A security researcher publicly disclosed that tl;dv, an AI notetaker widely used with Zoom, Google Meet and Teams, stored its meeting metadata in a Firestore database that never enforced tenant isolation. Any authenticated user, including free accounts, could query every meeting record on the platform rather than just their own, exposing records tied to more than 84,000 users across 35,000 email domains.
The exposed fields included creator emails, joinable conference IDs, recording status and timestamps. Roughly a thousand meetings showed as actively recording at any given moment, and their conference IDs worked as live links — the researcher used them to enter calls run by a national education ministry and a university startup team, uninvited.
The flaw was first reported in January 2026 and reportedly remained unfixed for six months despite follow-ups, with government domains from more than twenty countries and university and corporate accounts among those affected. The disclosure lands squarely alongside a broader industry conversation about whether SOC 2 and similar compliance badges actually catch failures this basic.
Alibaba's Tongyi Lab released Qwen3.8-27B on Hugging Face and ModelScope, a dense, natively multimodal model that understands images and video and offers a 262,000-token context window extendable to roughly a million. Unlike the trillion-parameter Qwen3.8-Max released earlier in the month, this version is built to fit on a single 24 to 32 gigabyte consumer GPU.
Community benchmarks reported gains across coding and reasoning tests over the prior 27B generation, and quantized versions from the open-source community were available within an hour of launch. The release completes a two-stage rollout that began with the Max-tier weights on August 12 to 14, and follows a broader pattern of Alibaba alternating between open and closed releases across recent Qwen generations.
xAI, now operating as SpaceXAI following its February merger with SpaceX, shipped Grok 4.6 on August 12, five weeks after Grok 4.5. Independent evaluator Artificial Analysis scored it 61 on its Intelligence Index, level with GPT-5.6 Sol and one point behind Claude Fable 5, while pricing held flat at $2 and $6 per million input and output tokens.
The model's real edge appears to be efficiency rather than raw capability: it completed long agentic tasks in roughly half the turns Claude Opus 5 needed. But independent testing also found a meaningfully higher rate of confidently wrong answers than its benchmark parity would suggest, and on a ten-row comparison table Claude Fable 5 still won the most individual categories.
Google expanded its Homomorphic Encryption Intermediate Representation toolkit, an open-source compiler that converts pretrained models to run inference on encrypted data so the server processing a request never sees the underlying plaintext. The company demonstrated the approach on a deep-learning recommender system and a credit-card fraud detection model.
The toolkit is built on MLIR and designed to work across multiple encryption schemes and hardware accelerators, with Google framing it as a step toward making privacy-preserving computation practical rather than purely academic. The timing is notable: fully homomorphic encryption is structurally designed to make the exact class of failure behind today's tl;dv exposure impossible, since a server that never holds plaintext data has nothing to leak.
DeepSeek's new peak and off-peak pricing structure goes live today, replacing the flat rates that made its V4 models the cheapest well-known option in the market. V4 Flash output climbs from a flat $0.28 per million tokens to $1.32 at peak hours and $0.66 off-peak, while V4 Pro output rises from $0.87 to as much as $3.96 at peak.
The company said the tiered structure is meant to shift developer workloads toward less congested periods rather than simply raise revenue. Even at peak rates, DeepSeek remains cheaper than several Western rivals, but the gap has narrowed sharply against OpenAI's discounted Luna tier, and analysts note the change could reshape how cost-sensitive coding agents choose their default model.