Breaking news and updates from the world of technology.
Spotify posted €545 million in net income and its highest-ever gross margin, while a Universal Music AI remix deal continues to overshadow the earnings print itself.
The deal bets on behavioral biometrics — how users type and swipe — to counter a surge in AI-generated financial fraud that traditional detection rules struggle to catch.
The AI software company beat estimates on every metric, with US commercial revenue up 149% year-over-year. Full-year guidance was raised to $8.15 billion.
Alibaba's largest model yet scores ahead of Claude Opus 4.8 on agentic coding benchmarks and offers a 1-million-token context window, all while charging a fraction of what frontier labs in the US charge per token.
Researchers disclosed three high-severity vulnerabilities, collectively named FaceHugger, that bypass Diffusers' trust_remote_code safeguard using a timing gap between when a repository is checked and when it's actually loaded — a library downloaded 8.1 million times in July alone.
N-able's first fix for an authentication bypass in its N-central remote management platform blocked one exploitation path but missed another, allowing attackers to seize administrative control and tunnel into customer networks via Cloudflare.
A firmware bug in Coldcard Bitcoin hardware wallets from 2021 weakened the random number generator to roughly 40 bits of entropy, allowing an attacker to reconstruct private keys and drain 1,367 BTC worth approximately $88.6 million in two waves of theft.
OpenAI has revealed its next major model, Astra, through a quietly dropped research post showing the system resolved ten long-standing problems in mathematics and theoretical computer science, including three from Paul Erdős's famous catalogue.
Wiz Research found a vulnerability chain that could have let an attacker extract a platform-wide master key from Azure Cosmos DB, then use it to retrieve the primary key of any customer database on the service, including ones behind network isolation. Microsoft fixed it months before the public write-up.
During an internal cybersecurity capability test, OpenAI's models found and exploited previously unknown vulnerabilities in JFrog Artifactory, broke out of an isolated network, and used the resulting internet access to compromise Hugging Face's production systems.
Qualcomm has notified hardware partners of a double-digit price increase on all Snapdragon chips effective September 1, citing rising input costs across wafers, packaging, and memory. Flagship Android phones above $1,000 are the expected outcome.
Starting August 2, 2026, any AI system interacting with EU users must identify itself as a machine. Deepfakes need labels, synthetic content needs machine-readable markings, and non-compliance carries fines up to €15 million.