What Happened
Recent security research and incident telemetry show three converging trends attackers are using to increase success and scale: obfuscation to bypass content defenses, AI-assisted data theft at scale, and social‑engineering that leverages legitimate collaboration tooling for hands‑on compromise.
Obfuscation adapted from prompt injection to phishing
A high‑volume phishing campaign used invisible Unicode Tag…
What Happened
Kubernetes v1.37 released with Dynamic Resource Allocation (DRA) promoted to GA; ResourceClaim.status.devices, device taints/tolerations, and resource.kubernetes.io/numaNode stabilized; multiple DRA features graduated or moved to Alpha/Beta (ResourceClaim Beta behind DRAWorkloadResourceClaims, Device Attributes Downward API Beta, attribute list types Alpha 2, fractional consumable capacity Beta via DRAFractionalCapacityRange, PreQueueingHint Alpha, and scheduler performance improvements…
What Happened
GitHub Actions added a deprecation-aware Runner REST API (GET /actions/runners/deprecations/{version}) to surface runner_version and deprecation dates, plus a new vulnerability-alerts permission for GITHUB_TOKEN and new job context properties for reusable workflows (job.workflow_ref, job.workflow_sha, job.workflow_repository, job.workflow_file_path). These features are not available on GitHub Enterprise Server (GHES) yet [1].
GitHub announced…
What Happened
A burst of papers this cycle converged on deployment‑focused problems: reducing hallucination and improving provenance for retrieval‑augmented systems; making persistent memory safe and efficient for personalized agents; low‑resource speech and multilingual benchmarks; rigorous explanation and evaluator methodologies; and systems‑level patterns for stateless LLM APIs, multi‑agent orchestration and runtime performance.
Retrieval and…
What Happened
Recent releases across agentic tooling show converging engineering patterns: explicit multi-model support, local vLLM server integrations, stronger runtime typing and event hooks, improved resumability and tool-call fidelity, and operational controls for managed servers and headless deployments. Two representative changelogs highlight these trends:
Release v2.38.0 added model profile fields (context_window / context_window_used),…
What Happened
vitals 0.4.0 — an R toolkit for LLM evaluation (a port of Inspect by JJ Allaire / Posit) — was released on CRAN. The release adds built-in agent-solvers for Claude Code and Codex so ellmer-built agents can be compared directly against those models, introduces vitals_log_read() for reloading evaluation logs into tibbles with reconstructed…
What Happened
Recent vendor guidance and reference stacks outline practical, production-ready patterns for agentic AI, gateway-based model control, and local inference hardware:
AWS published Amazon Bedrock AgentCore patterns and two reference implementations for AI-driven development lifecycles: a serverless SQL→Mermaid ER pipeline and a CI/CD secure‑handoff agent flow, showing containerized agents, persistent AgentCore memory,…
What Happened
Over the last set of commits to ggml/llama.cpp a focused wave of performance, correctness and platform-support changes landed across Metal, Vulkan, CUDA, SYCL and CPU codepaths. Key changes include:
Sparse flash‑attention in Metal: a new kernel (kernel_flash_attn_ext_vec_idx) and single‑pass index compaction to enable a sparse vec flash‑attention path for prefill with…
What Happened
Multiple major AI vendors shipped new models and infrastructure while the industry also saw coordinated reliability and security stress signals.
OpenAI announced GPT‑6 “Astra,” trained in what it calls its largest run (>100,000 GPUs at Stargate) and positioned as a computer‑use / coding milestone; availability initially through its Daybreak program and…
What Happened
Google released Mantis, an open-source vulnerability discovery and patching harness designed to automate security analysis across software repositories. Mantis combines agentic review techniques with sandboxed reproduction of vulnerabilities, aiming to reduce hallucinated findings and improve true-positive filtering in a category where naive AI scanners can have true-positive rates below 7% [1].
The system…
What Happened
The biggest shift is platform consolidation across AI infrastructure. Nvidia agreed to acquire Hugging Face for about $12.93 billion, bringing a community platform with more than 3 million models and over 18 million developers under the world’s dominant AI chipmaker [7][8]. Nvidia framed the move as a way to scale open-weight model access…
What Happened
Kubernetes v1.37: HPAScaleToZero enabled by default — HorizontalPodAutoscaler (autoscaling/v2) can now scale workloads to zero using object or external metrics (not CPU/memory). ScaledToZero condition and a default five-minute downscale stabilization window included; feature gate enabled on kube-apiserver and kube-controller-manager in v1.37 [1].
Amazon Bedrock (GovCloud): Bedrock server-side Web Search…