The new x subscription changes what your cursor plan pays for. The included usage now goes to grok models only, and claude or gpt bill at api rates from the first request, even on ultra.
Grok-heavy users come out ahead. Anyone who mostly codes with claude should keep the current pro plan while it lasts, since cursor says existing users will only be moved later and with advance notice.
You can now launch apps you built in AI Studio straight from Google Play with just a Google account. They stay private to you.
Until now you had to publish publicly or plug your phone into a computer, so many people built web apps instead. It's US only and 18+ for now.
Google is making it easier to build and use personal Android apps created with AI, without having to make them available to everyone on the Play Store.
spr.ly/6019BH1EZd
Artificial Analysis just launched its leaderboard for FrontierCode 1.1, Cognition's private coding benchmark.
Every task is a real change to an open source repo, built with maintainers who spent over 40 hours per task. A failed blocking check scores zero, so it grades what a maintainer would actually merge.
Leading models still fail more than 40% of the time. Claude Opus 5.5 sits on top at 52%, but GPT-6.1 Sol is at 49% for $0.81 per task. MiMo-V2.6-Pro leads open weights at 45%.
Nine models from six labs land between 43% and 52%, so the next release can take first place.
Meta is back in the frontier race.
Muse Wonder Full just scored 56 on the Artificial Analysis Intelligence Index, second only to Claude Opus 5.5 at 58 and ahead of GPT-6 Astra, Claude Fable 5.1 and Gemini 4 Argon, all tied at 53.
It also tops Meta's eval table on long coding work, with 57.5 on SWE-Marathon and 79.0 on DeepSWE.
Opus 5.5 still holds a clear lead on ProgramBench at 70.5 vs 59.0, and wins Terminal-Bench and HealthBench Pro too.
Meta's last model, Muse Spark 1.3, scored 48 on the same index. That's an 8 point jump in one release.
Meta just released Muse Wonder and Muse Wonder Full, two frontier models built for agents and coding, 14 months after rebuilding its AI work from the ground up.
Muse Wonder is out now on the Meta Model API and in Muse Code. Wonder Full is only for Muse Code subscribers, and Wonder will soon power Meta's Muse agent, subscribers first.
We’re excited to introduce the Muse Wonder series with Muse Wonder and Muse Wonder Full, our most capable models yet. Both are frontier models, built to deliver state-of-the-art performance for personal and professional agentic tasks.
Muse Wonder is available today via the Meta Model API and Muse Code. Muse Wonder Full is available today for Muse Code subscribers. Muse Wonder will also soon power experiences in our personal agent product, Muse, rolling out first to subscribers.
I think this DigitalOcean launch is a big deal for anyone shipping AI agents to real users.
AI agents often fail without throwing a single error. The tool call succeeds, the agent replies politely, the logs look clean, and the user still ends up stuck. Most teams only find out once support tickets start piling up.
Signals watches live agent conversations and flags the ones that went wrong, even when nothing errored. Simulations then turns that flagged conversation into a test and replays it with the fix across 100 simulated users before anything ships.
Their demo shows a fintech onboarding agent telling a new user to "try again later" because a bank had switched off its old callback URL. Zero errors in the logs. DigitalOcean says a bug like that used to reach about 412 users before anyone noticed. Signals flagged it after the first user, in 4 minutes.
As more companies put agents in front of customers, I expect this kind of monitoring to become as standard as crash reporting is for regular apps.
Nvidia's best customers keep turning into its competitors. Google has TPUs, Amazon has Trainium, and now Maia is set to run Microsoft's own products.
Training stays on Nvidia for a while. Inference is where the money moves first.
Today we are announcing our biggest bet yet on our own silicon.
Starting next calendar year, we will scale our Maia family to multi-gigawatt deployments, making it the primary inference system for our own product and services.
And we’re introducing Maia 300, which delivers 40% more tokens per watt compared to leading GPU-based systems.
We are already deploying Maia 200 across the US, Europe, and Australia, delivering up to 1.7x more tokens per watt across experiences in Teams and Copilot.
Our goal is to build on the full-stack efficiency gains we’ve already seen, while continuing to bring the latest innovations from across the ecosystem into our fleet.
I actually like this way of launching. No benchmarks, no hype thread, just a free model with a Pokémon name and people left to figure it out.
If it really is Beam, Reflection gets thousands of honest reviews before the weights drop. Not all of them are nice, and that's the useful part.
I think the nastiest part of the new GhostAction wave is that it goes after keys people already deleted.
This week a fake "Security Audit" GitHub workflow landed in 345 repos through compromised maintainer accounts, including the account of pyxel's author. Unsigned commits, no pull requests.
It runs on every push, sends the repo's Actions secrets to the attacker's server, then searches the files and full git history for AWS, OpenAI, Anthropic and GitHub keys. StepSecurity says the server confirmed receiving data from at least one repo.
A key removed from the code years ago still leaks if it was never rotated. If this workflow shows up in a repo, revoke the compromised GitHub credential, then rotate the Actions secrets and every key in the history.
I think model churn is turning into a real cost of building on these APIs, and Google just gave a clean example.
Gemini 3.7 Flash was deprecated 56 days after it went GA.
Requests to gemini-3.7-flash now get routed to gemini-3.8-flash, and gemini-3.5-flash requests go to gemini-3.6-flash. The call still works, but you get a different model than the one your code names, with no step where you test it first.
OpenAI is cleaning up too. GPT-5.5 leaves ChatGPT and Codex on Oct 14, while the API keeps it. Anything pinned to these model names is worth checking before then.
Ransomware crews are still getting into company networks through a GlobalProtect bug Palo Alto patched in May, and I think the patch is giving some teams false comfort.
CVE-2026-0257 lets an attacker forge GlobalProtect's "authentication override" cookie when the same certificate also protects the portal's HTTPS. The firewall never checks the cookie's signature, so it opens a VPN session. Only setups with those cookies turned on are exposed.
Arctic Wolf traced Qilin ransomware intrusions to it in June: VPN access, domain credentials dumped, PsExec across the network, logs wiped, then encryption. ReliaQuest says Qilin and Settra are still exploiting it now.
If you already patched, end the active VPN sessions too. ReliaQuest says the patch alone may not remove someone who got in before the fix.























