flashtea/
paper

No. 44 · Sunday, 26 July 2026 · 12 stories

AI Research & Models

Nvidia and SK Group sign $500B letters of intent to build AI infrastructure in South Korea

The three-part deal centers on a 2-gigawatt AI factory that SK Telecom will build on Nvidia's Vera Rubin DSX platform (online 2027), locks in SK Hynix as Nvidia's primary supplier of next-generation HBM memory, and adds a separate $1B Nvidia investment in Naver. The figures are letters of intent, not binding contracts.

why it mattersOne of the largest AI infrastructure commitments to date, and it ties Nvidia's memory supply chain directly to South Korea's chip industry.

CNBC

AI for Software Development3 stories

Confused-deputy flaw in Microsoft's Azure DevOps MCP server lets hidden PR text hijack AI reviewers

Manifold Security disclosed a bug in Microsoft's official Azure DevOps MCP server: a tool that returns pull-request descriptions skips the prompt-injection "spotlighting" defense applied elsewhere in the server, so an attacker's HTML comment invisible in the UI is delivered straight into a reviewing agent's context. A hijacked agent can then read wikis, source, and work items across projects the attacker has no rights to, under the victim's own credentials.

why it mattersNo CVE or fix has shipped yet — teams wiring AI review agents into Azure DevOps should scope tokens and MCP domains to least privilege now.

Manifold Security

Poolside ships Laguna S 2.1, an open-weight coding model it says beats rivals 10x its size

The 118B-parameter MoE model (8B active per token, 1M-token context) scored 70.2% on Terminal-Bench 2.1 for long-horizon agentic coding tasks and is available now on Hugging Face under Poolside's permissive OpenMDW-1.1 license. It's the startup's third model shipped in three months.

why it mattersA credible open-weight coding model gives teams that can't send code to a hosted API a serious local alternative.

Poolside

Coding agents are tripping endpoint-security alarms built to catch human attackers, Sophos finds

Reviewing a week of its own telemetry, Sophos found Claude Code, Cursor, and OpenAI Codex routinely performing actions — enumerating Windows credentials, using certutil/bitsadmin to fetch installers, writing startup-folder scripts — that behavioral detection rules treat as high-signal attack indicators, even though the agents aren't malicious.

why it mattersSecurity teams running EDR alongside coding agents should expect false positives and tune rules to the agent's process and workspace rather than disabling them outright.

Sophos

AI Research & Models3 stories, lead above

White House official accuses Moonshot AI of distilling Anthropic's Fable to build Kimi K3

OSTP director Michael Kratsios said Moonshot AI runs an internal platform for large-scale distillation of U.S. models and has used GB300-equipped servers in Thailand to route around China's ban on importing high-performance Nvidia chips. Moonshot did not respond to questions about its training process; outside researchers are skeptical distillation alone explains Kimi K3's performance.

why it mattersRaises the stakes in the US-China open-model fight just as Kimi K3's full weights are set to drop July 27.

The Hill

UK and US safety institutes find Kimi K3 lags on cyber capability but has weak safeguards

A joint UK AISI / US CAISI preliminary evaluation found Kimi K3 performs well below frontier cyber-capable models — it achieved code execution on 0 of 41 ExploitBench tasks versus 20/41 for top models — but its safeguards did not stop it from attempting exploit development or offensive cyber operations when asked.

why it mattersA government red-team result landing right before Kimi K3's open-weight release is a useful reference point for anyone evaluating it.

NIST

Dev Tools & Releases3 stories

VS Code 1.130 adds dedicated agent sessions and faster multi-file review

The release lets agent sessions run in their own process reachable from multiple windows, adds compact diffs and file-level stats with worktree support to the preview Agents window, and improves terminal Git-diff link handling.

why it mattersContinued signal that the editor itself is being restructured around long-running agent sessions rather than single-shot completions.

Visual Studio Code

GitHub Code Quality, pairing CodeQL with AI-assisted detection, reaches general availability

The product, now billing at $10 per active committer/month after more than 10,000 enterprises used it in preview, flags maintainability and reliability issues in pull requests across Java, C#, Python, JavaScript, Go, and Ruby, with Copilot Autofix suggesting fixes. GitHub says its own engineering org resolves 67.3% of findings before merge.

why it mattersA direct GitHub bet that AI-accelerated code output needs an AI-assisted quality gate to match.

GitHub

Node.js schedules coordinated high-severity security releases for Monday

The Node.js project confirmed new versions across the 22.x, 24.x, and 26.x lines will ship on or shortly after Monday, July 27, fixing at least one HIGH-severity issue; details are withheld until release per disclosure policy.

why it mattersTeams on any actively maintained Node line should plan to patch Monday rather than wait.

Node.js

Bitcoin3 stories

Bitcoin holds near $65,000 even as oil's climb toward $100 fails to spook the market

Brent crude touched $97.66 a barrel, its highest since May, as the Iran conflict continued, yet bitcoin stayed range-bound near $65,000 rather than selling off — a contrast to earlier oil spikes this year that hit crypto hard.

why it mattersResilience to an oil shock that would have dented bitcoin a few months ago is a notable shift in how the market is trading macro risk.

CoinDesk

Fed rate-hike odds jump to 46.5% as Trump reinstates Hormuz blockade and oil spikes

CME FedWatch-implied odds of a quarter-point hike at the July 29 FOMC meeting rose from 34% to 46.5% after Trump reinstated a naval blockade of Iranian shipping through the Strait of Hormuz and a 20% fee on transiting cargo, sending oil sharply higher and reviving inflation concerns.

why it mattersA higher-than-expected hike probability heading into Wednesday's decision is the single biggest near-term catalyst for bitcoin's price.

CNBC

EU's 21st Russia sanctions package targets a $120B crypto evasion network

The package extends a transaction ban to 14 more crypto-related platforms in Georgia, the UAE, and Panama, targets the A7 cross-border payments network and its A7A5 stablecoin, and introduces a new tool that could let the EU fully ban any crypto-asset service used by Russia.

why it mattersShows regulators treating crypto rails as a first-order sanctions-evasion target, not an afterthought.

CoinDesk

Bitcoin · weekly close vs 200-week moving average · log scale · last 8 years Price200-week average
$5,000$10,000$20,000$50,000$100,000 20192020202120222023202420252026 $80,809 $67,358
$5,000$20,000 2020202220242026 $80,809 $67,358

Price is 1.20× the 200-week average. Weekly closes, USD, as of 28 October 2026 · data blockchain.com.