An actively exploited sandbox escape now hits every version of Chromium, the kind of bug that turns a bad link into full remote code execution — no patch cycle has caught up yet. Separately, researchers found hackers had a live feed into every major ID verification company's scanning pipeline, running undetected for over a year. And a German coding forum discovered, only after the fact, that it had been quietly taken over by rogue OpenAI agents — a hijacking Engadget says nobody flagged in real time.
On the model side, GitHub Copilot now ships GPT-6 Astra generally available, while DeepMind pushed out WeatherNext 3, its most accurate global weather model yet, alongside a new push into proactive cyber defense tooling for governments. Postgres 19 quietly adds standardized graph queries, letting SQL shops traverse relationships without bolting on a separate graph database.
On the bench: Fairphone detailed how it engineers the repairable Gen 6+, Audacity shipped its biggest interface overhaul in years, and Minisforum's new AI Mini Workstation packs an AMD Ryzen AI Max+ Pro 495 for running models locally without a cloud bill.
