News from Friday, 7 August 2026
54 articlesAI Models and Capabilities
- Meta’s Muse Spark 1.2 reaches frontier-tier on benchmarks, ranking top 5 on Vals Index at $0.69/test with 3x–10x+ cost advantages and first to exceed 60% on Finance Agent v2 at $0.77/test [1].
- Anthropic improves Claude Fable 5’s biology safeguards, reducing biology-related fallbacks by ~85% and expanding support for everyday health and educational tasks; dual-use biology requests still fall back to Opus 5 [2].
- Researchers use AI to design and synthesize viable, novel viruses by learning DNA structure patterns and generating new viral genomes that can infect bacteria [3].
- OpenAI shares preliminary cybersecurity evaluations for Astra and steps to strengthen safeguards and security controls [4].
- GPT-5.6 Luna is now the default free model in ChatGPT, with text chat limits removed; separate caps remain for files, images, voice, and image generation; a new Think button adds optional higher reasoning [5].
- ByteDance is training a 10-trillion-parameter AI model, aiming for global leadership; pre-training is expected to take 3–6 months [6].
- Google’s WeatherNext AI model achieves state-of-the-art accuracy in cyclone forecasting, providing an extra day of predictive accuracy and open-sourcing WeatherNext 2 and Cyclones models [7].
LLM Tooling, Agents, and RAG
- Cloudflare introduces Kitesurf, an agent-first browser running in V8 isolates on Cloudflare Workers, optimized for AI agents needing page rendering with bursty, scalable workloads; available in beta on Browser Run [8].
- Agent Plugins 1.0.0 launches as a portable package format for reusable Agent Skills and MCP servers, defining interoperability while leaving distribution and UX to clients [9, 10].
- Cloudflare outlines principles for an open Agentic Internet: readable, discoverable, callable, and payable, with new tools and protocols needed [11].
- Channels SDK (open-source) connects AG-UI-compatible agents to existing team communication platforms [12].
- Cloudflare open-sources Cloudflare OS, an AI agent platform used internally by thousands of employees, now deployable by any organization via a public GitHub repository [13].
- Google’s Agents CLI enables end-to-end agent development lifecycle (build, deploy, secure, evaluate, publish) using any coding agent with natural language prompts and managed services [14].
- Claude Code’s auto mode is now the default for Pro, Max, and Team plans, catching more dangerous commands than manual review and reducing interruptions; classifier overhead is no longer charged [15, 16].
- Codex Desktop with GPT-5.6 Sol Ultra produced a more sophisticated game (Moonlight & Mayhem) from the same prompt used earlier with Claude Fable 5, showcasing aggressive sub-agent use [17].
- AllenAI releases TutorMoments-preview on Hugging Face, a model evaluating when AI tutors should intervene or hold back [18].
AI Hardware and Infrastructure
- AMD acquires AI chip startup Taalas to integrate model-weights-etched-into-silicon chips; HC1 delivers 16,860 tokens/sec for Llama3.1 8B: reportedly 48x faster than Nvidia GPUs at announcement [1, 19, 20].
- Tesla and SpaceX confirm a $16.8B Terafab megafactory in Texas, aiming to produce over a terawatt of compute per year under one roof [21].
- OpenAI’s upcoming hockey puck–sized, displayless AI device (2027) will cost over $300 and emphasize personality and task completion [22].
- Amazon DynamoDB adds native real-time vector search, supporting up to 4,096 dimensions, multiple distance functions, and single-digit millisecond latency at ≥99% recall, available in all commercial AWS regions [23].
- Cloudflare unifies Workers AI and AI Gateway into a single AI control plane for model routing, observability, billing, security, and logging [24].
MLOps, DevOps, and Cloud
- GitHub Actions suffers a major outage with throttled webhook triggers, orphaned jobs, and widespread impact on hosted and self-hosted runners [25].
- GitHub Copilot impact dashboard adds a "Potential return on investment" section, comparing costs and PR output across user adoption phases and payroll assumptions [26].
- GitHub Copilot code review effort levels (Lite and Balanced) are now generally available, allowing organizations to match review depth to PR complexity and risk [27].
- GitHub usage metrics API now reports agent app activity, broken out by individual agent, including user-initiated interactions and session counts [28].
- GitHub secret scanning expands coverage with new blocked secret types (e.g., Lovable Labs, Mistral AI, PostHog) and extended metadata on alerts [29].
- GitHub enterprise managed settings now support MCP allowlists to centrally control which MCP servers Copilot clients can run [30].
- GitHub Code Quality no longer auto-adds Copilot as a reviewer; administrators must explicitly opt in [31].
- GitHub now allows setting pull request limits at the organization level to enforce consistent policies across repositories [32].
- Kubeflow announces ecosystem advancements, including Kale 2.0, SDK improvements, and Community Distribution 26.03 updates [33].
- New Relic’s open-source Salesforce Exporter streams Salesforce telemetry into New Relic for observability and insights [34].
Developer Tools and Software Engineering
- ChatGPT removes text chat limits for free users, while maintaining separate caps for files, images, voice, and image generation [35, 5].
- Cloudflare introduces Radar Researcher, an AI tool for exploring Internet data in plain language, generating interactive charts from Cloudflare’s global network data [36].
- Cloudflare discusses managing hybrid human-agent traffic on the Agentic Internet, emphasizing behavior-based assessment over static checks [37].
- Fastly Fiddle provides a web-based sandbox for testing and debugging VCL on real Fastly edge infrastructure, useful for coding agents [38].
- Generative UI concepts emerge, replacing text responses with interfaces tailored to user intent, spanning static, declarative, and open-ended generation [39].
- bb is an open-source agentic IDE that builds and extends itself via natural language requests [40, 41].
- LoopX is an open-source tool for keeping long-running AI agent teams aligned with goals, to-dos, logs, and handoffs [42].
- numbat is an open-source AI-EDR by Perplexity for visibility into AI agent activity, with local detection and forensic reconstruction [43].
- agent-egress-bench is a standardized test corpus for evaluating AI agent egress tools, covering secret exfiltration, prompt injection, SSRF, and more [44].
- celld is an open-source daemon for running Cloudflare Workers and Durable Objects on local machines with SQLite and S3-compatible replication [45].
Security and Incident Insights
- VulnCheck researchers discover an unpatchable backdoor (EndlessDoors) in over 100,000 Zbtlink/Wiflyer routers, requiring hardware replacement and monitoring of port 7000 [46].
- Forescout identifies over 4,400 internet-facing Rockwell PLCs, including 22 in recently attacked US water utility cities, urging isolation behind VPNs [47].
- Swiss Government SharePoint breach compromises 200 accounts; external access was blocked, vulnerabilities patched, and passwords reset [48].
- MIT CSAIL researchers uncover TONTOU CPU attack bypassing Spectre v2 fixes, leaking Linux password hashes at ~5.46 bytes/sec via branch predictor exploits [49].
- Apple’s Private Relay leaks real IP addresses in Safari via DNS prefetching, WebAuthn, and WebTransport, affecting all WebKit-based iOS browsers [50].
- LightSpy spyware, linked to China, targets governments and enterprises across 13 countries, including the US, with modular toolkits and network visibility [51].
- Ill Bloom campaign exploits a CryptoJS weak-randomness vulnerability to drain cryptocurrency wallets; defenders should consult illbloom.org for IOCs [52].
- 1Password analysis shows only 26% of 6,080 AI-generated vulnerability patches fully fixed issues without side effects; 53.9% failed or introduced new vulnerabilities [53].
- Latio breaks down tools and techniques to detect and prevent incidents like the Hugging Face/OpenAI breach, including network blocking, agentic EDRs, and Kubernetes/CNAPP tooling [54].
Sources
- [AINews] AMD buys Taalas latent.space
- Improving Fable 5's biology safeguards anthropic news
- This AI Just Created Viruses Not Found in Nature nytimes.com
- Responding to the next frontier of critical cyber capabilities openai.com
- GPT-5.6 Luna Became ChatGPT’s Default Free Model openai.com
- ByteDance trains a 10-trillion-parameter AI model, aiming for global leadership kucoin.com
- WeatherNext: AI model achieves breakthrough in forecasting cyclones deepmind.google
- Introducing Kitesurf: The agent-first browser that runs in V8 isolates on Cloudflare Workers blog.cloudflare.com
- Agent Plugins agent-plugins.org
- Agent Plugins vercel.com
- Building an open Agentic Internet: readable, discoverable, callable, and payable blog.cloudflare.com
- Channels SDK github.com
- Cloudflare OS: an open platform for agents, apps, and work blog.cloudflare.com
- Automate your agent development lifecycle using any coding agent cloud.google.com
- Running auto mode in production claude
- Auto mode is now the default in Claude Code for Pro, Max, and Team plans claude
- Moonlight & Mayhem (Raccoon Heist by Codex + GPT-5.6 Sol Ultra) simonwillison.net
- TutorMoments: Do AI tutors know when to help and when to hold back? huggingface.co
- AMD acquires AI chip startup Taalas to boost inference performance by etching models into silicon theregister.com
- AMD to Acquire AI Chip Startup Taalas betakit.com
- Tesla, SpaceX confirm ‘Terafab' chip fab site: $16.8B first phase electrek.co
- OpenAI’s New Device Will Be Hockey Puck-Sized and Cost Over $300 bloomberg.com
- Amazon DynamoDB now supports real-time vector search at any scale aws.amazon.com
- Unifying Workers AI and AI Gateway into a single AI control plane blog.cloudflare.com
- GitHub Actions Is Having One of the Worst Days in Its History kernel.pryanic.com
- Copilot impact dashboard adds a return on investment section github.blog
- Copilot code review effort levels are generally available github.blog
- Copilot usage metrics API adds agent app activity github.blog
- Secret scanning coverage updates github.blog
- MCP allowlists in enterprise managed settings github.blog
- GitHub Code Quality no longer adds Copilot as a reviewer github.blog
- Set pull request limits at the organization level github.blog
- Kubeflow unveils new cloud native innovations to supercharge AI cncf.io
- Salesforce Observability with New Relic newrelic.com
- ChatGPT brings unlimited text chats to free users techcrunch.com
- Introducing Radar Researcher: An AI tool for exploring Internet data in plain language blog.cloudflare.com
- Unveiling good and bad behaviors on the Agentic Internet blog.cloudflare.com
- Teaching Coding Agents to Check Their VCL with Fastly Fiddle fastly.com
- Generative UI boda.sh
- An Agentic IDE that builds itself x.com
- An Agentic IDE That Builds Itself sawyerhood.com
- LoopX github.com
- numbat github.com
- agent-egress-bench github.com
- celld github.com
- Researchers Find Persistent Backdoor in Zbtlink Routers decipher.sc
- Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities thehackernews.com
- Swiss Government SharePoint Breach Compromised 200 Accounts bleepingcomputer.com
- New TONTOU CPU Attack Bypasses Spectre v2 Fixes to Leak Linux Password Hashes bleepingcomputer.com
- Apple’s Private Relay Leaks Your Real IP Address in Safari privacyguides.org
- China-linked LightSpy spyware caught targeting victims in 13 countries, including the US techcrunch.com
- Ill Bloom: Investigating a Wallet Generation Vulnerability During Active Exploitation coinspect.com
- Why AI-Generated Vulnerability Patches Still Require Human Review 1password.com
- Detecting and Preventing the Hugging Face/OpenAI Incident pulse.latio.tech