September 11, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
Claude Managed Agents gain auto-approval and direct CLI session access
Anthropic added an 'auto' mode to Claude Managed Agents permission policies, letting the server evaluate each agent or MCP tool call and run, deny, or pause it for approval. The new ant beta:sessions connect CLI command also lets developers follow an agent session live and approve or deny pending calls directly from the terminal.
More questions raised over trusting OpenAI with unpublished math research
A mathematician is raising concerns about how OpenAI handles unpublished research shared with the company, sparking wide debate on Hacker News.
Cognition launches SWE-2, a coding model rivaling Fable 5.1 and GPT-Astra
Cognition has released its new coding model SWE-2, which the company says competes directly with Fable 5.1 and GPT-Astra on programming tasks.
NVIDIA delivers 2.5x more users on Nemotron 3 Ultra with full-stack NIM optimizations
NVIDIA shows how optimizations across the full NIM stack deliver 2.5x more concurrent users when serving Nemotron 3 Ultra in production.
OpenAI launches Agents API
OpenAI has launched a dedicated Agents API for building agentic applications, a release that drew significant attention on Hacker News.
Security
WeWorm: first zero-click worm spreading through WeChat calls
Calif Research has demoed WeWorm, the first zero-click worm that spreads through WeChat calls on both iOS and Android, without the victim needing to answer or interact with the phone at all.
New 'BlueMoon' exploit kit used Windows and Chrome zero-days
Multiple cyber-espionage groups have deployed an exploit kit dubbed BlueMoon, which leverages zero-day vulnerabilities in Microsoft Windows and Google Chrome.
AI-powered attack exploited PaperCut flaws to hack 395 organizations
A likely Russian-speaking threat actor used hundreds of AI agents to develop and launch a global exploitation campaign targeting vulnerable PaperCut NG/MF servers.
Dev
Shopify moves from React Native back to native Swift and Kotlin
Shopify is abandoning React Native and building its mobile apps with separate Swift and Kotlin codebases, according to a new post from Shopify's engineering team that was also covered by Simon Willison.
Rust becomes a tier-1 language at Microsoft
Microsoft has made Rust an officially supported tier-1 programming language, a major step for the language's place in enterprise development.
Kedde used Lovable to challenge Stockholm's zone-based logistics system
Swedish company Kedde built a solution with Lovable to compete with Stockholm's established zone-based delivery logistics system.
Other
Apple launches iPhone Duo
Apple has launched the iPhone Duo, drawing massive attention on Hacker News with over 1,400 points.