Runway introduced Solaris, which it calls an interface world model, letting users build interactive apps, websites and digital scenes by directly clicking and dragging on-screen elements instead of writing code. The system pairs a language model that determines how an interface should evolve with a rendering engine that generates each frame live, treating clicks and drags as signals to produce new visuals in real time. Runway demonstrated use cases such as virtually trying on clothes by dragging garments onto a photo of yourself, plus text-prompt edits like recoloring or repositioning objects.
OpenAI's internal safety testing found that its new Astra model could carry out sophisticated cyberattacks with little human guidance, leading the company to classify it as a 'critical' risk. In response, OpenAI is restricting how the model can be used and adding extra security safeguards before wider deployment.
Apple has begun updating Apple Maps to show 'Lake America' instead of 'Lake Ontario' for users in the United States, following a directive from President Trump amid trade tensions with Canada. Canadian users still see 'Lake Ontario,' while users elsewhere see both names. The rollout is gradual, and U.S. Interior Secretary Doug Burgum said Trump personally contacted Apple about the change.
Security researchers have observed active exploitation of CVE-2026-0768, a critical flaw in Langflow, the low-code platform used for building AI applications. This marks the latest in a series of attacks targeting the platform, which has drawn increasing attention from threat actors this year.
A developer designed a credit-card-sized PCB business card featuring an NFC chip that opens his website when tapped and a red LED that lights up on a printed Charizard's tail, powered entirely by the phone's own NFC radio field rather than any onboard battery. He had to write a custom Core NFC app for iPhone because standard NFC apps couldn't write to the blank NTAG I2C Plus chip he used, so his app sends the chip's native write commands directly.
Dyson has launched an electric toothbrush combining brushing with an integrated water-jet cleaning system, marketed under Brush, Auto-jet, Deep clean, and Variable modes. The company cites clinical and lab-based testing, including a six-week 204-participant study, to support claims of improved plaque removal and cleaning in hard-to-reach areas compared with manual toothbrushes. The device connects to the MyDyson app for tracking and settings, expanding Dyson's product lineup beyond appliances into personal care.
A commentator pushes back against a wave of criticism aimed at Mozilla's Firefox browser for maintaining a presence on X, noting that critics who switched to alternatives like Vivaldi remain active on the same or similar platforms. The piece frames this backlash as misguided given Firefox's shrinking market share and its role as one of the few browsers not built on Google's Chromium engine.
OpenAI announced that its forthcoming Astra AI model is the first to cross the company's 'Critical' cybersecurity capability threshold, meaning it can discover unknown vulnerabilities and exploit them autonomously without human step-by-step direction. The company says Astra will still launch soon, but access to its most sensitive cybersecurity abilities will be restricted, with further safety details to come in a system card at release.
The company behind the Astra model says new testing shows it has crossed a 'Critical' cybersecurity capability threshold under its Preparedness Framework, meaning it could independently discover unknown vulnerabilities and craft exploits against well-defended systems without step-by-step human guidance. This is the first model the company has classified at that severity level, prompting delays to strengthen safeguards before release.
METR, a nonprofit that evaluates risks in frontier AI models, revealed it suffered two cybersecurity incidents this year. In March, attackers stole an API key used for public-model inference and used it for weeks to run up a large number of credits, while in May attackers unsuccessfully probed an exposed endpoint attempting to reach internal data.
A user inspecting disk usage discovered that OpenAI's Codex desktop app, now rebranded as part of ChatGPT, stores a 1.7GB cache folder containing full Python and Node.js runtimes alongside native binaries for Poppler, git, and the LibreOffice office suite. Accompanying 'skills' files instruct Codex on how to locate and invoke these bundled tools when handling document-related tasks.
GoPro announced a definitive merger with private photonics firm Starman Optical, aiming to expand beyond action cameras into AI data center infrastructure and defense-related optics. Shareholders will receive $285 million in cash, or $1.14 per share, while the stock stays on the Nasdaq and existing consumer products continue. Shares jumped 40% on the news, with major stakeholders including Markiplier and BlackRock standing to benefit.
GoKawiil