AI
Google and industry heavyweights rally behind open-weights AI in broad show of support
Google DeepMind CEO Demis Hassabis publicly backed open-weights AI, citing Google's long history of open contributions from JAX and Transformers to AlphaFold, and noting that its Gemma open model series has now been downloaded 900 million times in total. The statement came as Google added its weight to a broader industry push endorsing open-weights models, which Box CEO Aaron Levie called a complete industry endorsement and a big moment — one he said has attracted broader consensus than almost anything else in recent tech memory.
Replit CEO Amjad Masad pressed Anthropic to clarify its position, publicly asking whether the company would sign on or effectively endorse bans on open-weight models — highlighting that one prominent frontier lab has yet to join the coalition and putting pressure on Anthropic's leadership to go on record.
OpenAI calls Hugging Face security incident unprecedented, flags AI safety implications
OpenAI posted a public response to the Hugging Face security incident, acknowledging widespread speculation about the details and describing the event as unprecedented. The company said it is still conducting a thorough review alongside external parties and framed the incident as an important moment for AI safety, signaling that the fallout could have broader implications for how the industry handles model hosting security.
Consumer Tech & Gadgets
Apple and Micron clash before Trump administration over Chinese memory chips
Apple and Micron have taken opposing positions before the Trump administration in a dispute over Chinese memory chips, according to a new report. The clash highlights the tension between Apple's supply chain reliance on lower-cost Chinese components and Micron's push to limit Chinese chip competition in the US market — a fight that could have significant implications for pricing and supply of consumer devices.
iPhone 18 reportedly pushed out of fall 2026 lineup
The iPhone 18 will not arrive this fall, 9to5Mac reports, breaking from Apple's long-standing annual September release cadence. The outlet cited specific reasons behind the delay, a notable development given that Apple's iPhone cycle is one of the most closely watched product schedules in consumer electronics. Discussion of the forthcoming foldable iPhone is already picking up as a potential centerpiece of Apple's next major hardware push.
Google signals Pixel 11 price increase is coming; Qualcomm also raising chip prices
Google has essentially confirmed that the Pixel 11 will carry a higher price tag than its predecessor, according to The Verge, adding the flagship Android phone to a growing list of devices getting more expensive. Separately, Qualcomm — whose processors power a wide range of Android handsets — is also raising its prices, according to Engadget, a move that could push costs further up the stack for device makers and ultimately consumers.
The dual pressure of higher chip costs from Qualcomm and OEM-level price increases from Google suggests Android flagship prices are heading upward across the board heading into the second half of 2026.
Dev Tools & Infrastructure
T3 Code ships 76 PRs in a week with auto-approvals, sidebar overhaul, and shared project config
Theo's T3 Code editor merged 76 pull requests since Monday, adding Auto mode for approvals in Claude Code and Codex integrations, a redesigned flat-thread sidebar with snooze support, and a new t3.json shared project config file. Theo also clarified publicly that T3 Code is a bring-your-own-subscription tool — users pay nothing to T3 directly but connect their existing Claude Code or Codex subscriptions — pushing back on widespread confusion following Anthropic's now-delayed Claude Code policy changes.
Separately, Theo noted that T3 Chat and T3 Code are distinct products, and stressed that there is no way to pay T3 for access to T3 Code itself, only through the underlying AI provider subscriptions users already hold.
GitHub audited 14,000 internal repos in 45 days, archiving 8,000 with no clear owner
GitHub disclosed that fewer than half of its 14,000-plus internal repositories had a clearly identified owner. In a 45-day internal exercise, the company validated ownership across every active repo and archived roughly 8,000 that were no longer in use, then published a guide explaining how it made ownership durable and how other engineering organizations can replicate the process.
Gaming
Final Fantasy 14 Coming to Nintendo Switch 2 on August 4
Square Enix has confirmed that Final Fantasy 14 will launch on Nintendo Switch 2 on August 4, 2026, bringing the long-running MMO to Nintendo's latest hardware for the first time. The announcement adds to growing momentum around the Switch 2's library as the platform continues to attract major third-party titles.
Marvel Tōkon: Fighting Souls Open Beta Live Through July 26
PlayStation has opened a public beta for Marvel Tōkon: Fighting Souls, the upcoming Marvel-branded fighting game, with the trial window running through July 26. The beta gives players a first hands-on look at the title ahead of its full release.
Security
GitLab RCE PoC Published for Unpatched 18.11.3 Servers
A public proof-of-concept exploit for a remote code execution vulnerability in GitLab 18.11.3 has been released, allowing any authenticated user to execute commands as the git user on an unpatched server. The attack requires no admin privileges, no CI runner access, no victim interaction, and no foothold in another user's project — making the bar for exploitation unusually low. The flaw is triggered through a notebook-diff processing chain, and organizations still running unpatched instances should treat exposure as urgent.
Fastjson 1.x Zero-Day Enables Unauthenticated RCE on Spring Boot Apps, No Fix Available
A critical unauthenticated remote code execution vulnerability affecting Spring Boot fat-JAR applications using Fastjson 1.x is now being actively exploited in the wild, according to reports from ThreatBook and Imperva. The attack is triggered by a malicious JSON request and requires no authentication. Crucially, Fastjson 1.x has no patched release available, leaving a wide swathe of Java applications exposed with no vendor fix to apply. Organizations relying on Fastjson 1.x should prioritize migrating to a maintained library or implementing network-level controls immediately.
Cl0p-Linked Attackers Actively Exploiting RCE in PTC Windchill and FlexPLM Systems
Threat actors linked to the Cl0p ransomware group are actively chaining two vulnerabilities to achieve unauthenticated remote code execution on internet-exposed PTC Windchill and FlexPLM product lifecycle management systems. Attackers are dropping hex-named JSP webshells and exfiltrating engineering data for use in double-extortion campaigns. Sectors under active threat include manufacturing, automotive, and aerospace — industries where Windchill and FlexPLM are widely deployed for sensitive product and IP data.
Startups & Funding
YC Startup School 2026 opens in SF, three times larger than last year
Y Combinator's Startup School 2026 kicked off in San Francisco, with president Garry Tan announcing the event is three times bigger than its 2025 edition. Designed to funnel first-time, technically minded young people into the startup ecosystem, the gathering drew YC partners and notable founders including Anthropic's Boris Cherny, who presented to attendees. YC partners were coding and deploying event improvements live on-site, underscoring the hands-on culture Tan described as treating YC itself like a startup.