September 9, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
OpenAI claims a resolution to the Navier-Stokes Millennium Prize Problem
OpenAI says it used an unreleased model to produce a resolution to one of math's seven Millennium Prize Problems, the Navier-Stokes equations. Mathematician Tristan Buckmaster has published a public statement on the result, and the field is closely watching the verification process.
Terence Tao: open math problems are being mined by AI in a non-renewable way
Fields Medalist Terence Tao warns that the pool of good, fruitful open math problems is now being mined by AI models in a non-renewable fashion, potentially making such problems scarce over time.
Google DeepMind launches AlphaGenome Atlas, a high-resolution map of human DNA
Google DeepMind has released AlphaGenome Atlas, a high-resolution map of the human genome designed to make it easier to understand how DNA variants affect gene function.
Meta launches Muse, a personal AI agent
Meta has introduced Muse, a personal AI agent platform, drawing broad attention as another example of big tech's push into agentic AI products.
OpenAI upgrades image generation with ChatGPT Images 2.5
OpenAI has released ChatGPT Images 2.5 with improved image quality, saying its models have already generated more than 3 billion images across ChatGPT Images and the GPT-Image models in its API.
OpenAI rolls out GPT-6 Astra, supported in llm 0.35
OpenAI has released a new model called GPT-6 Astra, and Simon Willison's llm tool already added support for it in version 0.35.
Security
Microsoft's September Patch Tuesday fixes 966 flaws, including two actively exploited zero-days
September 2026's Patch Tuesday is the largest on record, fixing 966 vulnerabilities including two zero-days already under active exploitation. The fixes ship via Windows 10 KB5122878 and Windows 11 KB5124008/KB5122880 cumulative updates.
Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit
A Linux rootkit targeting F5 BIG-IP APM environments can intercept PHP file loading and inject a fileless web shell directly into memory, avoiding the need to write malicious code to disk.
DoppelCart fraud network uses 119,000 fake shops to steal credit cards
A massive operation dubbed DoppelCart uses more than 119,000 domains to run a network of fake online shops that steal payment card details from unsuspecting customers.
ShinyHunters hackers claim breach of Florida DMV database 'DAVID'
The ShinyHunters extortion gang claims it breached an online platform for the Florida Department of Motor Vehicles known as 'DAVID,' stealing over 200,000 records about the state's drivers.
EU Cyber Resilience Act vulnerability reporting rules take effect September 11
The EU Cyber Resilience Act's vulnerability reporting requirements take effect September 11, giving software vendors as little as 24 hours to report actively exploited flaws, putting the spotlight on whether vendors truly know what shipped and when vulnerabilities were discovered.
Dev
NVIDIA introduces CUDA Rust for GPU kernels
NVIDIA is investing in native GPU programming in Rust, introducing two tracks for writing CUDA kernels in the language alongside its mature CUDA C++ and CUDA Python toolchains.