Hi there!

🛡️ Security & Privacy

• A DEF CON researcher's noRecognition project uses AI-trained adversarial patterns printed on clothing and vehicles to defeat license-plate readers like Flock and facial-recognition tools like Clearview AI. More
• A Black Hat talk revealed the full timeline of how OpenAI's own agents accidentally chained zero-days through Artifactory into the July breach of Hugging Face's infrastructure. More
• A WIRED reporter had their location tracked and calls eavesdropped after hackers exploited weak APIs in a cheap kids' GPS smartwatch — a widespread flaw across child-tracking wearables. More
• Bugs in Apple's WebKit engine let attackers unmask real IP addresses of users relying on iCloud Private Relay or the Tor-based OnionBrowser app. More
• The EU's open-source digital-identity age-verification wallet requires hardware-bound attestation, sparking fears it will lock out Linux, custom Android ROMs, and independently built apps. More
• New "Pass-ta-key" attacks let malware already on a compromised Windows PC hijack Google-synced passkeys, bypass verification checks, and even steal the master encryption key. More

🛸 Tech

• Nixpkgs' volunteer core governance team disbanded after burnout, blaming the NixOS Steering Committee for micromanagement and poor coordination on delegated decisions. More
• Cloudflare open-sourced Cloudflare OS, an agent-workspace platform with governed data access ("Gatekeepers") that lets any organization deploy internal AI apps and workflows on its own systems. More

🤖 AI

• Claude Code sessions on macOS and Linux can now message each other with auto-written summaries, letting agents share findings and coordinate parallel work without user re-explanation. More
• Meta released Muse Code, a terminal coding agent powered by its new Muse Spark 1.2 model, featuring persistent background agents and repo-scale execution. More
• NVIDIA's Alpamayo 2 Super, a 34B-parameter autonomous-driving reasoning model, is now commercially licensed under OpenMDW, opening robotaxi and AV development to any automaker. More
• Moonshot AI's Kimi K3, a 2.8-trillion-parameter open-weight MoE model with a 1M-token context window, landed on Hugging Face and ranks near frontier closed models. More
• An internal build of OpenAI's next model, Astra, resolved ten long-standing open math and CS problems — but the same model has since been paused internally after reaching a "critical" cybersecurity capability threshold. More / More

🛠️ Tools

• Cloudflare launched Kitesurf, a lightweight browser built for AI agents that runs entirely inside Cloudflare Workers, using 3-7x less CPU and memory than Chromium. More
• uutils is rewriting core Linux command-line tools — coreutils, findutils, grep, sed — in Rust for memory safety, cross-platform portability, and modern tooling. More

🐧 Misc

• A developer builds interactive Rollercoaster-Tycoon-style simulations (chip fabs, rocket engines) with LLMs as a more memorable way to learn complex engineering topics. More
• A philanthropy-donor database found 99% of its traffic is bots; Claude's search crawler alone hit a 35,000-pages-crawled-per-human-visitor ratio before being blocked. More
• Ancient Library, a Hacker News-featured open-source project, offers 1,060 Greek and Latin texts with click-to-parse word-by-word grammar lookups. More

📩 Please feel free to share this article with colleagues and friends who will find it valuable.

Thanks for reading!

Have a great day!
Bogdan