Bitcoin's BIP-110 breakaway chain stalls after mining just two blocks

Nvidia-led security alliance ships first proposals, open-sources an AI agent-harness project

A week after forming with 120+ members, the Nvidia-spearheaded Open Secure AI Alliance published its first working proposals for confidential incident reporting on AI agents and open-sourced NOOA, an agent-harness project meant to make agent behavior easier to test, trace, and govern.

why it mattersConcrete standards and tooling for auditing agent behavior are still rare; this is one of the first industry-wide attempts.

TechCrunch

Security researchers find a supply-chain flaw in Google's Agent Development Kit

Pillar Security disclosed an exploit in Google's Python Agent Development Kit that could let a malicious tool or sub-agent compromise other agents and their dependency chain within the same harness.

why it mattersA reminder that multi-agent frameworks widen the attack surface beyond single-model prompt injection.

The Register

GitHub Copilot's weekly update adds session management and model transparency

This week's Copilot release lets developers manage multiple concurrent sessions from a sidebar, shows which model handled each completed Auto request along with credit and cache details, and adds a /side command to explore a parallel question without losing context.

GitHub Blog

DeepSeek ships V4-Flash-0731, an MIT-licensed coding and agent model

DeepSeek's official V4-Flash-0731 release keeps the 284B-parameter, 13B-active mixture-of-experts architecture from its April preview but adds a fine-tuning pass that lifted its agentic and coding scores past the larger V4-Pro, at a fraction of the cost of comparable proprietary models.

why it mattersA free, open-weight model now beats DeepSeek's own flagship on coding and tool-use benchmarks.

DeepSeek

Mistral open-sources Shieldstral, a compact multimodal safety classifier

Shieldstral is a 3B-parameter, Apache 2.0-licensed moderation model that accepts plain-language policies at inference time to judge prompts, responses, and images for safety, without retraining, and runs on a single 16GB GPU.

Mistral AI

Node.js 26.7.0 adds an HSM-backed key loader and updates its cert store

The latest Current release adds a STORE loader interface for loading private keys directly from hardware security modules, updates the bundled root certificate store to NSS 3.125, and bumps npm to 11.19.0.

Node.js

pnpm 11.5 adds hoisting limits and fixes a peer-resolution hang

The release adds a hoistingLimits setting to control how far dependencies hoist under nodeLinker: hoisted, replaces its interactive-prompt library to fix a scrolling bug, and fixes pnpm hanging when aliased installs pull in transitive packages with mutual peer cycles.

pnpm

Garbage SQLite CVEs expose cracks in the vulnerability-reporting pipeline

Six SQLite vulnerabilities published as a batch turned out to be baseless, yet still landed in the National Vulnerability Database with CISA enrichment, underscoring how AI-assisted vulnerability reports are straining an already backlogged CVE pipeline.

why it mattersTeams that auto-triage on CVE severity risk chasing phantom vulnerabilities.

The Register

Developer warns holders who sell BIP-110 fork coins risk losing real bitcoin

A Bitcoin developer cautioned that people who received coins on the stalled BIP-110 chain could lose their actual BTC if they sell those fork coins carelessly, since transactions on the minority chain can be replayed on the main chain without proper safeguards.

CoinDesk

Whales accumulate $1.2 billion in bitcoin as price holds near $65,000

Wallets holding between 10 and 10,000 BTC have added more than 20,000 BTC since July 29, even as bitcoin's price stayed range-bound below $65,000.

CoinDesk