News from Monday, 13 July 2026
43 articlesAI/ML Models, Evaluation and Agents
- Apple sues OpenAI, alleging it solicited Apple trade secrets from job candidates and used them to approach Apple manufacturing partners, seeking injunctions and return of IP [1][2].
- Text-to-SQL benchmarks (e.g., BIRD, Spider) contain incorrect "gold" queries; sqlsure argues evaluations must validate SQL against declared data semantics like join cardinality and grain [3].
- Databricks reports open-source GLM 5.2 and others now perform well on real internal coding tasks, signaling maturing agentic coding capabilities [4].
- GitHub improved Copilot code review by starting from diffs and narrowing with grep/glob, cutting average review cost by 20% without quality loss after generic tools had worsened results [5].
- Zhipu’s co-founder outlines a two-year plan to return to foundation-model research, emphasizing AGI, safety, open source, autonomous agents, and self-training [6].
- Cloudflare introduced Precursor to detect agentic behavior using continuous client-side signals, extending Turnstile’s risk-based challenges beyond login/signup to full application interaction [7].
- Hebbia reports Claude Fable 5 delivered the largest accuracy gain its research team has recorded on finance-specific evals, tracking complex queries prior models dropped [8].
- Anthropic extended Claude Fable 5 access and elevated Claude Code limits through July 19, while OpenAI temporarily removed usage caps for GPT-5.6 Sol [9][10].
- Basecamp Bench shows Fable 5 as top performer for frontend/backend tasks, with Grok 4.5 fastest/cheapest but less polished [11].
- Proactive memory for long-horizon agents uses a separate memory agent to track state and remind the action agent, improving pass rates on Terminal-Bench 2.0 and τ2-Bench [12][13].
- LangChain’s OpenWiki Brains introduces general-purpose proactive memory for agents, autonomously gathering context from connected sources like Gmail, Notion, and Twitter [13].
- Pinecone’s text match filters help agents retrieve scoped, accurate context without pre-labeling entire datasets, addressing semantic search ambiguity [14].
- Microsoft Foundry scales AI agents for 20M+ users, with first-party agent usage growing 6x year-to-date; WorkOS MCP enables agents to manage auth platforms [15].
MLOps, Data Engineering and Tooling
- Apache Airflow adds AI-driven controls: semantic schema validation, persistent state for reconnecting failed jobs, and LLM-based retry decisions to reduce pipeline firefighting [16].
- Arcesium migrated a 170TB, 15-trillion-record warehouse from RDBMS to Apache Iceberg on S3 with DuckDB, cutting ingestion runtime by 80% and infra spend by ~40% using Swiftlake and KEDA autoscaling [17].
- Lakekeeper’s Generic Table API enables governance of non-Iceberg assets (e.g., Lance) as catalog objects without conversion, reusing Iceberg controls [18].
- Databricks launched Feature Views (public preview), a managed framework to define features once and auto-handle training/real-time serving pipelines with Unity Catalog governance [19].
- OSI semantic layer spec is now Apache Ossie (Incubating), with a new name and mascot to avoid confusion with Open Source Initiative [20].
- Prefect is acquiring Dagster Labs to combine Prefect’s dynamic workflows and elegant Python API with Dagster’s partitioning, lineage, cataloging, and scheduling strengths [21].
DevOps, Infrastructure and Cloud
- ClickHouse offers hardened Docker images with zero medium-severity CVEs, built on a minimal base, with a debug variant; migration is a one-line change [22].
- Affirm rebuilt its pre-checkout messaging from a Python monolith to a Kotlin microservice with a rule engine, cutting P99 latency by 50% and reducing experiment setup time from 2 months to 4 days [23].
- Cloudflare improved Smart Tiered Cache for public cloud regions by using region hints to avoid cross-continent routing behind anycast IPs from AWS/GCP/Azure/Oracle [24].
- Azure DevOps will retire its workload identity federation issuer on July 1, 2027, requiring migration of older pipeline service connections to Microsoft Entra issuer [25].
- Jenkins Smart Retry adds policy-based retries that classify failures before rerunning steps, recovering from transient issues while avoiding retries for deterministic failures [26].
- Wireshark 4.6.7 patches 12 dissector/parser flaws (crashes/infinite loops) in pcapng, SSH, TLS ECH, IEEE 802.11, and BLF [27].
Developer Tools and Software Engineering
- crates.io adds a "Code" tab to browse exact published crate files, including normalized Cargo.toml, easing dependency audits [28].
- PostgreSQL can prune partitions on non-partition keys if column ranges correlate with the partition key; CHECK constraints enable the optimizer to skip irrelevant partitions [29].
- The Shift Left Manifesto v2 emphasizes code-level, release-linked lineage starting in producer code to expose ownership, sensitive-data flows, and impact analysis directly in PRs [30].
- Git 2.55 introduces incremental multi-pack index repacking improvements and new history fixup capabilities [31].
- GitHub separated SSO and Organizations pages in user settings for clearer management [32].
- Claude Code on desktop now includes an in-app browser to interact with docs, designs, and websites within a sandboxed, configurable environment [33].
- Code review is shifting from a quality gate to theater as AI-generated PR volume outpaces humans; QA moves toward automated deployment pipelines with policy-based checks [34].
- A GitHub code-frequency chart shows a 37k-addition spike in 2026 for the Datasette project, illustrating the impact of coding agents on output [35].
Security and Privacy
- Samsung Health app warns users that opting out of AI training may result in data deletion [36].
- Progress ordered ShareFile customers to shut down on-prem Storage Zone Controllers due to a credible external threat; cloud-only accounts remain unaffected [37].
- A compromised Injective SDK npm package (@injectivelabs/sdk-ts@1.20.21) exfiltrates wallet keys and mnemonics; 17 related packages are affected [38].
- Miinto breach exposed customer order records (names, contact details, addresses, payment method types) via an internal order management system; attackers were removed and access controls tightened [39].
- Datadog released GuardDog 3.0 with YARA rules, a new risk engine, and transparent sandboxing for scanning malicious PyPI/npm packages [40].
- Device Code Phishing attacks abuse Microsoft’s OAuth device_code flow via legitimate redirects and CAPTCHA gates, harvesting tokens for long-term persistence; defenders should disable unused flows and monitor DeviceCodeSignIn events [41].
- Cavern Manticore, an Iran-linked modular C2 framework, uses RMM/SysAid abuse, uxtheme.dll sideloading, and per-module AppDomain isolation for anti-analysis; defenders should audit for sideloading and unsigned binaries under C:\ProgramData [42].
- GigaWiper combines wiper/ransomware components into a Go-based backdoor with disk wiping, BSOD triggering, file encryption, and remote control via RabbitMQ/Redis [43].
Sources
- Apple Sues OpenAI, Accusing It of Stealing Company Secrets nytimes.com
- Apple Sued OpenAI techcrunch.com
- The benchmark grading every text-to-SQL model has wrong answers in its key sqlsure.ai
- We benchmarked coding agents on our own internal tasks at Databricks and learned a lot! threadreaderapp.com
- Better tools made Copilot code review worse. Here’s how we actually improved it github.blog
- The Wave Has Arrived”: Zhipu Co-Founder Tang Jie’s Letter to Staff geopolitechs.org
- Introducing Precursor: detecting agentic behavior with continuous client-side signals blog.cloudflare.com
- Working at the frontier: How Hebbia builds AI for financial diligence that can’t miss a detail claude
- Anthropic Extended Claude Fable 5 Access Again simonwillison.net
- OpenAI temporarily relaxes GPT-5.6 Sol usage limits bleepingcomputer.com
- Basecamp Bench smw.ai
- Proactive Memory for Long-Horizon Agents arxiv 2607.08716
- OpenWiki Brains: Proactive Memory for AI Agents langchain.com
- Text match filters for agents pinecone
- How Microsoft Ships AI Agents at Enterprise Scale blog.bytebytego.com
- How Airflow is using AI to make data engineering more resilient, not more complex blog.dataengineerthings.org
- Modern Data Warehousing at Scale: Arcesium’s Migration to DuckDB and Iceberg medium.com
- Lakekeeper Generic Table API Design medium.com
- Introducing Feature Views databricks.com
- OSI is now Apache Ossie (Incubating) dbt.com
- Prefect is Acquiring Dagster dagster
- ClickHouse on Docker Hardened Images clickhouse.com
- Re-architecting Affirm’s Upfunnel Platform: How We Cut Experiment Cycle Time from Months to Days medium.com
- Improving Smart Tiered Cache for public cloud regions blog.cloudflare.com
- Your Azure DevOps pipelines have a 2027 deadline, and the clock has just started sysadmin-central.com
- Introducing Smart Retry: Safer retries for transient Jenkins failures. jenkins.io
- Wireshark 4.6.7 Released to Patch 12 Vulnerabilities in SSH, TLS, Wi-Fi, and pcapng gbhackers.com
- crates.io: development update blog.rust-lang.org
- How to Achieve Pruning When Querying by Non-Partitioned Columns in PostgreSQL hakibenita.com
- The Shift Left Manifesto - v2 dataproducts.substack.com
- Highlights from Git 2.55 github.blog
- Separate SSO and Organizations pages in Settings github.blog
- Claude Code on desktop now has an in-app browser threadreaderapp.com
- Code review is theater now octopus.com
- datasette code-frequency chart on GitHub simonwillison.net
- Samsung Health app threatens data deletion if users opt out AI training hnrss.org
- URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat thehackernews.com
- Compromised Injective SDK npm Package Exfiltrates Wallet Keys and Mnemonics socket.dev
- Fashion mart Miinto unzips breach details, warns shoppers to watch for phisherfolk theregister.com
- Introducing GuardDog 3.0: A new rules engine, transparent sandboxing, and more securitylabs.datadoghq.com
- When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website securelist.com
- Cavern Manticore: Exposing Iran-Linked Modular C2 Framework research.checkpoint.com
- GigaWiper Combines Multiple Malware for System-Level Sabotage securityweek.com