August 18, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
NVIDIA shows how to quantize Nemotron 3.5 Lightning to NVFP4 with QAD
NVIDIA details how developers can use its Model Optimizer and quantization-aware distillation (QAD) to compress the Nemotron 3.5 Lightning model to NVFP4 precision, cutting memory use and boosting speed without sacrificing accuracy.
Qwen 3.8 27B impresses but overthinks by default
Alibaba's new open-weight Qwen 3.8 27B scores 52 on the Artificial Analysis Intelligence Index — matching GPT-5.6 Luna (max) — and is a great size to run locally on a well-specced laptop, though Simon Willison notes it wildly overthinks simple tasks by default.
GPT-5.6 Sol: OpenAI's best vision model yet, price cut in half
OpenAI's new GPT-5.6 Sol is being called the best vision model the company has shipped, and OpenRouter has cut its price by 50 percent, making it significantly cheaper for developers building vision-based applications.
"AI;DR": the worry that AI is killing deep reading
A widely discussed essay argues that more people are leaning on AI-generated summaries instead of reading source material themselves, warning about the consequences for deep understanding and critical thinking.
Security
AI-generated GitHub Copilot 'Autofix' allowed compromise of Snowflake's Jira
Security researchers at Wiz show how an autogenerated code change from GitHub Copilot's 'Autofix' feature in a CI/CD pipeline could be exploited to compromise Snowflake's internal Jira instance, illustrating the risk of blindly trusting AI-generated code fixes.
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor claims to be selling employee databases stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access with compromised credentials.
Certighost: flaw let a standard domain user hijack the certificate authority
CVE-2026-54121 let a standard domain user turn an Enterprise Certificate Authority into a domain controller, underscoring why PKI must be treated as Tier 0 identity infrastructure.
Microsoft working on patch for Defender 'ShieldBreak' zero-day
Microsoft is developing a security patch for the 'ShieldBreak' zero-day vulnerability, disclosed by security researcher 'Nightmare Eclipse' and now tracked as CVE-2026-69414.
French tax authority data breach affects 678,000 individuals
France's Ministry of the Economy and Finance disclosed a data breach after an attacker accessed the tax authority DGFiP's systems and stole data belonging to 678,000 individuals.
Dev
DuckDB previews version 2.0
The DuckDB team has published highlights of the upcoming 2.0 release, covering performance improvements, storage format stability, and new features for the popular in-process analytics database.
IT
Microsoft confirms GitHub outage worldwide
GitHub suffered a widespread outage affecting its website, API, Actions, Pull Requests, and several other services for users globally, Microsoft confirmed.
Windows Server 2022 reaches end of mainstream support in 60 days
Microsoft has reminded IT administrators that Windows Server 2022 is approaching the end of mainstream support in October 2026, after which it moves to extended support.