A backdoored release of the widely-used `arrayref` crate ran attacker code at build time via a proc-macro, harvesting credentials from any machine that compiled it. The Rust Security Response WG has yanked the release; the writeup traces exactly how the build-time payload worked.
The Dutch data protection authority fined Uber €830M-equivalent for suspending drivers by algorithm without meaningful human review, per a document Reuters obtained. It is the largest penalty yet tied to automated decision-making under GDPR's Article 22.
Nvidia agreed to pay $6B to license Poolside's model-development software, the startup told investors. Poolside started as a coding-agent company, pivoted into data centers, and now exits through a licensing-and-acquihire structure rather than an acquisition.
Anna's Archive argues that the fastest way to digitize a book at scale is to cut its spine off, and that AI labs buying rare books for training data are destroying the physical copies in the process. The post is a call to scan non-destructively before the supply is gone.