News from Thursday, 13 August 2026
43 articlesAI Models & Agents
- SpaceXAI releases Grok 4.6 (1.5T), optimized for long-running agents, coding, and knowledge work, matching GPT-5.6 Sol on Artificial Analysis; API pricing starts at $2/$6 per M input/output tokens, >50% cheaper than GPT-5.6 Sol [1, 2, 3, 4].
- DeepSeek V4 Pro 0813 is now API-only via OpenRouter, with distinct reasoning modes; prior V4 models had open weights, suggesting this may follow [5, 6].
- Meta releases Muse Glimmer (30B), an open-weight model quantizable to <20 GB for local agent workflows on consumer GPUs [7].
- Google launches Gemini 3.7 Flash, a workhorse for coding/agents with strong gains over 3.6 Flash (e.g., FrontierCode 1.1 Main 43.6% vs 34.4%, DeepSWE v1.1 65.3% vs 49.0%) at half the cost; now in GitHub Copilot [8, 9].
- Microsoft introduces MAI-Thinking-1, a medium-sized reasoning model for cost-efficient enterprise coding/math/knowledge tasks [10].
- DeepSeek is building a team to challenge Claude Code, intensifying competition in AI coding agents [11].
- OpenAI previews Ultrafast mode for GPT-5.6 Sol, delivering up to 14× speed (750 tokens/sec) via Cerebras [12].
- OpenAI expands Daybreak cyber defense with GPT-5.6-Cyber, achieving 95% completion on exploit-chain benchmarks and uncovering CVE-2026-15903; access restricted to approved defenders with hardware security keys [13].
LLM Tooling, RAG & Knowledge
- OpenAI publishes a builder’s guide to GPT-5.6, highlighting agent cost/efficiency and new Responses API capabilities [14].
- Hugging Face enables end-to-end agent workflows with Strands Agents, LeRobot, and streaming data loops to HF Storage Buckets [15].
- Qdrant analyzes filtered vector search trade-offs, showing ACORN and extra index-time edges can outperform query-time repairs [16].
- Weaviate details creative workflow breakdowns in semantic search: naming drift, metadata decay, and retrieval failure as projects scale [17].
- Knowledge graphs fail due to SQL-like design; best practices include use-case-specific scopes, staged/federated graphs, SHACL validation, and query-time construction [18].
MLOps, DevOps & AI Reliability
- AI model drift in LLM/RAG requires monitoring data, concept, pipeline, prompt, embedding, and output drift via baselines, distribution checks, telemetry, and user feedback [19].
- Data teams should prep for AI agents in data work with strong evals, explicit business context, and low-latency infra for bursty workloads; proactive insights remain hard [20].
- Databricks acquires Electric to integrate PGlite (WASM Postgres) into AI agent sandboxes, enabling local DBs with sync to Lakebase for governed state [21].
- Cursor introduces builds for cloud agents, cutting boot time ~3× by pre-building dev environments; Firetiger joins Cursor to connect coding and production agents [22, 23].
- Cursor earns AIUC-1 certification for agent security/reliability via independent audits and adversarial testing [24].
- 1Password finds only 26% of AI-generated vulnerability patches (ChatGPT-5.5/Opus 4.8) fix issues without side effects, underscoring need for human review [25].
Developer Tools & Engineering Practices
- sqlfmt launches as a gofmt-style SQL formatter with river alignment, lowercase keywords, and semantic-preserving tokenization (CLI/WASM) [26].
- Netflix open-sources Maestro (Apache-2.0), a large-scale workflow orchestrator for data/ML/batch pipelines [27].
- Salesforce cuts time-to-insight by 97% with a Product Data Platform, processing 45B rows/day across 19K events [28].
- Simon Willison releases alchemy-utils 0.1a1, cross-database sqlite-utils built on SQLAlchemy with DuckDB/CSV performance boosts [29].
- Zed introduces Delta, a multiplayer coding environment for real-time human/agent collaboration with synchronized comments [30].
- Yelp completes a 3-year migration of a large Flow monorepo to TypeScript, ensuring type integrity [31].
Cloud, Infrastructure & Performance
- HeyGen ports Avatar IV (18B+) to Google Cloud Trillium TPUs via torchax/XLA, achieving 1.86× speedup with custom Pallas kernels and compiler optimizations [32].
- PyTorch upstream FP8 training on AMD GPUs (TorchTitan/TorchAO) delivers 13.4% throughput gain over BF16 on Llama3-8B and recovers 89% of FP8 overhead on DeepSeek-V3 671B MoE [33].
- NATS 2.12 adds atomic batch publishing for JetStream, ensuring all-or-nothing commits for event-sourced systems [34].
- Stripe reduces pager alerts ~30% by automating MongoDB incident recovery with graph search + Dijkstra-based state machines [35].
- Vercel migrates build warm pool state from Redis to DynamoDB, requiring concurrency redesign after exposing hidden latency dependencies [36].
- Tailscale/SQLite fix a 16-year-old WAL reset bug, showcasing cross-team debugging [37].
Security & Incident Response
- Docker CopyEscape (CVE-2026-17106) race condition in
docker cpallows container escape and host file overwrite; patched in Engine 29.7.2/Desktop 4.86.0 [38]. - LiteLLM supply chain attack (TeamPCP) trojanizes Trivy in CI, exposing 2,500 orgs/434K pipelines in 40 minutes; rotate credentials and review logs [39].
- Malicious Chrome extension "AI Sidebar with DeepSeek ChatGPT Claude and more" returns after ban, farming affiliate commissions; block as Trojan.GenericFCA.Script.37952 [40].
- Cisco patches firewall zero-day (CVE-2026-20349) exploited for DoS via crafted HTTP to SSL VPN; CISA mandates patch by Aug 14 [41].
- Cloudflare DDoS report H1 2026: 935 attacks >1 Tbps, DNS floods surge 580%, Brazil overtakes US as top attack source [42].
- Ceva Logistics cyberattack disrupts 8 warehouses, exposing customer data (Bol/Valve) [43].
Sources
- [AINews] SpaceXAI Grok 4.6 and Grok @Bot latent.space
- SpaceXAI debuts Grok 4.6, overtaking Kimi K3's performance and matching GPT-5.6 Sol for world’s third best on Artificial Analysis venturebeat.com
- Introducing Grok 4.6 x.ai
- Grok 4.6 – A field guide x.com
- DeepSeek V4 Pro 0813 (on OpenRouter) simonwillison.net
- ) wccftech.com
- Meta releases Muse Glimmer for local AI agents testingcatalog.com
- Introducing Gemini 3.7 Flash deepmind.google
- Gemini 3.7 Flash is now available in GitHub Copilot github.blog
- Microsoft Launches MAI-Thinking-1 microsoft.ai
- DeepSeek Publicizes Efforts to Challenge Anthropic’s Claude Code bloomberg.com
- Previewing Ultrafast mode: GPT-5.6 Sol at up to 14X the speed openai.com
- Expanding Daybreak as the Cyber Defense Window Narrows openai.com
- The builder’s guide to GPT‑5.6 openai.com
- Record, train, and deploy from one place with Strands Agents, LeRobot, and Hugging Face Storage Buckets huggingface.co
- Filtered Vector Search: What ACORN Fixes, and What Fixes ACORN qdrant.tech
- Building Foundry Part 2: Where creative workflows break weaviate
- Why Knowledge Graph Projects Fail, and How to Make Them Succeed ontologist.substack.com
- AI Model Drift: How to Keep Models Reliable honeycomb.io
- Agents are coming for data (just slowly) infoworld.com
- Electric joins Databricks to bring WASM Postgres to AI agent sandboxes databricks.com
- Cloud agents start 3x faster with builds cursor
- Firetiger joins Cursor cursor
- Cursor earns AIUC-1 certification for agent security and reliability cursor
- Why AI-Generated Vulnerability Patches Still Require Expert Human Review 1password.com
- Introducing sqlfmt: an SQL gofmt-style formatter tapoueh.org
- Maestro: Netflix’s open-source workflow orchestrator keeps moving github.com
- How Standardizing Product Telemetry Reduced Time to Insight by 97% engineering.salesforce.com
- alchemy-utils 0.1a1 simonwillison.net
- Introducing Delta zed.dev
- Migrating a Large Flow Monorepo to TypeScript engineeringblog.yelp.com
- HeyGen x Google Cloud: Bringing Avatar IV to TPUs google ai
- FP8 Training on AMD GPUs with TorchTitan and TorchAO: Upstreaming Performance Improvements pytorch.org
- Atomic Batch Publishing in NATS 2.12: All-or-Nothing Message Guarantees synadia.com
- Stripe Uses Graph Search and State Machines to Automate Database Remediation stripe.dev
- How we migrated the database behind every Vercel build vercel.com
- How we tracked down a 16-year-old SQLite bug tailscale.com
- Docker CopyEscape Vulnerability Enables Host File Overwrite and Root Code Execution gbhackers.com
- Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack securityweek.com
- Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities securityweek.com
- Cisco Patches Firewall Zero-Day Exploited for DoS Attacks securityweek.com
- Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave blog.cloudflare.com
- Cyberattack on logistics giant Ceva hits retailers and Steam customers across Europe therecord.media