Skip to content

AI Digest for

This page is the archived edition of one specific day. It does not change any more.

News from Monday, 13 July 2026

43 articles

AI/ML Models, Evaluation and Agents

  • Apple sues OpenAI, alleging it solicited Apple trade secrets from job candidates and used them to approach Apple manufacturing partners, seeking injunctions and return of IP [1][2].
  • Text-⁠to-⁠SQL benchmarks (e.g., BIRD, Spider) contain incorrect "gold" queries; sqlsure argues evaluations must validate SQL against declared data semantics like join cardinality and grain [3].
  • Databricks reports open-⁠source GLM 5.2 and others now perform well on real internal coding tasks, signaling maturing agentic coding capabilities [4].
  • GitHub improved Copilot code review by starting from diffs and narrowing with grep/glob, cutting average review cost by 20% without quality loss after generic tools had worsened results [5].
  • Zhipu’s co-⁠founder outlines a two-⁠year plan to return to foundation-⁠model research, emphasizing AGI, safety, open source, autonomous agents, and self-⁠training [6].
  • Cloudflare introduced Precursor to detect agentic behavior using continuous client-⁠side signals, extending Turnstile’s risk-⁠based challenges beyond login/signup to full application interaction [7].
  • Hebbia reports Claude Fable 5 delivered the largest accuracy gain its research team has recorded on finance-⁠specific evals, tracking complex queries prior models dropped [8].
  • Anthropic extended Claude Fable 5 access and elevated Claude Code limits through July 19, while OpenAI temporarily removed usage caps for GPT-⁠5.6 Sol [9][10].
  • Basecamp Bench shows Fable 5 as top performer for frontend/backend tasks, with Grok 4.5 fastest/cheapest but less polished [11].
  • Proactive memory for long-⁠horizon agents uses a separate memory agent to track state and remind the action agent, improving pass rates on Terminal-⁠Bench 2.0 and τ2-⁠Bench [12][13].
  • LangChain’s OpenWiki Brains introduces general-⁠purpose proactive memory for agents, autonomously gathering context from connected sources like Gmail, Notion, and Twitter [13].
  • Pinecone’s text match filters help agents retrieve scoped, accurate context without pre-⁠labeling entire datasets, addressing semantic search ambiguity [14].
  • Microsoft Foundry scales AI agents for 20M+ users, with first-⁠party agent usage growing 6x year-⁠to-⁠date; WorkOS MCP enables agents to manage auth platforms [15].

MLOps, Data Engineering and Tooling

  • Apache Airflow adds AI-⁠driven controls: semantic schema validation, persistent state for reconnecting failed jobs, and LLM-⁠based retry decisions to reduce pipeline firefighting [16].
  • Arcesium migrated a 170TB, 15-⁠trillion-⁠record warehouse from RDBMS to Apache Iceberg on S3 with DuckDB, cutting ingestion runtime by 80% and infra spend by ~40% using Swiftlake and KEDA autoscaling [17].
  • Lakekeeper’s Generic Table API enables governance of non-⁠Iceberg assets (e.g., Lance) as catalog objects without conversion, reusing Iceberg controls [18].
  • Databricks launched Feature Views (public preview), a managed framework to define features once and auto-⁠handle training/real-⁠time serving pipelines with Unity Catalog governance [19].
  • OSI semantic layer spec is now Apache Ossie (Incubating), with a new name and mascot to avoid confusion with Open Source Initiative [20].
  • Prefect is acquiring Dagster Labs to combine Prefect’s dynamic workflows and elegant Python API with Dagster’s partitioning, lineage, cataloging, and scheduling strengths [21].

DevOps, Infrastructure and Cloud

  • ClickHouse offers hardened Docker images with zero medium-⁠severity CVEs, built on a minimal base, with a debug variant; migration is a one-⁠line change [22].
  • Affirm rebuilt its pre-⁠checkout messaging from a Python monolith to a Kotlin microservice with a rule engine, cutting P99 latency by 50% and reducing experiment setup time from 2 months to 4 days [23].
  • Cloudflare improved Smart Tiered Cache for public cloud regions by using region hints to avoid cross-⁠continent routing behind anycast IPs from AWS/GCP/Azure/Oracle [24].
  • Azure DevOps will retire its workload identity federation issuer on July 1, 2027, requiring migration of older pipeline service connections to Microsoft Entra issuer [25].
  • Jenkins Smart Retry adds policy-⁠based retries that classify failures before rerunning steps, recovering from transient issues while avoiding retries for deterministic failures [26].
  • Wireshark 4.6.7 patches 12 dissector/parser flaws (crashes/infinite loops) in pcapng, SSH, TLS ECH, IEEE 802.11, and BLF [27].

Developer Tools and Software Engineering

  • crates.io adds a "Code" tab to browse exact published crate files, including normalized Cargo.toml, easing dependency audits [28].
  • PostgreSQL can prune partitions on non-⁠partition keys if column ranges correlate with the partition key; CHECK constraints enable the optimizer to skip irrelevant partitions [29].
  • The Shift Left Manifesto v2 emphasizes code-⁠level, release-⁠linked lineage starting in producer code to expose ownership, sensitive-⁠data flows, and impact analysis directly in PRs [30].
  • Git 2.55 introduces incremental multi-⁠pack index repacking improvements and new history fixup capabilities [31].
  • GitHub separated SSO and Organizations pages in user settings for clearer management [32].
  • Claude Code on desktop now includes an in-⁠app browser to interact with docs, designs, and websites within a sandboxed, configurable environment [33].
  • Code review is shifting from a quality gate to theater as AI-⁠generated PR volume outpaces humans; QA moves toward automated deployment pipelines with policy-⁠based checks [34].
  • A GitHub code-⁠frequency chart shows a 37k-⁠addition spike in 2026 for the Datasette project, illustrating the impact of coding agents on output [35].

Security and Privacy

  • Samsung Health app warns users that opting out of AI training may result in data deletion [36].
  • Progress ordered ShareFile customers to shut down on-⁠prem Storage Zone Controllers due to a credible external threat; cloud-⁠only accounts remain unaffected [37].
  • A compromised Injective SDK npm package (@injectivelabs/sdk-⁠ts@1.20.21) exfiltrates wallet keys and mnemonics; 17 related packages are affected [38].
  • Miinto breach exposed customer order records (names, contact details, addresses, payment method types) via an internal order management system; attackers were removed and access controls tightened [39].
  • Datadog released GuardDog 3.0 with YARA rules, a new risk engine, and transparent sandboxing for scanning malicious PyPI/npm packages [40].
  • Device Code Phishing attacks abuse Microsoft’s OAuth device_code flow via legitimate redirects and CAPTCHA gates, harvesting tokens for long-⁠term persistence; defenders should disable unused flows and monitor DeviceCodeSignIn events [41].
  • Cavern Manticore, an Iran-⁠linked modular C2 framework, uses RMM/SysAid abuse, uxtheme.dll sideloading, and per-⁠module AppDomain isolation for anti-⁠analysis; defenders should audit for sideloading and unsigned binaries under C:\ProgramData [42].
  • GigaWiper combines wiper/ransomware components into a Go-⁠based backdoor with disk wiping, BSOD triggering, file encryption, and remote control via RabbitMQ/Redis [43].
Sources
  1. Apple Sues OpenAI, Accusing It of Stealing Company Secrets nytimes.com
  2. Apple Sued OpenAI techcrunch.com
  3. The benchmark grading every text-⁠to-⁠SQL model has wrong answers in its key sqlsure.ai
  4. We benchmarked coding agents on our own internal tasks at Databricks and learned a lot! threadreaderapp.com
  5. Better tools made Copilot code review worse. Here’s how we actually improved it github.blog
  6. The Wave Has Arrived”: Zhipu Co-⁠Founder Tang Jie’s Letter to Staff geopolitechs.org
  7. Introducing Precursor: detecting agentic behavior with continuous client-⁠side signals blog.cloudflare.com
  8. Working at the frontier: How Hebbia builds AI for financial diligence that can’t miss a detail claude
  9. Anthropic Extended Claude Fable 5 Access Again simonwillison.net
  10. OpenAI temporarily relaxes GPT-⁠5.6 Sol usage limits bleepingcomputer.com
  11. Basecamp Bench smw.ai
  12. Proactive Memory for Long-⁠Horizon Agents arxiv 2607.08716
  13. OpenWiki Brains: Proactive Memory for AI Agents langchain.com
  14. Text match filters for agents pinecone
  15. How Microsoft Ships AI Agents at Enterprise Scale blog.bytebytego.com
  16. How Airflow is using AI to make data engineering more resilient, not more complex blog.dataengineerthings.org
  17. Modern Data Warehousing at Scale: Arcesium’s Migration to DuckDB and Iceberg medium.com
  18. Lakekeeper Generic Table API Design medium.com
  19. Introducing Feature Views databricks.com
  20. OSI is now Apache Ossie (Incubating) dbt.com
  21. Prefect is Acquiring Dagster dagster
  22. ClickHouse on Docker Hardened Images clickhouse.com
  23. Re-⁠architecting Affirm’s Upfunnel Platform: How We Cut Experiment Cycle Time from Months to Days medium.com
  24. Improving Smart Tiered Cache for public cloud regions blog.cloudflare.com
  25. Your Azure DevOps pipelines have a 2027 deadline, and the clock has just started sysadmin-⁠central.com
  26. Introducing Smart Retry: Safer retries for transient Jenkins failures. jenkins.io
  27. Wireshark 4.6.7 Released to Patch 12 Vulnerabilities in SSH, TLS, Wi-⁠Fi, and pcapng gbhackers.com
  28. crates.io: development update blog.rust-⁠lang.org
  29. How to Achieve Pruning When Querying by Non-⁠Partitioned Columns in PostgreSQL hakibenita.com
  30. The Shift Left Manifesto - v2 dataproducts.substack.com
  31. Highlights from Git 2.55 github.blog
  32. Separate SSO and Organizations pages in Settings github.blog
  33. Claude Code on desktop now has an in-⁠app browser threadreaderapp.com
  34. Code review is theater now octopus.com
  35. datasette code-⁠frequency chart on GitHub simonwillison.net
  36. Samsung Health app threatens data deletion if users opt out AI training hnrss.org
  37. URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat thehackernews.com
  38. Compromised Injective SDK npm Package Exfiltrates Wallet Keys and Mnemonics socket.dev
  39. Fashion mart Miinto unzips breach details, warns shoppers to watch for phisherfolk theregister.com
  40. Introducing GuardDog 3.0: A new rules engine, transparent sandboxing, and more securitylabs.datadoghq.com
  41. When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website securelist.com
  42. Cavern Manticore: Exposing Iran-⁠Linked Modular C2 Framework research.checkpoint.com
  43. GigaWiper Combines Multiple Malware for System-⁠Level Sabotage securityweek.com

Papers from Monday, 13 July 2026

25 papers

Multimodal and Vision-⁠Language Models

  • A task-⁠specific two-⁠agent architecture for multimodal quizbowl (QANTA 2026) uses confidence-⁠calibrated answering for Tossup and leadin-⁠aware reasoning for Bonus, improving performance under efficiency constraints [1].
  • Vision-⁠language models (VLMs) show improved accuracy over a decade (2017–2025) on complex social behavior (CSB) datasets, with error analysis revealing persistent challenges in object detection, recognition, hallucination, scene understanding, and spatial dependence [2].
  • VLMs often encode correct counts internally but misalign them in outputs; detector-⁠guided self-⁠correction and causal steering interventions can realign these representations to improve counting accuracy [3].
  • Edge VLM inference energy costs are dominated by output token generation (11–39× more expensive than input tokens), challenging assumptions that visual processing is the primary bottleneck [4].

Language Models and Reasoning

  • Test-⁠time scaling (TTS) improves small open VLMs on multilingual visual MCQs, but gains depend on parseability and decoding budget rather than search/verification methods [5].
  • Self-⁠guided test-⁠time training for long-⁠context LLMs improves performance by focusing adaptation on question-⁠relevant spans, avoiding noise from irrelevant context [6].
  • WILDTRACE introduces a benchmark for natural evidence integration in long-⁠context reasoning, addressing gaps in existing synthetic or reverse-⁠engineered datasets [7].
  • Neural collapse in language models is reframed as an information floor: within-⁠token context carries 79–91% of representational variance, with macro-⁠category structure contributing only 4–12% [8].
  • A study compresses thousands of values expressed by Claude into a small set of axes (e.g., emotional warmth vs. rigor) to analyze how these values vary across models and languages [9].

Agentic Systems and Orchestration

  • Agora introduces an auction-⁠based task allocation framework for LLM agents, dynamically routing tasks to the most capable expert models/tools while balancing cost and quality [10].
  • SAGEAgent is a self-⁠evolving LLM-⁠based clinical agent that sequentially decides which diagnostic modalities to acquire for survival prediction, balancing accuracy and invasiveness [11].
  • VEXAIoT is an autonomous multi-⁠agent framework for IoT vulnerability exploitation, combining detection and attack execution agents to address OWASP IoT vulnerabilities [12].
  • Mach-⁠Mind-⁠4-⁠Flash is a 35B-⁠parameter MoE agentic model achieving 100B-⁠class performance via multi-⁠teacher RL distillation and hybrid policy optimization [13].

Efficiency and Edge Deployment

  • Tokenizer transplantation in Bengali ASR reduces token fertility from 9.16 to 1.30, mitigating autoregressive collapse and achieving 21.54% WER with RTF=0.0053 on Lipi-⁠Ghor [14].
  • Freya-⁠TTS is a tokenizer-⁠free, non-⁠autoregressive Turkish TTS model using a Diffusion Transformer in AudioVAE2’s latent space, optimized for conversational synthesis [15].
  • A hardware-⁠aware streaming system for real-⁠time sign language translation (SLT) uses a Raspberry Pi client and CPU/GPU backend, achieving BLEU 15.9 and BLEURT 44.7 on How2Sign [16].

Explainability and Trustworthiness

  • ConceptSMILE audits concept-⁠based XAI by perturbing inputs and measuring concept-⁠response shifts, revealing reliability variations across MedSAM and VLM-⁠derived concepts [17].
  • Deceptive grounding in clinical RAG exposes entity attribution failures where models cite correct evidence for the wrong entity, affecting 8–87% of cases under adversarial conditions [18].
  • RashomonLLM couples explanation and prediction, showing that explanation fidelity can improve model accuracy rather than degrade it, and introduces a Rashomon Explanation paradigm [19].

Domain-⁠Specific Advances

  • ALICE unifies pathology foundation models via multi-⁠stage agglomerative distillation, consolidating vision, vision-⁠language, and slide-⁠level expertise into a single backbone [20].
  • TCLA is a training-⁠free class-⁠wise logit adaptation method for medical VLMs, improving OOD performance by correcting inference logits using support samples [21].
  • PHINN-⁠EEG applies topological time-⁠series analysis to dream-⁠state EEG, using Dynamic Betti Curves to target AUC 0.82–0.90 on the DREAM database [22].
  • CoCoT-⁠EEG introduces a contrastive-⁠pretrained multiscale convolutional transformer for EEG decoding, outperforming reconstruction-⁠based models [23].

Theoretical and Foundational Contributions

  • Lean-⁠QIT formalizes quantum information theory in Lean 4, providing machine-⁠checked interfaces for quantum states, channels, and coding theorems [24].
  • Deep Gaussian Processes on DAGs studies prior-⁠collapse behavior and information preservation in function compositions, with theoretical bounds on input distinction preservation [25].
Sources
  1. Task-⁠Specific Multimodal Question Answering Agents via Confidence Calibration and Incremental Reasoning for QANTA 2026 arxiv cs.CL
  2. Evolution of Accuracy and Visual-⁠Cognitive Errors in a Decade of Vision-⁠Language AI Models arxiv cs.AI
  3. The Count Is There, but Misaligned: Understanding and Correcting Counting Failures in VLMs arxiv cs.LG
  4. Seeing is Free, Speaking is Not: Uncovering the True Energy Bottleneck in Edge VLM Inference arxiv cs.AI
  5. Test-⁠Time Scaling for Small VLMs on Multilingual Visual MCQ arxiv cs.CL
  6. Self-⁠Guided Test-⁠Time Training for Long-⁠Context LLMs arxiv cs.CL
  7. WILDTRACE: Benchmarking Natural Evidence Trails in Long-⁠Context Reasoning arxiv cs.CL
  8. Neural Collapse Is Forbidden: Information Floors in Language Models arxiv cs.CL
  9. Jul 13, 2026Societal ImpactsClaude’s values across models and languages anthropic research
  10. Agora: Enhancing LLM Agent Reasoning Via Auction-⁠Based Task Allocation arxiv cs.CL
  11. SAGEAgent: A Self-⁠Evolving Agent for Cost-⁠Aware Modality Acquisition in Multimodal Survival Prediction arxiv cs.AI
  12. VEXAIoT: Autonomous IoT Vulnerability EXploitation using AI Agents arxiv cs.AI
  13. Mach-⁠Mind-⁠4-⁠Flash Technical Report arxiv cs.CL
  14. Tokenizer Transplantation: Mitigating Autoregressive Collapse in Edge-⁠Efficient Bengali ASR arxiv cs.CL
  15. FreyaTTS Technical Report arxiv cs.CL
  16. Toward Real-⁠Time Sentence-⁠Level Sign Language Translation arxiv cs.CL
  17. ConceptSMILE: Auditing the Trustworthiness of Concept-⁠Based Explainable AI arxiv cs.AI
  18. Deceptive Grounding: Entity Attribution Failure in Clinical Retrieval-⁠Augmented Generation arxiv cs.CL
  19. All Explanations are Wrong, But Many Are Useful: Exploring the Rashomon Explanation Set with Large Language Models arxiv cs.LG
  20. ALICE: Learning a General-⁠Purpose Pathology Foundation Model from Vision, Vision-⁠Language, and Slide-⁠Level Experts arxiv cs.AI
  21. TCLA: Training-⁠Free Class-⁠wise Logit Adaptation for Medical Vision-⁠Language Models arxiv cs.AI
  22. PHINN-⁠EEG: Topological Time-⁠Series Analysis of Dream-⁠State EEG -- Dynamic Betti Curves for Dream Content Classification and Topology-⁠Conditioned Neural Signal Synthesis arxiv cs.LG
  23. CoCoT-⁠EEG: Contrastive-⁠Pretrained Multiscale Convolutional Transformer for EEG Decoding arxiv cs.LG
  24. Lean-⁠QIT: Towards a Formal Infrastructure for Quantum Information Theory arxiv cs.AI
  25. Deep Gaussian Processes on Directed Acyclic Graphs arxiv cs.LG