An AirTag in a rare book led to an Amazon book scanning warehouse in Las Vegas
An AirTag in a rare book led to an Amazon book scanning warehouse in Las Vegas

A bookseller hid an AirTag inside a rare book and let it go with a bulk order. The tracker travelled across the United States and stopped at a warehouse in Las Vegas owned by Amazon. Emanuel Maiberg reported the result for 404 Media on Monday. Booksell…

CISA orders a three-day patch after a flaw in the Ray AI framework comes under active attack
CISA orders a three-day patch after a flaw in the Ray AI framework comes under active attack

America’s cyber-defence agency has added a single vulnerability in Ray, the open-source framework that powers a large slice of the world’s AI training and inference, to its Known Exploited Vulnerabilities catalogue, confirming that the flaw is being us…

The SEC staff agreed data centre securitisation sits outside Dodd-Frank risk retention
The SEC staff agreed data centre securitisation sits outside Dodd-Frank risk retention

Nvidia announced $500bn of AI infrastructure financing last week, alongside Apollo, BlackRock, Blackstone, Brookfield, Goldman Sachs and KKR. A fortnight earlier, the Securities and Exchange Commission staff answered a question. It concerned how deals …

Google picked and paid for the firm anonymising the Spirit Airlines data
Google picked and paid for the firm anonymising the Spirit Airlines data

Google has agreed to pay $10mn for what a dead airline knew. A judge considers the sale on Wednesday morning. Reuters reported the price on Monday. Every account of the deal rests on one word. The data is deidentified, so nobody need worry. The Spirit …

Cursor Origin is on by default for paid users, and its data terms are unpublished
Cursor Origin is on by default for paid users, and its data terms are unpublished

Cursor started rolling out Origin, its own code hosting platform, on Monday morning. About three and a half hours later GitHub fell over. The order matters, because most of the internet reversed it. Matt Palmer works at Cursor. He quote-tweeted his own…

GitHub disputes Wiz’s claim that Copilot Autofix wrote a Snowflake flaw
GitHub disputes Wiz’s claim that Copilot Autofix wrote a Snowflake flaw

A security company said on Monday that an AI wrote a critical flaw into Snowflake’s code, and that another AI found it and broke in. The second half holds up. The first half came apart in about eight hours. What is left is still worth your attention. I…

Greg Brockman says OpenAI underestimated its own models’ cyber skills
Greg Brockman says OpenAI underestimated its own models’ cyber skills

Greg Brockman went on CNBC on Monday to say the executive departures at OpenAI are not unusual. “I actually think that the difference between OpenAI and other organizations is that we are so much in the spotlight, so every departure gets scrutinized in…

Opening statements begin in the biggest consumer protection case in the US
Opening statements begin in the biggest consumer protection case in the US

Opening statements in the states’ case against Meta begin today in Oakland. The court seated a jury last week. The trial should run about five weeks. Twenty-nine state attorneys general brought the case in 2023. Lawyers for California, Colorado, Kentuc…

Wispr raised $280mn at $2bn to argue the text box is finished
Wispr raised $280mn at $2bn to argue the text box is finished

Wispr has raised $280mn at a $2bn valuation. Menlo Ventures led the round, having led the last one too. Total funding now stands at $361mn. The company makes Wispr Flow, a dictation app that turns speech into cleaned-up text in whatever application you…

An AI agent built a working exploit for this macOS flaw in four hours
An AI agent built a working exploit for this macOS flaw in four hours

A security company built working exploits for two pre-authentication root bugs in macOS. It took four hours. The firm, Calif, used an AI agent. It now withholds technical details of one of those bugs, CVE-2026-65400, until most Macs carry the patch. Th…