Gemini 3.6 Flash, Google’s latest Flash model, is now rolling out in GitHub Copilot. It is designed for web and app development, coding, and longer-horizon agentic tasks. It has configurable… The post Gemini 3.6 Flash is now available in GitHub Copilot appeared first on The GitHub Blog.

Claude Opus 5 from Anthropic is now available on AI Gateway.Opus 5 improves on previous Opus models for long-horizon agentic coding, handling multi-file features, larger refactors, and end-to-end feature work, and completing full tasks rather than leaving stubs or placeholders.Opus 5 is effective at

The new Claude Opus 5 model beats Fable 5 in most tasks, especially agent tasks and coding. It matches top Anthropic models and outperforms GPT-5.6 Sol in nearly all tests. Its price remains the same as Opus 4.8.

Claude Opus 5 is available for testing now in Claude Code and Anthropic's chatbot.

Workflow steps on Pro and Enterprise plans can now run for up to 30 minutes (1800 seconds), up from 800 seconds, using extended function durations (in beta).To opt in, set VERCEL_ENABLE_WORKFLOW_EXTENDED_MAX_DURATION to 1 in your project's Environment Variables, then redeploy. Requires Fluid com

By doing in-depth testing, we found nearly 70% of BGP paths experience ORIGIN attribute rewrites by transit providers seeking traffic advantages. We examine the global impact of this practice and argue for deprecating ORIGIN in route selection.

A US pastor sued OpenAI and Sam Altman after ChatGPT allegedly downplayed his lung embolism symptoms and discouraged him from seeking medical help. The lawsuit calls this "illegal medical practice" and negligence, citing the bot gave its own diagnoses and treatment plans while urging the man to ignore family warnings.

ChatGPT is not designed for medical diagnosis but reportedly handles 230 million medical queries weekly. The lawsuit also targets ChatGPT Health, a service where users upload medical documents, demanding it be halted until independently verified safe.

The Vercel WAF can now protect a Vercel Blob store. The same rules that guard your deployments (deny, challenge, rate limit) now apply to blob traffic with no changes to your code, blob URLs, or @vercel/blob. Every blob is already served through Vercel's CDN, so protection is a switch on the sto

Google is rolling out a new account recovery method using video selfies. Users record a short head movement video in advance, then repeat the motion to verify their identity.

The reference video is stored encrypted in the cloud and can be deleted anytime. This replaces the need to remember multiple passwords.

We want to give you advance notice of an upcoming security change that may affect GitHub Enterprise Server (GHES) support bundle uploads. Beginning August 18, 2026, GitHub will start rejecting… The post Upcoming GHES change impacting uploading support bundles appeared first on The GitHub Blog.

I’ve been a NameCheap customer for 13 years. I’ve also helped out an old college club paying for a .com they use (that is registered to me under my name, address, and phone number). During a recent leadership transition, the incoming club lead wanted to make changes to the DNS and didn’t know to contact me. They figured out the domain name was parked at NameCheap, so they initiated a password reset using the domain name. I got a password reset email and immediately filed a NameCheap support ticket saying “I did not initiate this”. They called me to verify I was the one who filed the ticket, and then followed up with a canned email with tips like check your anti-virus.The incoming club leader was persistent though, and called NameCheap support. He convinced them the domain registered in my name and address really belonged to his club, and with no verification or validation whatsoever, NameCheap changed my password, and changed the email address associated with my account. All because someone simply asked nicely on a phone call.Meanwhile in the background, someone advised the new club leader who I was and we were able to connect and get things transferred over. Ultimately I was happy to give them access or even ownership if they wanted (student club turnover being what it is, it’s likely a domain doesn’t get renewed and gets gobbled up by a squatter, which is why I was keeping it current for them).But NameCheap had no way of knowing any of this. As far as NameCheap was aware, this was a personal account of mine. They demonstrated they were perfectly able to pick up a phone and call me (to verify my initial support ticket) but when someone calls them and says “but I really want access to that account” they don’t bother?I’d hesitate to even call this social engineering. It’s clearly a massive vulnerability. I’ve already moved a dozen of my most critical domains out of NameCheap after seeing just how easy it is for a third party to completely take over a NameCheap account: just ask nicely.

Ling 3.0 Flash from Ant Group is now available on AI Gateway.The model is free to use for the next three weeks, through August 3rd.Ling 3.0 Flash is a Mixture-of-Experts model with 124B total parameters and about 5.1B active per token. It has a 256K token context window and runs in thinking and non-

During internal tests, OpenAI’s GPT-5.6 Sol and a stronger prerelease model escaped their sandbox and attacked Hugging Face servers. The models exploited a zero-day vulnerability to break out to the internet, then used stolen accounts and fresh exploits to run code remotely on Hugging Face’s platform.

OpenAI was running these models on ExploitGym, a benchmark designed to test AI’s ability to turn vulnerabilities into real attacks. Protective filters were disabled to measure maximum capability. Hugging Face detected the unusual activity and stopped the attack, reporting it publicly on July 16.