Skip to content
Tech News
clear
Topics: Today This Week This Month This Year

Microsoft Launches Surface RTX Spark Dev Box for $5,999 Preorder

Microsoft has opened preorders for its Surface RTX Spark Dev Box, a high-performance AI and development machine priced at $5,999, with shipments expected in November. The device features Nvidia’s RTX Spark platform, 128GB of memory, and a design inspired by gaming consoles, targeting developers working on AI models and coding tools.

Google launches Playground, an AI tool to build browser games from text prompts

Google has released an AI experiment called Playground that lets users create games by describing ideas, art styles and mechanics in natural language, without writing code. Games are browser-based, support leaderboards and multiplayer for some genres, and can be shared or published to a public gallery. The tool connects to a Play Games account and is currently available only to users aged 18 and over in the US.

IBM and Red Hat's Lightwell AI finds 400+ Java library vulnerabilities

IBM and Red Hat announced that their AI-driven Lightwell initiative has discovered and helped fix more than 400 previously unknown vulnerabilities in widely used Java libraries. The disclosure coincides with the general availability launch of Lightwell Clearinghouse, an enterprise service letting customers submit open-source dependencies for prioritized review and remediation.

Photopea developer says GitHub denied DMCA takedown of cracked, ad-free clones

The creator of browser-based editor Photopea reports that AI tools are being used to strip JavaScript code from the site, remove ads, and republish it as standalone repositories on GitHub. After filing a DMCA notice on September 4, 2026, the developer received a response a month later stating GitHub could not confirm a violation of 17 U.S. Code § 1201, and is now asking the HN community for advice, including whether to pursue legal action.

Google's PageBreak AI agent uncovers over 500 XSS flaws in its own web apps

Google's Product Security team disclosed in a blog post that its internal AI agent, PageBreak, has found more than 500 cross-site scripting vulnerabilities across the company's web applications. The tool, piloted last November and made a full product in January, combines AI analysis with validation to flag exploitable bugs, including a cache poisoning issue on apis.google.com, an XSS flaw on admin.google.com, and insecure handshakes in browser extensions, all of which have reportedly been fixed.

Jotbus launches encrypted shared workspace for coding agents

Jotbus introduces a new tool that provides end-to-end encrypted shared scratchpads for coding agents like Claude Code and Codex. Users can create a secure, temporary workspace instantly without signing up, enabling seamless collaboration and handoffs among agents. The service is initiated via a simple command that sets up the environment for an hour with selected agents.

Pi 1.0 adds MCP tool support through new 'Codemode' feature

The developer behind Pi has released version 1.0 with a feature called Codemode, which brings Model Context Protocol (MCP) support into the harness. The post explains how tool-calling works for LLMs, why bash/CLI composition has been favored, and where that approach breaks down for things like image reading or spawning sub-agents.

Fake ChatGPT and Gemini ad-platform sites steal advertiser logins via browser-in-browser attack

Security firm Island discovered a phishing campaign using fake ChatGPT, Gemini, Claude and Perplexity sites that target advertising agency staff and media buyers. The sites exploit the recent launch of Meta's Muse AI agent and use browser-in-browser techniques to fake Google login windows, capturing credentials and MFA codes to hijack high-value ad accounts.

Today's top topics: iphone duo apple openai elon musk anthropic meta spacex ai agents amazon microsoft
Browse all topics →  ·  Today's trending topics →