NerdNews

Embabel, a Java framework for building AI agents, has reached its 1.0 general-availability release. It allows developers to define agents as typed domain objects and uses a planning step to work out how to get from the current state to a goal at runtime, borrowing from Goal-Oriented Action Planning (GOAP). Embabel is built on top of Spring AI and supports most providers, including OpenAI, Anthropic, and Gemini.

The European Union has introduced new transparency rules for AI, requiring companies to disclose when people are interacting with AI models or if content has been generated or altered by them. Providers must design AI systems to notify users when they're dealing with AI, and deployers must label AI-generated content. Companies that fail to comply risk facing fines of up to €15 million or 3% of their global annual turnover.

Microsoft's Copilot Studio has the potential to be the best AI agent builder, but its complicated onboarding process and multiple products with the same name are hindering its success. The platform allows users to build custom workflows and AI agents, but its user experience needs improvement.

AWS partners with Superblocks to offer vibe-coding tools within private clouds, allowing enterprises to create apps without sending data externally. This move is part of a trend where cloud providers encourage enterprises to separate AI models from other scaffolding and use their clouds for AI harnesses and orchestration.

OpenAI's ChatGPT is the most used AI tool in Congress, with 90% of AI spending going to ChatGPT, totaling $100,580 across 798 transactions. It's used for tasks like writing memos and drafting social media posts.

Azure lead engineer Kishorekumar Pattabiraman outlines criteria for choosing between skills and sub-agents in AI systems, emphasizing reusability and maintainability. The choice depends on four key dimensions: iteration model, voice fidelity, human gate placement, and task frequency.

HubSpot has redesigned its Just-In-Time Access (JITA) authorization system using a rule engine architecture. The new system evaluates temporary access requests through independent rules, allowing for more observable and explainable access decisions. This approach enables engineers to inspect how individual policies contribute to access decisions and manage authorization requirements as they change.

Microsoft's Agent Framework has reached general availability, providing a supported production runtime for building and running agents. The framework includes a harness, GitHub Copilot SDK and Claude Agent SDK connectors, and multi-agent orchestration patterns, allowing platform teams to run and govern agents across local development, containers, and hosted deployment.

TypeScript 7.0 features a native Go compiler, delivering 8-12x faster builds. It keeps full type-checking while closing the speed gap with other tools. The new version also includes parallelism tuning and a compatibility package for smooth migration.

AI is being increasingly used in healthcare, but many patients are unsure about its role. Experts say patients should ask their doctors about AI use, including how it's being used, how data is being protected, and whether they can opt out of AI services. The key principle is to have a 'human in the loop' to ensure AI is used responsibly and effectively.

Honda has partnered with QuantumScape to develop solid-state battery technology, which promises greater range, faster charging speeds, lower costs, and heightened safety. The partnership aims to research and develop solid-state batteries and their associated manufacturing techniques, with the goal of producing a solid-state EV by the end of the decade.

HashiCorp has released the public beta of Vault Kubernetes key management, allowing Kubernetes clusters to use Vault Enterprise as their KMS provider for encryption at rest. The plugin keeps the standard envelope encryption split, with Kubernetes generating and using data encryption keys and Vault owning key lifecycle, rotation, policy enforcement, and audit.

Google has rolled out an update to Google Health, allowing users to connect their Fitbit data directly to Apple Health. This update enables two-way syncing, allowing users to share their workouts, steps, and vitals between the two platforms. Previously, users had to rely on third-party apps or workarounds to connect their Google Health data to Apple Health.

Microsoft is planning to bring Xbox 360 games to PC, allowing developers to make their games backward compatible. The disc-to-digital program will also let players get a digital version of a game they already own on a physical disc. The feature is expected to have a gradual rollout between 2027 and 2028.

Samsung has banned smart TV apps that share users' internet connections with strangers, following a security research that found several popular apps contained code that funneled outsiders' web traffic through home internet connections, potentially putting millions of smart TVs at risk of hijacking.

A Belfast gallery's decision to show AI-generated art has sparked controversy among creatives, with some arguing it has no place in a photography gallery and others defending it as satirical and thought-provoking. The debate highlights the complexities of AI-generated art and its implications for the creative industry.

A new loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' browsers, delivering CountLoader and DeviceManager malware to Windows and macOS devices.

A cyberattack on the UK's Police National Legal Database has compromised contact data of over 100,000 police officers and staff. The ExfilSquad data extortion group claimed responsibility, demanding a ransom in exchange for not releasing the stolen data.

A firmware vulnerability in Coldcard's Bitcoin wallet has led to the theft of an estimated $89m. The vulnerability, which dates back to 2021, allowed attackers to reproduce wallet seeds offline. Coinkite has released updated firmware to fix the issue and has urged customers to take action to protect their funds.

US Immigration and Customs Enforcement (ICE) collected DNA from nearly 1 million people in 2025, including young children, and added their profiles to the FBI's Combined DNA Index System (CODIS). This has raised concerns about privacy and the potential for misuse of the data. The collection of DNA has been defended by the Department of Homeland Security as a border-security and identification measure, but critics argue that it is an invasion of privacy and a violation of human rights.