iCreatAI News
Back to main site
Skip to content
Only First party
  1. Cursor Blog64

    An update on our recent security incident

    Cursor detailed a security incident that began when an attacker obtained an access key Cursor had issued to Fireworks, which Fireworks exposed, and used it to copy limited coding agent traces from a read-only storage bucket, with under 0.01% of customers having API credentials exposed. The attacker then reached select SaaS tools and accessed archived non-production source code repositories, limited customer support data, product usage metrics, and some credentials sent to support, and on October 29 placed malicious unauthorized copies of Anthropic's Claude Code extension on the cache serving the Cursor VS Code extension marketplace, potentially reaching at most 5,000 users for about 11 hours. Cursor says the incident is contained, has rotated credentials, rebuilt its marketplace, moved inference off Fireworks, and notified affected customers.

    Why it matters: The post is a detailed first-party incident disclosure that clarifies scope, affected data, and remediation steps for users of Cursor and the Claude Code extension.

  2. Google Research88

    Advancing science & engineering with Antigravity’s /teamwork

    Google describes how multi-agent workflows in Antigravity's /teamwork, built on Gemini 4 models, produced results on open problems including a full proof of the 2013 Courtade–Kumar conjecture formalized in Lean 4, a machine-checked formalization of the Weil conjectures spanning about 1.8 million lines of Lean, and 95% top-1 accuracy on molecular structure determination from NMR data. The post also reports engineering gains such as a memory-safe Rust rewrite of the Zircon microkernel adding about 800,000 lines, a libgav1 Rust port that became 20-30% faster than the original C++, and fleet-wide memory savings surpassing initial estimates of 1 PiB. Google says the tools are available to external researchers and developers in Antigravity today, with 10,000 academic researchers offered six months of free access to its highest usage tier.

    Why it matters: It is a detailed primary account of agentic AI applied to research mathematics, formal verification, chemistry and production infrastructure, with concrete benchmarks and named results.

  3. Cloudflare Blog66

    Adapting to AI penetration testing orchestrators: The Modern Security Model

    Cloudflare reports that since the original ARTEX agentic pentesting framework was taken down on October 8, over 12,000 repositories and 50+ framework families have emerged, with daily requests for AI pentesting tools up 30x since October 1 and ARTEX and its forks making up over 60% of known orchestrators as of November 12. Cloudforce One observed incidents where stolen static CI/CD tokens were chained with these frameworks, including ARTEX creating artex-* Worker scripts and generating over 69 requests per minute and 400 database dump requests in an hour. The post recommends a six-pillar "Modern Security Model" covering WAF and traffic control, anomaly detection, Bot Defense, Identity-Gated Access and micro-segmentation, schema validation and mTLS, and threat intelligence.

    Why it matters: Offers a data-backed view of how quickly autonomous LLM pentesting frameworks are proliferating and a concrete defensive framework for security teams.

  4. Cloudflare Blog71

    Kitesurf is now open source

    Cloudflare has open-sourced Kitesurf, its stateless browser for AI agents that runs entirely on Workers, under the Apache 2.0 license on GitHub. The repository includes the engine, PageScript, PageRenderer, and CLI, built on Rust-to-WebAssembly projects like Blitz, Stylo, Boa, and Linebender libraries, and supports the Chrome DevTools Protocol for clients such as Puppeteer. Developers can run it locally or deploy their own instance to Cloudflare Workers, which requires a Workers Paid plan because it uses Dynamic Workers.

    Why it matters: Useful for developers who want to self-host a lightweight agent-oriented browser engine and inspect or contribute to its open-source components.

  5. Claude Blog62

    Building always-on agents

    This post explains that always-on agents are stateful and proactive, running on the same core loop as other agents but surrounded by architecture built from five primitives: an event inbox, timers, memory, permissions, and an outbox. It describes how each primitive works, including inbox best practices, follow-up versus scheduled timers, memory types such as user instructions and task progress, credential proxying and deferred tool calls, and outbox delivery pacing. It concludes with how the primitives form a repeating cycle in which each brief run is triggered by an event and can set timers that wake the agent again later.

    Why it matters: Offers a concrete architectural blueprint for teams building proactive, stateful agents, with practical guidance on event handling, memory, permissions, and message pacing.

  6. Sierra Blog80

    Releasing Personal Agent Protocol 1.0

    Poppy (Personal Agent Protocol) v1.0 is now available, with Shopify enabling it for every merchant on its platform, Mercury, Synchrony and Turkish Airlines going live as design partners, and Muse, Meta's AI agent, checking for Poppy first on every site it visits. The protocol, built largely on existing standards like MCP, OpenAPI and UCP with OAuth authentication, defines how personal agents connect with companies, and now has more than 100 design partners after 60 new companies joined. Shopify co-authored Poppy's commerce extension linking it to UCP, and an implementation kit with a validator is available for any company to adopt the protocol.

    Why it matters: Announces a new agent-interoperability standard with concrete adoption details from Shopify, Meta and others, useful for tracking how personal agents connect to businesses.

  7. OpenAI News67

    Introducing ChatGPT Wallet

    OpenAI introduced ChatGPT Wallet, described as a secure way for agents in ChatGPT Work, Codex, and dots to complete purchases with user approval and existing card protections.

    Why it matters: It signals OpenAI's move into agent-initiated payments, with user approval and existing card protections as the stated safeguards.

  1. Hugging Face Blog60

    llama.cpp v1.0.0 : A stronger foundation for the local AI ecosystem

    llama.cpp released libraries v1.0.0, marking a commitment to stable public APIs for downstream developers, with both llama.cpp and ggml now reflecting API and ABI incompatibilities through major-version bumps. The project states it supports more than 150 architecture variants and all mainstream speculative decoding methods, and distributes pre-release artifacts across Linux, macOS, Windows, Android and iOS plus channels including Docker, Homebrew, conda-forge, MacPorts, Winget and XCFramework. It also describes continued investment in CI infrastructure and self-hosted runners with hardware support from NVIDIA, AMD, Qualcomm, Arm, IBM and Intel.

    Why it matters: Signals a versioning milestone for a widely depended-on local inference library, useful for developers tracking API stability and platform support.

  2. Apple Newsroom74

    Apple HomeView available today

    Apple announced that HomeView, a device that recognizes up to six people by face and shows their personal content in Messages, FaceTime, Calendar, Reminders, and Find My, is available to order today in Australia, Canada, India, New Zealand, Singapore, the UK, and the U.S. for $299 (U.S.), with a wall-mounted version also at $299. It runs Siri AI, which offers onscreen awareness and, when paired with an Apple Intelligence-enabled iPhone or iPad, personal context and cross-app actions; Siri AI is available in beta in HomeView software version 27.2. HomeView is not for sale in the European Union because Siri AI is currently unavailable in iOS in the EU, and Schneider Home mounts start at $59.95 (U.S.).

    Why it matters: The announcement details pricing, availability, and Siri AI features for a new Apple device, useful for readers tracking Apple's home products and regional AI rollout.

  3. OpenRouter Announcements60

    Reranking in RAG: How to Fix Bad Retrieval with a Reranker

    This guide explains that vector search often ranks near-miss chunks first because embeddings compress whole chunks into single vectors, and shows how adding a cross-encoder reranker over the top 30 candidates raised precision@1 from 81% to 97% on a 274-question synthetic benchmark at roughly $0.10 per 1,000 queries. It compares 11 rerankers (voyageai/rerank-3-lite and rerank-3 were the most accurate dedicated models and cheapest, while LLM rerankers like openai/gpt-6-luna hit 99.6% but took about 4 seconds per call), covers candidate-count tuning, input_type settings, and silent failures such as cohere/rerank-v3.5's 4,096-token limit. It includes a Python example using the embeddings and rerank APIs and notes that real-world gains depend on your own documents and evaluation set.

    Why it matters: Offers a measured, benchmark-backed walkthrough of adding reranking to a RAG pipeline, including cost, latency and failure-mode comparisons useful for teams tuning retrieval.

  4. vLLM Blog72

    DeepSeek-V4.1-Flash on Vera Rubin NVL72: 58x Throughput vs. GB300 NVL72 at 387 tokens/s

    On a single NVIDIA Vera Rubin NVL72 rack, vLLM serves DeepSeek-V4.1-Flash at 1.7M tokens/s per GPU with 387 tokens/s per user, 58x GB300 NVL72, reaching 2.52M at peak throughput and 1,810 tokens/s for a single user. The gains come from kernels tuned for Rubin's split memory domains and FP4 tensor cores, specialized low-latency decode kernels, and a rack-wide KV cache and Engram tables shared over NVLink. The post details four optimization groups and reports a 96.5–97% prefix hit rate at high concurrency with workload-aware routing.

    Why it matters: It offers a detailed, measurement-backed look at how Rubin-specific memory and MMA features translate into serving throughput and latency for a frontier open model.

  5. Claude Blog78

    Using Claude Opus 5.5 as your daily driver for knowledge work

    Anthropic says Claude Opus 5.5 is now the default model on Pro, Max, Ultra, and Team plans and recommends it for daily knowledge work such as research, analysis, and producing memos, reports, spreadsheets, and decks, priced at $4/$20 per million input/output tokens. The post describes internal tests on research reports and a fictional merger analysis, plus guidance to start at Medium effort, drop "think hard" prompts, and attach charts rather than retyping them. It also walks through a demo project where Opus 5.5 tested four theories for slowing retail growth and proposed an alternative explanation involving new stores opening too close to existing ones.

    Why it matters: Useful for teams deciding which Claude model to default to and for concrete prompting changes when moving to Opus 5.5.

  6. vLLM Blog60

    Inkling 2 Small on vLLM: Day-0 Support

    vLLM announces day-0 support for Thinking Machines' Inkling 2 Small, a multimodal text-and-vision MoE model with 594B total and 17B active parameters, up to 1M tokens of context, and a native DSpark speculator. The post details the architecture (48 layers, 384 experts with top-8 routing, block attention residuals, gated attention, a 23-layer ViT image encoder, and mixed NVFP4/MXFP8 expert precision) and vLLM's optimizations, including kernel fusion with PDL, fused MoE activation quantization, sequence parallelism for prefill, and a Gluon relative attention kernel, reaching up to 630 TPS/user at TP4 on GB200. It also covers LoRA and RL (via SkyRL) support, a serve command, agentic-workload benchmarks, and accuracy checks on NIAH up to 1M tokens, MMMU-Pro and HLE.

    Why it matters: Useful for engineers evaluating or deploying a large multimodal MoE model, as it pairs concrete architecture and quantization details with vLLM-specific kernels, benchmark numbers and a ready serve command.

  7. Claude Blog78

    Introducing Claude Meetings

    Anthropic announced Claude Meetings in beta, letting Claude join video calls as a visible participant that answers questions aloud or in chat, builds docs and whiteboards with the team, and writes notes and action items. It is rolling out on Team and Enterprise plans with support for Google Meet, and each meeting gets a page in claude.ai with notes, transcript and artifacts. By default Claude stays out of calls with outside guests unless an admin allows it, and it saves a transcript, summary and screen descriptions rather than audio.

    Why it matters: Useful for teams evaluating AI meeting assistants, since it details capabilities, admin controls, privacy defaults and beta limitations.

  8. Hugging Face Blog66

    LLMON: An LLM-Native Markup Language, now in Granite 4.1 3B and 8B

    IBM researchers introduce LLMON (LLM Object Notation), an XML-like markup language that uses reserved special-token delimiters to explicitly mark instructions, data, requirements and execution bindings in an LLM's context, addressing the brittleness of JSON-style formats for causal models. They release two experimental preview models derived from Granite 4.1 base checkpoints (granite-4.1-3b-LLMON-preview and granite-4.1-8b-LLMON-preview) plus a GitHub toolkit, reporting that on the OPI benchmark LLMON models avoid 47% more indirect prompt injection attacks than the best frontier model tested while maintaining general capability on par with Granite 4.1 Instruct. The models ship with their own chat template and lossless JSON-to-LLMON converters, and the post notes the previews are for exploration, not production.

    Why it matters: Useful for teams weighing structured context formats against JSON and for anyone evaluating prompt-injection defenses in small open models.

  9. Google Blog AI82

    Google Search gets a major upgrade with Gemini 4 Hydrogen

    Google announced that Gemini 4 Hydrogen, described as the biggest model upgrade to Search yet, is now available globally in Google Search for all users. The company says it improves understanding of intent for nuanced multi-part questions and typos, strengthens query fan-out and linking to surface more helpful sites, and delivers more visual responses such as images, comparison tables and custom tools, with richer language understanding across supported AI Mode languages.

    Why it matters: Useful for readers tracking how Google is integrating its Gemini models into core Search features and what changes users can expect.

  10. AWS Machine Learning Blog71

    Run agents securely and efficiently with the next generation AgentCore runtime

    AWS announced updates to the Amazon Bedrock AgentCore runtime that keep each session in its own hardware-isolated Firecracker MicroVM while starting sessions up to 15x faster, scaling to 4x more compute (up to 8 vCPUs and 32 GB, with container images up to 10 GB), and running up to 68% more efficiently. The runtime now reclaims memory within minutes of release and scales idle agents to zero, and agents can dynamically mount and save work to a filesystem such as an Amazon S3 bucket with FUSE support so data stays inside the trust boundary. The next generation runtime is available today in AWS Regions across North America, South America, Europe, and Asia Pacific.

    Why it matters: Announces concrete performance, scaling, billing, and data-isolation changes to a managed agent runtime, with customer metrics and availability details useful to teams planning production agent deployments.

  11. Google DeepMind88

    Introducing Gemini 4 Hydrogen

    Google announced Gemini 4 Hydrogen, a fast, efficient model for everyday coding and agentic workflows, available across the Gemini API, AI Studio, Gemini for business, the Gemini app, Google Search, and paid Google AI Pro and Ultra subscribers in Google Antigravity. It is priced at $1.50 per million input tokens and $7.50 per million output tokens across its 1 million-token context window, and surpasses Argon on the Artificial Analysis Intelligence Index at its default high thinking level (51 vs. 50, reaching 54 at xhigh). Google also introduced Orchestrator in Google Antigravity, which switches between models like Carbon and Hydrogen within a session and reached near-Carbon task success rates on Terminal-Bench 4.0 while consuming 24% less quota and completing 19% faster.

    Why it matters: The post details a new model's benchmarks, pricing, and rollout across developer, enterprise, and consumer surfaces, useful for readers tracking Gemini releases.

  12. Replit Blog64

    Replit Agent can now buy for your business and help you reach customers

    Replit Agent now supports Agentic Commerce, powered by Stripe's Link and Visa, letting it find and prepare purchases for a business while the owner approves the final total before any charge. It also adds Agentic Ads with Google, which builds and launches campaigns across Search, YouTube, Display and Discover and can add conversion tracking. Agentic Commerce is available for Core and Pro users starting in the US for one-time purchases, while Agentic Ads is available for Pro users worldwide.

    Why it matters: Useful for readers tracking how coding agents are expanding into business operations like procurement and advertising.

  1. NVIDIA Newsroom93

    NVIDIA Announces CEO Transition

    NVIDIA's board announced that Jensen Huang has resigned as President, CEO and board member effective immediately, with EVP and CFO Colette Kress serving as Interim CEO while continuing as CFO until a permanent successor is named. The board appointed Harvey C. Jones, former CEO and Executive Chairman of Synopsys, as its first-ever Chair of the Board, and said it has full confidence in Kress and the leadership team. NVIDIA said it will report third-quarter fiscal 2027 financial results on Tuesday, November 17 at approximately 1:20 p.m. PT as previously scheduled.

    Why it matters: The announcement marks a leadership change at one of the world's most consequential technology companies, making it relevant to anyone tracking AI and semiconductor industry governance.