by encoding guaranteed relationships via check constraints, enabling efficient queries by non‑partitioned columns [39].
Security & Incident Notes
- Discord’s AI moderation glitch wrongfully banned ~8,000 users in 24 hours after a model update misclassified grids/geometric shapes; appeals surged ~40× [40].
- Transsion phones (TECNO et al.) in Africa exfiltrate telemetry (GPS, cell towers, app usage) to Alibaba Cloud endpoints; defenders must DNS‑block shalltry.com and transsion‑os.com [41].
- Exploitarium disclosed 130+ unvetted PoCs, including a pre‑auth RCE in libssh2 (affecting curl, Git, PHP) and a Gitea admin‑impersonation flaw; patch libssh2 beyond 1.11.1 and validate X‑WEBAUTH‑USER headers [42].
- Microsoft patched the RoguePlanet zero‑day in Defender after public clashes with researcher Nightmare Eclipse; the bug abused a race condition for SYSTEM access [43].
- OpenAI faces sanctions risk after revelations it misled courts for years about the ability to search ChatGPT logs in copyright litigation [44].
- A Puerto Rico tax agency exposed ~1 M Social Security numbers via an unprotected interactive property map endpoint [45].
- Amazon and University of Michigan propose HydroShear to model tactile shear for robot manipulation in simulation [46].
Robotics & Hardware
Sources
- [AINews] OpenAI launches GPT 5.6 Sol/Terra/Luna, Codex becomes ChatGPT superapp latent.space
- OpenAI launches GPT-5.6 Sol, Terra, and Luna on apps and API testingcatalog.com
- GPT-5.6: Frontier intelligence that scales with your ambition openai.com
- GPT-5.6 Series arcprize.org
- GPT-5.6 Review signals.forwardfuture.com
- ChatGPT Work openai.com
- Zuckerberg Pledges ‘Aggressive' Pricing With Meta’s First Pay-to-Use AI bloomberg.com
- Muse Spark 1.1 ai.meta.com
- Working at the frontier: How Cognition trusts Claude Fable 5 to work through the night claude
- Quoting OpenAI simonwillison.net
- ChatGPT is now a partner for your most ambitious work openai.com
- OpenAI Retired Atlas techcrunch.com
- Stop being the code review bottleneck newsletter.posthog.com
- Better tools made Copilot code review worse. Here’s how we actually improved it. github.blog
- Friendly Fire: Hijacking Defensive Cyber AI Agents for Remote Code Execution ainowinstitute.org
- The Pulse: Interesting AI coding stats from Cursor newsletter.pragmaticengineer.com
- Ruflo github.com
- Traycer github.com
- socbench github.com
- How GitHub gave every repository a durable owner github.blog
- GitHub Mobile: Improved filters and sorting for Copilot sessions github.blog
- CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection github.blog
- Clearer names for secret scanning detector types github.blog
- Per-user states for multi-user budgets in the REST API github.blog
- npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk thehackernews.com
- AWS Secrets Manager adds managed external secrets support for Paddle and GitLab aws.amazon.com
- Improving Smart Tiered Cache for Public Cloud Regions blog.cloudflare.com
- Introducing Meerkat- an experiment in global consensus blog.cloudflare.com
- Making AI search smarter blog.cloudflare.com
- Apple Exploring Ways to Run Much Larger AI Models Directly on iPhones macrumors.com
- Scale Faster with Managed Weaviate: Now in Public Preview on DigitalOcean digitalocean.com
- Announcing etcd v3.7.0 kubernetes.io
- Save the Address, Save the Cloud: A Hands-on KubeVirt Live Migration Workshop tigera.io
- Bun is being rewritten in Rust bun.com
- Profiling in PyTorch (Part 3): Attention is all you profile huggingface.co
- Towards Free Normalization: Fusing Normalization into GEMM and Attention Kernels pytorch.org
- Serving sub-second Ideogram v4 without quality loss blog.fal.ai
- Flexible Video Diffusion research.nvidia.com
- How to achieve pruning when querying by non-partitioned columns in PostgreSQL hakibenita.com
- Discord AI Moderation Glitch Wrongfully Bans 8k Users in 24-Hour Period programming-helper.com
- 1-in-2 Phones Sold in Africa Exfiltrate Telemetry to China nowsecure.com
- Exploitarium: Mass Disclosure of Zero-Day Proof-of-Concepts detections.ai
- Microsoft Closes Book on Nightmare Eclipse’s RoguePlanet Zero-Day theregister.com
- OpenAI may have made a fatal misstep in copyright fight with news orgs arstechnica.com
- A Puerto Rico Government Agency Exposed 1M Social Security Numbers propublica.org
- Amazon and University of Michigan give robots a sense of touch amazon.science
- Humanoid robots controlled by surgeons did world-first operation on live pigs arstechnica.com
- Meta’s new AI chips will begin production in September techcrunch.com