NerdNews

OpenAI and Microsoft have amended their agreement, allowing OpenAI to partner with other cloud providers like Amazon. Microsoft will still have a non-exclusive license to OpenAI's IP and models through 2032, but OpenAI can now serve its products to customers across any cloud provider.

OpenAI and Microsoft have renegotiated their deal, solving the legal issue over OpenAI's $50B deal with Amazon. The new agreement gives Microsoft a nonexclusive license to OpenAI IP and allows OpenAI to serve its products on any cloud provider, including AWS.

Ineffable Intelligence, founded by former DeepMind researcher David Silver, has raised $1.1 billion to develop an AI that learns without human data using reinforcement learning. The company aims to create a 'superlearner' that can discover knowledge and skills on its own, with the potential to revolutionize the field of artificial intelligence.

The Model Context Protocol (MCP) is a standardized way to expose tools and context to large language models (LLMs), allowing for loose coupling, versioning, and governance. The Java MCP SDK implements these concepts, enabling architects to align LLM adoption with existing enterprise architectural practices. MCP servers act as anti-corruption layers, exposing controlled capabilities and protecting legacy systems. The protocol redefines prompt engineering, treating context as a managed lifecycle. While MCP introduces additional complexity, it provides a control plane for LLM-aware systems, guaranteeing governance, safety, and long-term development.

Elon Musk and Sam Altman are set to face off in a high-stakes trial over the future of OpenAI. Musk accuses OpenAI of abandoning its founding mission to develop AI for humanity's benefit, instead focusing on profits. The trial begins with jury selection on April 27th, with Musk seeking the removal of Altman and damages of up to $150 billion.

OpenAI is rumored to be working on a phone that replaces traditional apps with AI agents, in collaboration with MediaTek, Qualcomm, and Luxshare. The phone would use a combination of small on-device models and cloud models to handle different tasks and requests.

Uber engineers migrated over 75,000 test classes from JUnit 4 to JUnit 5 using automated code transformation and orchestration tooling, driven by the need for a modern testing framework and reduced technical debt. They utilized OpenRewrite for deterministic transformations and an internal orchestration system called Shepherd for execution at scale.

Microsoft's Russinovich and Hanselman argue that AI coding tools are creating a structural crisis in the software engineering profession by imposing an 'AI drag' on early-in-career developers, leading to a collapse in the talent pipeline. They propose a preceptor program to pair junior developers with experienced mentors to develop judgment and skills.

GitLab has released versions 18.10 and 18.11 of its DevSecOps platform, introducing a flat-rate pricing model for automated code reviews, free-tier AI access, and spending caps to control costs. The updates aim to improve code review efficiency and reduce costs for development teams.

Canonical plans to add AI features to Ubuntu Linux throughout 2026, enhancing existing OS functionality and introducing 'AI native' features, while prioritizing model transparency and local inference.

Skye, an iPhone app, is developing an 'agentic homescreen' using iOS widgets, offering personalized insights and AI-powered features. The app has raised $3.58 million in pre-seed funding and has a waitlist of 'tens of thousands' of users ahead of its launch.

A popular open-source package, element-data, with over 1 million monthly downloads, was compromised by a threat actor who exploited a vulnerability in the developers' account workflow. The malicious package, version 0.23.3, stole sensitive user data, including credentials and API tokens. Users who installed this version should assume compromise and take immediate action to rotate credentials and check for unauthorized usage.

The Port of Tyne has partnered with the North East Automotive Alliance and Oxa to deliver the Port-Connected and Automated Logistics project, which aims to improve safety, efficiency, and sustainability in port operations through the use of autonomous container transport and secure mesh communication networks.

OpenAI is reportedly developing a smartphone that uses an AI 'agent' to perform tasks on behalf of the user. The phone, which may run on Android, is expected to be released in 2028. This development is seen as a significant step towards creating a more integrated and user-friendly AI experience.

A PyPI package with 1.1M monthly downloads was hacked to push an infostealer, compromising developer data and cryptocurrency wallets. The malicious release, version 0.23.3, was uploaded to PyPI and Docker image due to a flaw in the project's workflow. Users who downloaded the malicious variant are advised to rotate all secrets and restore their environments from a known safe point.

The UK Biobank has suffered a data breach, with the personal health data of over 500,000 volunteers being listed for sale on e-commerce platforms in China. The breach is believed to have occurred due to researchers at three academic institutions misusing their access to the data. The data did not include personally identifiable information, but the incident has raised concerns about the security of sensitive medical records.

Checkmarx, a software security testing company, has been targeted in an ongoing supply-chain attack. The attack, which began on March 23, has compromised several open-source security tools, including Trivy and KICS. The attackers have stolen sensitive data, including source code, API keys, and employee details. The attack has also affected other companies, including Bitwarden, a popular password manager.

Home security company ADT has confirmed a cyber intrusion after an extortion attempt by the ShinyHunters crew, which claims to have stolen over 10 million records. ADT says the intruder made off with a 'limited set' of data, including names, phone numbers, and addresses.

The European Union is taking steps to reduce its reliance on US technology, citing concerns over data privacy and security. This shift is driven by the CLOUD Act, which forces US-based tech companies to comply with law enforcement requests for data, even if stored abroad. As a result, European governments are looking to alternatives, such as sovereign cloud providers and open-source software, to reduce their dependence on US tech giants.

This week's Java roundup features updates on OpenJDK JEPs, JDK 27 release schedule, Oracle Critical Patch Updates, and releases from BellSoft, Azul, Open Liberty, Testcontainers, and IntelliJ IDEA.