News from Friday, 25 September 2026
28 articlesAI Models & Research
- OpenAI launched an improved prompt caching system for the GPT-6 family, delivering higher hit rates, up to 90% input discounts on shared prefixes within 30-minute windows, a diagnostics dashboard, and cache prewarming [1].
- Google announced Gemini 3.8 Live featuring a real-time Live Avatar, synchronizing performance and responses for personalized user interactions [2].
- Contrastive Language Models (CLMs) introduced a new class of System One models; the CLM-8B variant matches specialized judges on computer-use and tool-calling while cutting latency by up to 9 times [3].
- Meta detailed Muse Realtime Avatar, synchronizing speech and visual performance in live interactions [4], while building personal-context cloud workloads on confidential VMs and trusted execution environments for its AI glasses [5].
LLM Tooling & Infrastructure
- NVIDIA open-sourced Model Optimizer, providing pruning, distillation, and quantization tools for PyTorch, ONNX, and Hugging Face checkpoints to export optimized runtimes for TensorRT-LLM and vLLM [6].
- Google Cloud API Gateway now natively supports remote Model Context Protocol (MCP) servers via simple OpenAPI 3.x annotations, automatically transcoding incoming JSON-RPC requests into REST calls [7].
- DuckDB natively queries Hugging Face Hub datasets over the
hf://protocol without requiring local pre-downloads [8]. - Google released ADK for Kotlin 1.0, featuring Kotlin Multiplatform support, zero-reflection type-safe function calling, and local model integration via LiteRT-LM [9], alongside local model support in the Antigravity SDK using Gemma 4 [10].
RAG & Agents
- Cloudflare introduced an Agent Development Lifecycle framework using event-driven systems built on Workflows, OpenTelemetry, and short-lived credential access models [11], alongside "Turnstile Spin" for agent-mediated website security verification [12].
- Google expanded the Gemini Enterprise Agent Platform with Model Armor, semantic intent governance policies, and an out-of-band Agent Anomaly Detection layer analyzing OpenTelemetry traces [13, 14].
- LangChain launched Managed Deep Agents v0.8, adding user-owned credentials, user-level memory, HTTP channels, file transfer in Slack, and a built-in web search tool [15].
- Anthropic published "Project Swap," testing agents that trade books and resources on behalf of humans, matching human preference rankings 61% of the time [16].
MLOps & DevOps
- Google Kubernetes Engine introduced Pod snapshots to capture running CPU and GPU memory state, reducing AI inference startup times by up to 89% [17], alongside a multi-cluster GKE Inference Gateway for global accelerator routing [18].
- Datadog published a case study on fine-tuning Qwen3.5-9B on larger teacher model traces to automate production alert investigations, achieving 87% recall at a 20x cost reduction [19].
- Google’s MaxText team reproduced AI2's OLMo 3 7B pre-training from scratch on Google Cloud TPUs using JAX/XLA, reaching 57.4% MFU while catching silent data-loader bugs through held-out validations [20].
- Google integrated premium Google Cloud Colab benefits, including priority accelerators and uninterrupted background execution, directly into Google AI subscriptions [21].
Developer Tools & Software Engineering
- GitHub updated Copilot with local sandboxing for agents, OpenTelemetry monitoring controls [22], and Copilot Memory integration into agentic autofix to retain and reuse secure development patterns [23].
- Mandiant published a five-pillar secure SDLC framework addressing code pipelines, OIDC extraction risks, and build provenance [24], while Docker introduced the Sandbox Kit Specification v3 to package agent permissions and dependencies as OCI images [25].
- Security advisories highlighted multiple supply chain vectors, including the Graphalgo malware spreading to Terraform providers and Go modules [26], weaponized GitLab incoming email addresses [27], and a placeholder domain (
third-party.com) leveraged to serve PowerShell lures across 1,700+ repositories [28].
Sources
- Better prompt caching for GPT-6 openai.com
- Gemini 3.8 Live with Live Avatar blog.google
- Contrastive Language Models contrastive-lm.notion.site
- Bringing Your Muse to Life research.meta.ai
- Bringing Private Processing to Meta AI Glasses engineering.fb.com
- Model Optimizer github.com
- Turn your REST APIs into MCP tools with Google Cloud API Gateway google ai
- DuckDB and Hugging Face: Querying Datasets Directly duckdb.org
- Announcing ADK for Kotlin 1.0: Building Production-Ready AI Agents in Kotlin, Android, and Beyond google ai
- Introducing Support for Local AI Models in the Antigravity SDK google ai
- Cloudflare Introduces the Agent Development Stack Lifecycle to Replace Traditional SDLC infoq.com
- Agents can now set up your website’s security with Turnstile Spin blog.cloudflare.com
- Build zero-trust AI agents that judge intent, not just syntax google ai
- Agent Anomaly Detection, now in Private Preview on the Gemini Enterprise Agent Platform google ai
- Managed Deep Agents v0.8: new auth, memory, and channels langchain.com
- Anthropic tested what happens when agents bargain for people anthropic.com
- Scale your AI workloads faster and more efficiently with GKE Pod snapshots cloud.google.com
- Global AI routing with <1% overhead on multi-cluster GKE Inference Gateway cloud.google.com
- Teaching a 9B model to investigate production alerts datadoghq.com
- Reproducing OLMo 3 7B Pre-training in MaxText: case study of large scale training on TPUs google ai
- Colab is now part of your Google AI plan google ai
- GitHub Copilot weekly releases: September 21 github.blog
- Agentic autofix now uses Copilot Memory github.blog
- Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure cloud.google.com
- Docker Sandbox Kit Spec: Authority as Code docker.com
- Graphalgo campaign spreads to Terraform providers and Go Modules aikido.dev
- GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks darkreading.com
- Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content thehackernews.com