Top stories
NVIDIA Releases Magpie Multilingual TTS with Open Weights and Expanded Language Support
NVIDIA has released an update to its Magpie Multilingual Text-to-Speech (TTS) model, offering open weights and support for 12 languages, including new additions like Modern Standard Arabic, Korean, and Brazilian Portuguese. This release allows developers to deploy and customize multilingual speech generation within their own infrastructure, aiming to reduce latency and meet specific data residency and privacy requirements for voice AI applications.
Rust Enables Polonius Alpha Borrow Checker on Nightly Builds
The Rust team has enabled the Polonius Alpha borrow checker on nightly builds, preparing for stabilization in the coming months. This new iteration allows more code to compile by enabling flow-sensitive borrow checking of lifetime outlives relationships, addressing limitations of the current NLL borrow checker.
China Orders State Agencies to Uninstall Government-Specific Windows 10 Edition
China's Ministry of State Security has reportedly instructed some state-linked organizations to remove a customized Windows 10 version, accelerating its planned retirement due to data security concerns. This directive led to a surge in shares for Chinese OS vendors, indicating a push towards domestic software alternatives.
Apple Music to Display Visible Labels for AI-Generated Content Later This Year
Apple Music will introduce visible "Made With AI Labels" for AI-generated content, including artwork, tracks, compositions, and music videos, later this year. This initiative aims to provide transparency to listeners regarding the use of generative AI in music production, aligning with similar efforts by other streaming platforms.
Google Threat Intelligence Group Identifies Three Russian Cyber Espionage Clusters Abusing Authentication Flows
Google Threat Intelligence Group (GTIG) has identified three distinct suspected Russian cyber espionage clusters, UNC6293, UNC7005, and UNC5976, that are abusing legitimate authentication flows to target individuals in academia, aerospace, defense, government, and think tanks across Europe and the United States. These groups employ persistent phishing and social engineering tactics to compromise accounts, often by tricking users into setting app passwords or abusing OAuth flows. This matters because these techniques exploit trusted authentication processes, making them harder for targets to recognize as malicious and posing a significant threat to sensitive information.
Google Introduces 'Preferred Sources' Button for Search and Gemini Integration in Discover Feed
Google has launched a "Preferred Sources" button for webmasters, allowing users to designate favorite news sites to appear more frequently in Google Search results. Additionally, Google is integrating its Gemini chatbot into the Discover feed for content curation and enhancing customization for audio briefings in the Google News app. These updates aim to provide users with more control over their news consumption and offer publishers a new way to engage readers within Google's ecosystem.
FCC eliminates gigabit broadband speed goal, citing technological neutrality concerns
The Federal Communications Commission (FCC) has abolished the gigabit speed goal for broadband, which was established during the Biden administration. The FCC stated that the gigabit goal was not "technologically neutral" and could be prejudicial to slower technologies like satellite and fixed wireless, despite fiber networks routinely offering such speeds.
ClarityCheck facial recognition service exposed millions of face photos online
ClarityCheck, a facial identification service, exposed over nine million face photos on an unsecured cloud server for several months. This data breach allowed public access to images likely uploaded without consent, raising significant privacy and security concerns.
Valve Leaks Steam Frame VR Headset Unboxing and Setup Videos
Valve accidentally published and then removed several videos demonstrating the unboxing, setup, and accessories for its Steam Frame virtual-reality headset. These leaked videos provide a detailed look at the device's physical adjustments and streaming capabilities, suggesting an imminent launch for the VR headset.
Ransom Busters Affiliate Claims Hacking Ransomware Servers, Demands Payment from Victims
A ransomware affiliate named Ransom Busters is emailing victims, claiming to have hacked ransomware group servers and offering to delete stolen data for $20,000 to $60,000. This activity is unusual as it involves a third party proactively contacting victims with an offer to recover data and delete backups held by ransomware groups. The practice raises legal concerns under the U.S. Computer Fraud Abuse Act.
OpenAI Completes $7 Billion Secondary Share Sale at $852 Billion Valuation
OpenAI completed a $7 billion secondary share sale, allowing current and former employees to sell stock based on an $852 billion valuation. This tender offer provides liquidity for employees and follows a $122 billion funding round in March.
UK Trial Uses AI to Predict and Avoid Climate-Warming Aircraft Contrails
A new £5 million UK trial, "Operation Blue Skies," will use AI to predict areas where climate-warming contrails are likely to form, allowing aircraft to avoid them. This initiative aims to mitigate aviation's contribution to climate change by adjusting flight paths, primarily through minor altitude changes.
Study finds X's algorithm prioritizes engagement, shows more 'ragebait' to Democrats
A new study published in PNAS found that X's algorithm prioritizes engagement, leading to more 'ragebait' content being shown, particularly to users who identify as Democrats. This research highlights how social media algorithms shape information consumption with limited transparency.
Microsoft Copilot revealed undocumented parameter allowing data exfiltration without user consent
Security researchers discovered a vulnerability in Microsoft 365 Copilot Enterprise that allowed data exfiltration without explicit user consent by querying Copilot itself. The AI assistant disclosed an undocumented prompt parameter, "?autorun=1", which, when combined with the "?q=" parameter, enabled silent execution of malicious prompts upon a user clicking a link. Microsoft has since mitigated this vulnerability.
Apple Releases Security Updates for macOS, iOS, and iPadOS Addressing WebKit Vulnerabilities
Apple released security updates for macOS, iOS, and iPadOS to fix dozens of vulnerabilities, primarily in the WebKit browser engine. These patches are important for user security, as the flaws could lead to crashes, data disclosure, and arbitrary code execution.
Cloudflare introduces WriteGuard for fine-grained control over AI agent actions on MCP servers
Cloudflare has launched WriteGuard, a new control system designed to manage and restrict the actions of AI agents connected to Model Context Protocol (MCP) servers. This system addresses the risk of AI agents performing unintended or destructive operations by providing granular permissions, preventing scenarios like mass ticket closures or data deletion. WriteGuard is now available in private beta for Cloudflare MCP server portals.
Heights Finance Data Breach Exposes Financial and Personal Information of Nearly 750,000 Customers
Heights Finance, a debt consolidation loan company, experienced a data breach in May that exposed sensitive financial and personal information, including Social Security numbers, for approximately 734,828 customers. The breach occurred on a third-party cloud platform and did not affect the company's internal loan management systems. This incident highlights the ongoing risks associated with third-party cloud service providers and the potential for widespread data compromise in the financial sector.
Google hires former Gmail lead Jacob Bank as Chrome VP of Product, focusing on AI integration
Jacob Bank, former Director of Product Management for Gmail, Calendar, and Chat, has rejoined Google as VP of Product for Chrome. His appointment follows the shutdown of his AI workflow automation startup, Relay.app, and indicates Google's focus on integrating AI capabilities into the Chrome browser.
India introduces legislation to allow merchant fees on UPI transactions
India is enacting new legislation to enable merchants to pay charges on some transactions made through its Unified Payments Interface (UPI) network. This policy shift aims to create a sustainable business model for UPI, which has operated without merchant fees since 2020, by allowing payment companies to recover infrastructure and operational costs.
Cloudflare launches CI SDK for running CI/CD pipelines on its platform
Cloudflare introduced a CI SDK built on Cloudflare Workflows, enabling continuous integration (CI) pipelines to run directly on its platform. This development allows platforms to manage CI/CD for their own code and their customers' code, integrating with Cloudflare Artifacts for versioned code storage.
New Android Malware WindRelay and SpyNote Steal Credit Card Data and Facilitate Loan Fraud
A new Android NFC relay malware, WindRelay, is being used with the SpyNote remote administration tool (RAT) to steal credit card data and take out loans in victims' names. This combination allows attackers to gain remote access to devices and relay live NFC transactions, enabling real-time financial fraud.
OpenAI Reportedly Disbands AI Preparedness Team, Reassigns Safety Responsibilities
OpenAI has reportedly disbanded its preparedness team, which was responsible for assessing and mitigating serious risks posed by AI models. This move reassigns safety functions to existing teams focused on specific areas like bio and cyber, raising concerns about the company's commitment to AI safety amidst leadership changes and an impending IPO.
Amazon DynamoDB Adds Real-Time Vector Search Capability
Amazon DynamoDB now supports real-time vector search, allowing users to store vector embeddings alongside operational data and perform similarity searches directly within the database. This integration removes the need for separate vector databases and synchronization pipelines, simplifying application architecture and reducing operational overhead for AI-driven features.
Secondhand Booksellers Report Unusual Bulk Orders, Suspect AI Training Data Acquisition
Secondhand booksellers in the UK, Ireland, and globally are reporting an increase in unusual bulk orders from mystery buyers, leading to speculation that AI companies are acquiring these books for training data. These orders often consist of varied, non-thematic titles, differing from typical book purchases. This trend follows a 2025 US court ruling that determined using purchased books for AI training does not violate US copyright law.
Cloudflare Introduces Agent Tracing and Local Debugging for AI Agents on Workers
Cloudflare has launched Cloudflare Agents, a platform for deploying and managing hosted agents, starting with agent tracing for visibility into agent behavior. Concurrently, `wrangler dev` and `vite dev` now automatically capture OpenTelemetry traces for local Worker invocations, enabling AI agents to debug issues using a new Local Explorer API. This provides structured feedback for agents during local development, reducing manual logging.
California DMV Permits Self-Driving Truck Testing, Teamsters Sue Over Job Loss Concerns
The California Department of Motor Vehicles (DMV) has approved new regulations allowing autonomous heavy-duty trucks to test on public roads, leading to permits for companies like Aurora Innovation and Kodiak AI. Kodiak AI has already begun testing. The California Teamsters union is suing the state, arguing the regulations were improperly implemented and could result in 400,000 job losses, claiming the DMV did not conduct a required economic study.
Seven Arrested in €30M Commerzbank Fraud Exploiting Service Provider Flaw
Seven individuals have been arrested in Brazil and Europe in connection with a €30 million bank fraud that impacted Commerzbank customers in November 2023. The fraud exploited a vulnerability in a service provider's system, leading to unauthorized withdrawals, though Commerzbank states customers suffered no financial losses.
Claude Code Defaults to Auto Mode for Pro, Max, and Team Plans
Anthropic has made auto mode the default setting for Claude Code on Pro, Max, and Team plans, effective August 14. This change allows for longer autonomous operations by replacing manual approval prompts with an automated classifier for tool calls, which Anthropic states improves safety and efficiency. The company has also stopped charging for the extra tokens used by the auto mode classifier.
RingCentral Data Breach Impacts 1.6 Million Accounts After Social Engineering Attack
RingCentral experienced a data breach in July, affecting 1.6 million individuals, following a "sophisticated social engineering campaign." The ShinyHunters extortion group claimed responsibility and leaked data after RingCentral did not meet their demands, leading to the information being added to HaveIBeenPwned.
Trezor Customers Affected by Data Breach at Shipping Partner ShipMonk
Hardware wallet manufacturer Trezor disclosed a data breach impacting nearly 14,000 customers after its shipping provider, ShipMonk, experienced unauthorized access to its systems. The incident exposed customer order data, including names, addresses, emails, and phone numbers, for orders placed between May 10 and August 8, 2026. Trezor's own systems were not compromised, but the breach raises concerns about potential phishing attempts targeting affected users.
AI Watermark Removal Tools Emerge, Efficacy Unverified Against Text Watermarks
A market for tools claiming to remove AI watermarks has appeared following Anthropic's announcement of invisible watermarks in Claude's output. However, the efficacy of these tools against text watermarks cannot be verified because Anthropic has not released details on its watermarking method or a corresponding detector. This development highlights the ongoing challenge of verifying AI-generated content and the rapid response from developers to new AI features.
Apple Opens Advanced Manufacturing Center in Houston, to Produce Mac mini and AI Servers
Apple opened its Advanced Manufacturing Center (AMC) in Houston, Texas, which will offer free training for small and medium-sized businesses. The facility, where Apple's advanced AI servers are already built, will also begin manufacturing Mac mini computers later this year. Apple CEO Tim Cook stated the company invested hundreds of millions of dollars into the facility.
Databricks Secures $5 Billion Funding Round at $190 Billion Valuation
Databricks has completed a $5 billion funding round, valuing the company at $190 billion. The company plans to use the capital to expand its enterprise AI capabilities, including its Unity AI Gateway governance tool and Genie agentic tool. This funding follows a previous $5 billion round six months prior and comes as Databricks reported crossing $7 billion in revenue run rate.
Spotify Expands AI Music Remix and Cover Project with Merlin and Kobalt Partnerships
Spotify has partnered with Merlin and Kobalt, adding over 30,000 independent labels and publishers to its upcoming AI music product. This initiative allows fans to create AI-powered covers and remixes of artists' music with consent, aiming to provide new revenue streams and discovery opportunities for participating artists.
Fenix Flexin's "Rubberz" Reaches Billboard Hot 100 Amidst AI Generation Claims
Rapper Fenix Flexin's song "Rubberz" reached number 58 on the Billboard Hot 100 and accumulated over 35 million Spotify streams, sparking debate over its origins. The song's stylistic shift, audio anomalies, and an AI detection tool from Treblo, an AI music generation company, led to speculation that it was AI-generated. Flexin initially denied AI use but later stated he never denied it, claiming he was unaware of the tool until mixing.
Mistral AI Expands Infrastructure, Commits to 1 Gigawatt European Compute by 2030
Mistral AI announced a three-part expansion of its infrastructure business, including regional inference endpoints, a "Priority Tier" with a 99.5% uptime guarantee, and commitments to build 1 gigawatt of European compute by 2030. Five European companies have made multi-year compute commitments to underwrite 200 megawatts by 2027. The company will also host third-party open models, starting with GLM-5.2 from Z.ai, to provide a unified platform for enterprises.
Brazil Orders Discord to Suspend Livestreaming Feature After Teen's Death
Brazil's National Data Protection Authority (ANPD) has ordered Discord to suspend its "Go Live" livestreaming feature. This action follows an investigation into the death of a 13-year-old girl who was allegedly encouraged to take her own life during a Discord livestream. The suspension will remain until Discord implements adequate protective measures for minors, as the ANPD found the platform lacked real-time access to livestream content for automated violation detection.
Cerebras Stock Falls 14% After Q2 Revenue Miss, Despite Raised Full-Year Outlook
Cerebras Systems' stock dropped 14% in extended trading following its second earnings report post-IPO, as the company reported Q2 revenue of $180 million, missing analyst expectations of $194 million. Despite this, Cerebras raised its full-year core revenue outlook to $880-$890 million and saw a 281% increase in AI cloud services revenue, indicating a shift towards services over hardware sales.
Nonprofit News Groups Sue Trump Over Truth Social API for Early Post Access
The Freedom of the Press Foundation and The Intercept have sued Donald Trump, alleging that Truth Social's "Truth API" violates the First and Fifth Amendments by charging up to $100,000 per month for early access to posts from Trump and other users. The lawsuit claims this practice allows Trump to profit by selling preferential access to government information, potentially impacting financial markets and delaying public access to announcements.
Hundreds of Fake Chrome VPN Extensions Route User Traffic Through Proxies
Security researchers identified 737 Chrome VPN extensions that routed user browser traffic through a single SOCKS5 proxy infrastructure. These extensions, downloaded nearly 75,000 times and primarily targeting Russian-speaking users, impersonated legitimate VPN brands, allowing an adversary-in-the-middle to observe browsing activity and data.