NerdNews

Cloudflare's Project Think is a suite of primitives for its Agents SDK, designed to transition AI agents from stateless orchestration into a durable, actor-based infrastructure. It introduces a kernel-like runtime where agents survive platform restarts and manage relational memory trees.

GitHub has paused new sign-ups for Copilot individual subscriptions due to capacity constraints. The move aims to ensure reliable service for existing customers. GitHub Copilot's compute demands have increased with the introduction of agentic workflows, leading to higher resource consumption and usage limits being reached. The company is working to adjust its pricing model and usage limits to better manage demand.

The UK government is investing £500m in a sovereign AI capability fund, with £80m available for AI procurement talks with tech firms. The fund aims to validate new AI capabilities, de-risk investment, and create jobs. Companies can retain ownership of IP developed during projects and exploit it commercially.

Anthropic announced a $5 billion investment from Amazon, with a pledge to spend $100 billion on AWS over 10 years. The deal involves Amazon's custom chips, including Graviton and Trainium, and secures capacity for future chips.

Anthropic's new Mythos AI model can detect software flaws faster than humans and generate exploits, raising concerns among governments and companies about its potential to turbocharge hacking and expose weaknesses faster than they can be fixed.

Lovable, an AI coding platform, has denied a data leak despite a researcher claiming to have accessed sensitive user information. The company attributed the issue to 'intentional behavior' and unclear documentation, but later apologized and blamed its bug bounty partner, HackerOne, for not escalating the report.

A study analyzing human-LLM interactions found that chatbots can gain trust by sounding friendly and personable, rather than just being competent. The research suggests that 'warmth' is key to making users attribute human-like qualities to chatbots, but this can also lead to overtrust and susceptibility to deception.

Google has introduced a new Android command-line interface (CLI) built specifically for AI agents, claiming a 70% cut in token usage and three times reduction in task completion time. The CLI is designed to work with AI agents, but can also be used by scripts, automation tools, and developers who prefer working in a code editor. It provides features such as creating applications from templates, installing and managing the Android SDK and device emulators, and finding and listing Android skills.

Microsoft has released an out-of-band update to fix a restart loop issue affecting some Windows Server devices after the April update. The issue caused domain controllers to crash and restart repeatedly, preventing authentication and directory services from functioning. The fix addresses the problem and also resolves failed installations. The issue affected Windows Server 2016 through 2025.

The UK's Science, Innovation and Technology Committee has launched an inquiry into low-energy computing to address the growing energy demands of AI. The committee will explore emerging technologies such as neuromorphic computing and silicon photonics to reduce datacenter energy use.

Apple's CEO Tim Cook is stepping down and will be succeeded by John Ternus, the current senior vice president of hardware engineering. Ternus will take over as CEO on September 1st, while Cook becomes executive chairman. Johny Srouji has been appointed as the new chief hardware officer.

California Attorney General Rob Bonta has accused Amazon of a price-fixing scheme, where the company allegedly pressured brands to increase prices on other retailers' websites to make Amazon's prices more competitive. The allegations are part of an ongoing antitrust lawsuit against Amazon.

Tesla has launched its Robotaxi service in Dallas and Houston, but the service is not widely available. Despite promotional videos and announcements from CEO Elon Musk, only a few rides have been reported, and the service is classified as 'unavailable' in both cities. The launch appears to be more of a publicity stunt ahead of the company's quarterly earnings report.

Apple announces Tim Cook's departure as CEO, with John Ternus succeeding him. Cook will remain as executive chairman, while Ternus will join the board of directors. The transition is set to occur on September 1.

Vercel, the company behind Next.js, has reported a security incident involving unauthorized access to internal systems, resulting in the compromise of some customer credentials. The incident is attributed to a third-party AI tool called Context.ai, which was used by a Vercel employee. Context.ai has acknowledged a security incident in March, which may have led to the compromise of OAuth tokens for some of its consumer users.

The KelpDAO DeFi project was hacked for $290 million in a heist tied to the Lazarus Group, a state-sponsored North Korean hacking group. The attack targeted the verification layer used to validate cross-chain messages, allowing hackers to steal 116,500 rsETH tokens, which were then laundered through Tornado Cash.

A set of 26 malicious apps on Apple's App Store in China impersonate popular wallets to steal recovery or seed phrases and drain cryptocurrency assets. The apps use typosquatting and fake branding to lure users into downloading them, and then redirect users to phishing pages to steal sensitive information.

China hired a US veteran to stalk and spy on figure skater Alysa Liu and her father, who was a dissident against the Chinese government. The stalking was part of a larger campaign by China to suppress dissenting voices abroad.

ZionSiphon malware combines traditional endpoint compromise techniques with functions tailored to industrial control systems (ICS), targeting water treatment and desalination infrastructure. It has capabilities such as subnet-wide scanning for ICS devices, attempts to modify chlorine dosing and pressure parameters, and propagation via removable media.

A newly identified malware campaign exploits a command injection flaw in digital video recorder (DVR) devices to deploy a Mirai-based botnet. The campaign targets CVE-2024-3721 in TBK DVR systems, enabling attackers to gain access and install a multi-architecture Mirai variant malware known as Nexcorium.