Meta's Open AI & Cloudflare FedRAMP High & Progress LoadMaster CVE-2026-8037 Exploited

AI & ML

• Meta released Muse Glimmer, a lightweight open-source AI model that runs on personal computers, and Muse Spark 1.2, a more powerful model available to developers. CEO Mark Zuckerberg published a manifesto arguing that advanced AI must be "broadly distributed" to prevent concentration of power, contrasting Meta's open-source approach with rivals like OpenAI and Anthropic. Read more
• Archer Aviation announced ZEE, an AI foundation model purpose-built for aviation that unifies ADS-B, ATC communication, maps, charts, aircraft state, terrain, and weather data. ZEE achieved a technical breakthrough predicting real-time airport surface aircraft trajectories minutes into the future, critical for aviation safety. Archer also announced it will acquire Boeing's Wisk Aero, Insitu, and SkyGrid to create an end-to-end physical AI platform for aerospace and defense. Read more
• ProCap Financial's AI agent Silvia outperformed every major frontier and open-source model on tax-related topics and questions, and now manages over $50 billion in assets across 20,000+ users. The company published its benchmark and evaluation framework openly for reproducibility. Read more

AI Coding Tools

• JetBrains integrated Cursor as an AI agent in JetBrains IDEs via the Agent Client Protocol (ACP), giving Cursor direct access to your project context. The integration lets you select Cursor from the agent selector to power AI-assisted programming workflows. Read more
• GitHub released the Copilot SDK for Java, enabling Enterprise Java developers to drive GitHub Copilot from idiomatic Java code using annotations, virtual threads, and Maven configuration. Developers can register annotated tools with ToolDefinition.fromObject(this) and define inline lambda tools with ToolDefinition.from(...). Read more
• JetBrains open-sourced Mellum2, a 12B-parameter model trained from scratch and designed for routing, question-answering, sub-agents, and private AI use in software engineering systems. It's optimized for practical deployment and tested on engineering-specific workflows. Read more

Frameworks & Libraries

• TanStack Form v2 now requires React 18+ (dropping React 17 support) and Vue 3.6+ for its Vue adapter. Form Composition relies on Vue 3.6 behavior, and v2 publishes ESM-only exports requiring Node.js 18+. The core API remains similar—useForm, render fields from the form API, submit with form.handleSubmit(). Read more
• Next.js released an updated guide on optimizing prefetching with Cache Components and Partial Prefetching. Per-link prefetching now generates per-route App Shells instead of full routes, reducing server invocations. For routes with non-static data, prefetch is generated per link; static routes serve from cache. Read more

Languages & Runtimes

• Python 3.16 introduces trigonometric functions in half-turn units: math.cospi(), math.sinpi(), math.tanpi(), math.acospi(), math.asinpi(), math.atanpi(), and math.atan2pi(), recommended by IEEE 754-2019 and standardized in C23. Also adds support for ARM64 and RISC-V BCJ filters in lzma (requires lzma 5.4.0+ for ARM64 and 5.6.0+ for RISC-V). Read more
• Microsoft Azure launched the Azure SQL Database free tier paired with the Azure SQL Developer Container for local offline development. Developers can build locally using natural language prompts to auto-generate ORM schemas (Prisma, EF Core, Drizzle) and migrations, then ship to production for $0 using the free tier. Read more

Browser & Web Platform

• Baseline July 2026 adds Array.fromAsync() for converting async iterables to arrays, Intl.Locale for standardized locale parsing and manipulation, and rect() CSS function support across all core browser engines. These features are now safe to use without polyfills. Lighthouse gained a Baseline Features audit to track modern web capabilities in your site. Read more

DevOps & Cloud

• Cloudflare achieved FedRAMP High certification and GovRAMP Moderate authorization, enabling Federal, State, Local government, defense, education, and regulated organizations to use Cloudflare's integrated security, performance, AI, and developer services. Cloudflare also announced intent to pursue Impact Level 4 (IL4) authorization. Read more
• AWS completed its 2026 CyberVadis assessment with the highest score (Mature) in all assessed areas, and expanded PCI DSS and 3DS certification scope to include Amazon Bedrock AgentCore and one additional region. AWS also renewed Police-Assured Secure Facilities (PASF) accreditation for its Europe (London) region for UK law enforcement workloads. Read more
• Cloudflare announced Agents Week, unveiling Cloudflare Wallets for programmable agent transactions, programmable CI/CD pipelines written in code (not config), and unifying Workers AI and AI Gateway into a single AI control plane with one binding, wallet, and dashboard. Read more
• Novo Nordisk selected AWS as its strategic cloud and AI partner to accelerate drug discovery using Amazon Bedrock AgentCore for building AI agents that reason across enterprise data and execute multi-step workflows across research, clinical development, manufacturing, and IT operations. Read more

Databases & Data

• ClickHouse added support for exponential histograms in metrics, normalizing scale across series before aggregation to preserve bucket alignment. The query builder now supports quantile and sum aggregations over exponential histogram metrics. Read more
• MongoDB published a technical guide on Context Engineering for Agentic Applications using AWS Bedrock AgentCore and MongoDB Atlas. The architecture routes MongoDB operations through a dedicated MCP server behind AgentCore Gateway, creating governed access and auditable data paths while managing context boundaries and memory patterns for multi-agent systems. Read more

Security

• Progress LoadMaster vulnerability CVE-2026-8037, a critical command injection flaw enabling unauthenticated arbitrary command execution via unsanitized API inputs, is now actively exploited in attacks. CISA added it to the catalog of exploited vulnerabilities and ordered U.S. Federal agencies to patch within three days. Progress released patches in June for LoadMaster GA v7.2.63.1 and older, affecting over 100,000 deployments worldwide. Read more
• SonicWall SMA1000 vulnerabilities CVE-2026-15409 and CVE-2026-15410 are now exploited by ransomware gangs, according to CISA. SonicWall released patches in mid-July and warned of zero-day exploitation; CISA has flagged both as exploited in recent KEV Catalog updates. Read more
• CVE-2026-72901: Dokploy (PaaS platform) prior to 0.29.13 allows authenticated low-privilege members to execute arbitrary commands on the control plane via unquoted volumeName field interpolation in volumeBackup operations, exploited through child_process.exec with Docker socket access (CVSS 9.9). Read more
• CVE-2026-72575: daptin through v0.12.34 contains an improper authorization vulnerability allowing unauthenticated remote attackers to read, create, update, and delete usergroup records (CVSS 9.1). Read more
• CVE-2026-48160: react-tracked npm package contained malicious commits between 2026-05-18 and 2026-05-19 that executed attacker-controlled code during npm install on developer machines, disabled TLS verification, and fetched JavaScript payloads from attacker-controlled endpoints (CVSS 9.3). Read more

Open Source

• career-ops is an open-source multi-agent job search system (built with Claude) that automates job application workflows. It evaluated 740+ job listings, generated 100+ personalized CVs, and landed the creator their dream role. The tool turns any AI coding CLI into a full job search command center with tracking, tailoring, and candidate assessment. Read more
• Open Generative AI is a free, open-source alternative to commercial AI video platforms offering 400+ state-of-the-art models across 14 studios (image, video, audio, clipping, lip sync, workflow, agent, design agent, and more) with no content filters, closed ecosystem, or subscription fees. Read more
• hermes-agent released v0.20.0 (The Herald Release) with streaming TTS, barge-in, wake words, A2A v1.0, outbound webhooks, grounded citations, and desktop platform support—~3,650 commits, ~1,400 PRs, and 650+ contributors since v0.19.0. Read more
• OpenCode released v1.18.13 and v1.18.15 with bugfixes including GitHub pull request reviews now including PR numbers and URLs in context, and desktop app improvements for external link handling and session state management. Read more

Dev Tools & IDEs

• IntelliJ IDEA 2026.2.1 released with fixes for Markdown shell script execution order, Undo after Optimize imports, terminal tab dragging stability, Mercurial Resolve Conflicts exceptions, and Java code formatting respecting Smart tabs setting. Read more
• RustRover 2026.2 adds endpoint discovery and route-handler navigation for Axum-based projects, support for Ferrocene (a qualified Rust toolchain), and improvements to macros, imports, struct creation, module paths, benchmarks, .env files, and split mode. Read more
• Junie CLI (JetBrains AI coding assistant) opened its Early Access Program (EAP) offering pre-release features and a monthly free quota. The EAP is actively recruiting developers working with C/C++, PHP, Rust, and Java. Read more
• Qodana 2026.2 (JetBrains code quality platform) delivers clearer code coverage insights for pull requests, highlights uncovered new lines directly in the IDE, and automatically detects code quality, security, and compliance findings throughout the development workflow. Read more