Every story across the Writeble desks, newest first.
VulnCheck reports active exploitation of Langflow CVE-2026-0768 (CVSS 9.8), an unauthenticated root RCE in the custom component editor used for recon and harvesting OpenAI, AWS, and Langflow secrets.
Google released Mantis, an open-source skill suite that helps coding agents discover, triage, sandbox-reproduce, and patch software bugs, targeting hallucinated findings and true-positive rates under 7% in naive AI code scanning.
H Company released NeoMME 260M and 800M Apache 2.0 single-tower multimodal encoders that process text tokens and raw image patches in one bidirectional Transformer, with NeoMME-Retriever topping sub-800M ViDoRe v3 scores.
OpenBMB quietly published MiniCPM5-2B on Hugging Face under Apache 2.0 with BF16, GGUF, MLX, and GPTQ builds plus open UltraData training corpora aimed at local assistants and tool-using agents.
Nvidia agreed to acquire Hugging Face for $12.93 billion, pledging the Hub stays open and hardware-neutral while the deal heads into US and EU antitrust review with a first-half 2027 close target.
Manifold Security disclosed GitSpawn, a vulnerability class where AI coding agents that run unsanitized git status or git diff at startup can execute attacker-controlled commands from a repository .git/config, with several agents still unpatched as of early September 2026.
Hugging Face WebAI released a kernels loader with 207 Apache 2.0 WebGPU kernels plus Fleet, an in-browser GPU benchmarking suite that can privately contribute correctness and performance evidence from real devices.
The Institute of Foundation Models released K2 Horizon, a six-model Apache 2.0 open fleet spanning 0.9B to 375B parameters with weights on Hugging Face, day-zero vLLM and SGLang support, and planned releases of training data, intermediate checkpoints, and code.
OpenAI chief scientist Jakub Pachocki published an essay titled An Alien Mind on September 6, 2026, arguing that no frontier lab has solved alignment and monitoring well enough to keep scaling at maximum speed. The post arrived three days after GPT-6 Astra and alongside internal figures showing OpenAI researchers now consume 3.1 agent-workdays for every human workday.
Google DeepMind and Google Research released WeatherNext 3 on September 3, 2026, an artificial intelligence weather forecasting model that produces global predictions updated every hour at spatial resolutions down to five kilometers. The model ingests live satellite data and surf
Cloud development platform Coder confirmed an attacker breached its Cloudflare infrastructure to deploy rogue registry servers that served backdoored Terraform modules. The compromised modules contained info-stealing payloads designed to harvest cloud API keys, SSH keys, OIDC tokens, and CI/CD pipeline secrets before exfiltrating them to an external server. Coder released security updates across versions 2.37.0, 2.36.4, 2.35.7, and 2.34.9, urging developers who downloaded modules during the 14-hour incident window on August 31 to rotate all credentials.
Conversational software provider Gupshup launched its self-serve Voice AI Platform to support automated inbound and outbound phone workflows. The platform extends WhatsApp, RCS, and SMS workflows into voice while allowing businesses to select custom speech-to-text, text-to-speech, and language models. The service is available globally at a starting rate of $0.035 per minute with 100 promotional minutes included.
Nvidia announced on September 3, 2026, that it has agreed to acquire Hugging Face for $12,930,300,000 in a deal aimed at scaling the open-source artificial intelligence platform. Under the terms outlined by Nvidia founder and CEO Jensen Huang, Hugging Face will maintain its brand
OpenAI officially released GPT-6 Astra on September 4, 2026, making the flagship system available for API integration through multiple cloud providers with a 1,050,000-token context window and support for up to 128,000 completion tokens. The model is priced at $10.00 per million
The Cloud Native Computing Foundation published technical architectural guidance for predictive GPU autoscaling on Kubernetes on August 28, 2026. The specification defines predictive resource allocation metrics that preemptively scale hardware accelerators prior to traffic spikes in open-source AI inference clusters. The framework addresses production deployment constraints identified across the 66% of surveyed cloud-native organizations running generative model inference on Kubernetes.
Amazon scientists and academic collaborators have introduced a dependence-aware aggregation method using Ising models to adjust for correlated errors among large language model judges. Presented at ICML 2026, the unsupervised approach improved evaluation accuracy by 9% to 14% acr
K-Dense-AI released scientific-agent-skills on GitHub, reaching 34,871 total stars and trending on August 27, 2026. The repository compiles 163 verified operational skills and connectors for over 100 scientific databases covering genomics, medicinal chemistry, and drug discovery workflows. The skill definitions conform to the open Agent Skills standard and support execution across Cursor, Codex, Claude Code, and Pi.
OpenAI announced on August 28, 2026, that it has notified SpaceX of its intent to wind down model access for the AI code editor Cursor, setting a proposed contract shutoff date of November 12, 2026. The decision follows SpaceX’s acquisition of Cursor and triggers a change-of-cont
Independent evaluations of Ox Alpha show the artificial intelligence model achieved a 62.8% completion score across the full DeepSWE benchmark, following an earlier 10-task test that reported an 80% success rate. The larger evaluations place Ox Alpha’s coding performance near Dee
The Washington Post deployed an internal multi-agent architecture to automate organizational data analytics and reporting tasks. The implementation uses ChatGPT and OpenAI API endpoints configured with permission logic to execute cross-dataset queries across subscription, advertising, and content databases. The network operates under a policy framework requiring explicit human sign-off for actions that modify underlying datasets.
Amazon researchers introduced SOP-Bench on August 21, 2026, an open-source evaluation benchmark designed to test AI agents against standard operating procedures across 12 business domains. Presented at the KDD 2026 conference, the framework contains over 2,000 executable tasks pa
