July 12, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
How to evaluate general-purpose robot policies for real-world deployment
NVIDIA outlines how robotics foundation models can now follow natural-language instructions to pick, place, sort, and manipulate objects, and lays out methods for evaluating these policies before real-world deployment.
Mesh LLM: distributed AI computing on iroh
A new project shows how large language models can run distributed across a mesh network built on the iroh protocol, without centralized infrastructure.
Inside the circular financing of the GPU boom: Nvidia, CoreWeave, and Nebius
An analysis maps the intertwined investment and supply deals between Nvidia, CoreWeave, and Nebius, questioning how sustainable the financing model behind today's GPU boom really is.
Security
'Ghostcommit' hides prompt injection in images to trick AI agents into leaking secrets
A PNG file can hide a prompt injection that tricks AI coding agents into reading a repo's .env file and leaking every secret to a location the attacker controls. The technique, dubbed 'Ghostcommit,' slipped past AI code reviewers CodeRabbit and Bugbot, which never open image files at all.
Australia warns of global campaign targeting vulnerable CMS platforms
Australia's Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content management systems and their plugins.
What xAI's Grok Build CLI actually sends to xAI
A technical writeup documents exactly what data and telemetry xAI's Grok Build CLI sends back to xAI, raising privacy and transparency questions about the coding assistant.
Dev
We scaled PgBouncer to 4x throughput
ClickHouse shares how it optimized PgBouncer for its managed Postgres service and achieved four times the throughput.
sqlite-utils 4.1 released
Simon Willison released a new point version of sqlite-utils just days after 4.0, adding several minor new features.
Prefer strict tables in SQLite
A post argues developers should default to SQLite's STRICT tables to avoid the pitfalls of SQLite's flexible type system.
Show HN: Ant – a JavaScript runtime and ecosystem
A new open-source project introduces Ant, a JavaScript runtime with its own ecosystem, positioning itself as an alternative to Node.js, Deno, and Bun.
Learn by rebuilding Redis, Git, a database from scratch
A site offers hands-on guides for learning systems programming by rebuilding simplified versions of Redis, Git, and a database entirely from scratch.
Other
Nilay Patel: AR glasses require a camera that's always recording what you see
The Verge editor Nilay Patel points out there's no way around it: making augmented reality glasses requires a camera near your eyes that continuously records and processes what you see.