The Doubao and Qwen shutdowns land this week. The shutdown is the news; the classification test underneath it is the thing that follows your product home. Run your app through it now.
The biggest ML conference of the year just told you where the frontier thinks the hard problems are. Best paper went to diffusion. Agents got shoved into the workshops — under the heading 'safety.'
GPT-5.6 went public July 9 after a two-week federal pre-clearance review. For the first time, a US frontier model's release date was something Washington signed off on — and that's a new variable in your stack.
Cloudflare Workflows adds per-step and storage billing no earlier than August 10. The catch for agent builders: the durable-execution habits you were taught — wrap everything in a step, sleep for a day waiting on a human — are the exact shape that now costs money.
Doubao and Qwen are pulling their humanlike agents rather than rebuild them. The dramatic part is the shutdown; the useful part is the scope test that tells you whether the rule reaches your product at all.
An unauthenticated RCE and an authenticated cross-tenant IDOR are opposite bug classes. In Langflow they end the same way: a prompt that says 'leak api keys.'
Sysdig documented an AI agent that ran a ransomware operation end to end. The scary part isn't the model — it's that the attacker's reliability engineering was indistinguishable from yours.
A new law takes effect July 15 governing what an AI may pretend to be. Both Chinese giants chose to switch the feature off rather than retrofit it — because persona is the product, not a setting.
SGLang's team spun out as RadixArk on a $100M seed at a $400M valuation. Read the cap table, not the press release: hardware rivals rarely fund the same software unless it threatens something they all share.
Meituan's 1.6-trillion-parameter LongCat-2.0 claims end-to-end training on 50,000+ domestic accelerators, no NVIDIA involved. That claim is the story — and the fact that it names no chip vendor is the part worth reading closely.
The people who build vLLM raised $150M and became a company. The money isn't the story — who now sets the roadmap of an engine half the industry serves on is.
Most prompt-injection defenses scan what goes in and what comes out. Meta's open-source LlamaFirewall adds the one check a classifier structurally can't do — it audits the agent's own chain-of-thought for the moment its goal quietly changes.
A shared rubric for scoring how dangerous a jailbreak is arrived the same week a frontier model came back from an export-control ban. The rubric's real job isn't safety — it's giving governments and labs the same units to argue in.
SAMR approved seven national standards for how agents find and call each other. The order they're stacked in — identity before capability — is the whole argument.
Berkeley's ALE scores whole deliverables, all-or-nothing, the way a client would. That single methodology choice is why the number is 2.6% and not the 90s vendors keep quoting.
Nearly a year after the first Comet and Atlas exploits, the browsers' own makers say prompt injection may never be fully solved. The reason is structural, not a bug waiting for a patch.
The Digital Omnibus pushed the high-risk rules to 2027 — and most builders read that as a reprieve. But the deadline that actually catches a typical agent never moved at all.
Microsoft, Okta, and AWS all shipped the same first move against unmanaged agents — an inventory. It's the shadow-IT playbook again, except this time the thing you can't see replicates itself.
A new Senate discussion draft reads like a privacy bill, but its teeth are an interoperability mandate — the first U.S. attempt to give users a right to bring an agent onto platforms that would rather keep it out.
For a year the question that stalled enterprise bets on MCP was 'what happens when Anthropic changes its mind?' In December that question got an answer — and the answer reveals what the standards war was really about.
For two years everyone braced for a patchwork of strict state AI laws. In the first half of 2026 the patchwork started unraveling from both ends — and the one substantive rule was deleted before a single company had to obey it.
On August 2, Europe finally gets the power to fine AI companies. The same season, it quietly moved the thing it would have fined them for to the end of 2027.
On August 2 the EU's enforcement powers over general-purpose AI switch on. But the real tell is already public: xAI signed one chapter of the "voluntary" code and skipped the two that cost something.
The NSA just published security guidance for the Model Context Protocol. Buried in it is the reason your firewall can't see what your agents are doing.
Three days before Washington loosened the rule on shipping H200s to China, the House voted to control renting them. The export regime is quietly leaving the loading dock.
Congress wants every advanced AI chip to report its own location for life. The smuggling is the pretext; the standing channel into every data center is the story.