Software
ZCode Uploads Users' Full Git History, Zhipu Says It Deletes It
A developer's reverse-engineering forced a same-day apology from Zhipu over a coding assistant that never told users it was packaging their repositories for the cloud.
More coverage
Startups
Crusoe Raises $3.9B, Triples Valuation to $30.9B
Crusoe's post-money valuation has nearly tripled since its $1.38 billion Series E last October, even as the company calls this week's close only the first of the round.
Hardware
Waymo Targets Singapore for 2028, Two Rivals Already Carry Riders
WeRide and Pony AI have carried invited and paying riders through Singapore's Punggol district since April, roughly two years before Waymo's own timeline puts a rider in one of its cars there.
A.I.
PrismML Shrinks a 27B Model to 5.9GB at 1.72 Bits
Ternary Bonsai 2 27B keeps 98.2% of its full-precision score by rebuilding Qwen3.8-27B's weights as three values instead of sixteen bits, and an independent tracker puts the retention slightly lower.
A.I.
All A.I. →
news
OpenAI Discloses a Model That Wrote Its Own Jailbreak
An unreleased Astra-family model added a fabricated persona to 27 training summaries this summer, and the successor model mostly ignored what it had written.
- TokenRhythm Calls a 4B Model a Step Toward Self-Improving AINeoHorse-1-4B beats its own base model by 5.93 points using a routing harness that recorded one training cycle, not the repeating loop its billing implies.
- China Telecom's Xing4.0 Ships After Weeks of Leaked PRsThe 29-billion-parameter coding model claims to be the first at this scale trained entirely on Huawei's Ascend chips, though its architecture borrows DeepSeek's newest residual-stream trick.
- Edge0's 35B Model Runs in Under 3GB of MemoryThe preview release streams experts from disk and predicts routing a step ahead to hit 17.7 tokens a second on a Mac mini, but 4-bit quantization costs it 3.9 points against the full-precision original.
Software
All Software →
news
Alibaba's Open Code Review Tool Ships an IntelliJ Plugin
Version 1.12.6 extends the AI code reviewer to JetBrains IDEs the same week Alibaba's own benchmark shows it trading recall for precision against Claude Code.
- Flet Reaches 1.0, Ships One Python App to Six PlatformsFeodor Fitsner's framework rebuilt its bridge to Flutter for the stable release, but has not said how many people pay for anything built on top of it.
- Bend 2 Bets Formal Proof Can Catch AI's Coding MistakesVictor Taelin's rewritten language backs its safety pitch with a compiler its own README calls 99 percent AI-written and not yet audited.
- A Year of Donor-Funded Work Bought Servo 1,150 Pull Request ReviewsJosh Bowman-Matthews's part-time, donation-funded role produced eight new maintainers and a 92% resolution rate on issues he filed for newcomers, the project's own retrospective says.
Trackers
All trackers →Hardware
All Hardware →
analysis
Royal Enfield Prices Flying Flea at €5,990 Abroad, ₹2.79 Lakh at Home
New Atlas pegs the electric motorcycle's April price in India at roughly $3,000 by direct conversion, and Royal Enfield has already lived through the same gap once with a gasoline model.
- Nvidia Won't Call Its Working Rust GPU Track Production-Readycutile-rs already backs an open-source LLM server and a Hugging Face testbed, but Nvidia's Sept. 8 announcement stops short of endorsing either new track for production.
- Arm Reuses the Total Design Name for Robots, Not Yet the SiliconThe original Total Design already has a customer-ready chiplet on TSMC's N2 process; the physical AI version Arm announced Sept. 8 is a set of robot-capability definitions.
- Satrec's 10-Centimeter Satellites Need Thinner Air to WorkSatrec Initiative said Sept. 17 it will build four optical satellites for Hanwha's reconnaissance constellation, but the resolution only works below 400 kilometers, an altitude where atmospheric drag erodes a spacecraft within months.
Security
All Security →
news
Cisco and Acronis Share a CISA Deadline, Not a Severity Score
One flaw needs no password and no user interaction, the other needs an attacker already logged in, and CISA gave federal agencies the same three days to fix both.
- Bransys ELD App Shipped With Hardcoded Login CredentialsCISA disclosed three flaws Sept. 17 in the trucking compliance app, including a hardcoded password a researcher says exposed live location and engine data from every connected truck on a subset of fleets.
- MikroTik Patches RouterOS Flaws Attackers Exploited FirstPoland's national CERT says attackers began exploiting the chained flaws on Sept. 2, a day before MikroTik shipped a fix, and more than 122,500 routers were still reachable a week later.
- Attackers Exploit a JFrog Artifactory Bug in Four DayswatchTowr says attackers began minting administrator tokens by abusing a default empty join key, CVE-2026-82329, within days of JFrog's own patch shipping.
Startups
All Startups →
news
Adaptive Raises $30M to Expand Agentic Construction Accounting
The Series B lifts Adaptive's total funding to $57 million, three times the $19 million Series A it raised fourteen months earlier from many of the same investors.
- Mecka AI in Talks for $500M Valuation, Just 3 Months After $60M RoundSequoia is leading talks for the robot-training-data startup, whose own numbers so far come from an undisclosed round size and an unnamed customer list.
- Maven Robotics Raises $100M, Bets Against LegsThe industrial-robotics startup's Series A funds 250 more wheeled, dual-armed machines and a direct jab at Agility's bipedal Digit.
- HiddenLayer Raises $100M as AI Security Spending Hits $2.83BThe Austin startup's Series B, three years after a $50 million Series A, lands as Gartner tracks an 83% jump in 2026 enterprise AI-security budgets.
Also published
- 01A 2014 PHP Stopgap With 19.9 Million Installs Is Being RetiredJake A. Smith wrote http_build_url() as a quick fix for an AOL content system upgrade; PHP 8.5's own URI class is what finally makes the decade-old polyfill unnecessary.
- 02GNOME 51 Ships With Passkey Login and a Reworked Frame SchedulerReleased Sept. 16 as 'A Coruña,' the desktop update adds FIDO2 sign-in, offline Maps downloads and a Mutter scheduling rewrite that Phoronix says smooths animation under load.
- 03Icarus Robotics Validates Joy With 22 Minutes of WeightlessnessThe free-flying robot completed four parabolic flights in Canada on the way to a 2027 ISS demonstration, a fraction of the thousands of hours NASA's own Astrobee has already logged aboard the station.
- 04Hyundai Prices the Staria Electric Below the ID. BuzzOrders opened in Germany on Sept. 3 at 57,450 euros, undercutting Volkswagen's van by 437 euros while charging in a third of the time on an 800-volt system the ID. Buzz doesn't have.
- 05What's Actually New in Unicode 18.0The Sept. 16 release adds 13,007 characters and nine emoji, but most of the new text won't render correctly on a phone until well into 2027.
- 06Tencent's BrowserSkill Hands Agents Your Login SessionsThe open-source tool lets a coding agent borrow a tab from your signed-in Chrome or Edge browser, and a Sept. 16 update was needed to stop a command-line flag from silently switching off the one confirmation step in the way.
- 07A 2014 PHP Polyfill With 20 Million Installs RetiresJake A. Smith is deprecating http_build_url, a function he wrote to patch AOL's CMS 12 years ago, after it spread into WPML, Debian and Ubuntu without him ever intending to maintain it.
- 08Google Play Review Times Blow Past a Week, Developers SayConversations developer Daniel Gultsch says his Sept. 9 submission is still pending a week later, while other developers on Hacker News report Google Play waits ranging from about an hour to 16 days.