Microsoft Defender for Office 365 detected a phishing campaign that inserted invisible Unicode tag characters into email text, altering what software processes while recipients saw normal offers. The hunting signature fired on about 21,000 messages the day before the campaign started and the next day, then rose to more than 1.3 million the following day and over 2.3 million two days later. This shifts defenses toward handling Unicode tag characters in pipelines (including tokenization and normalization) so that prompt-injection-style text manipulation can’t bypass filters or confuse downstream AI/agents.
InstantStart lets an AI agent run multi-stage Amazon SageMaker HyperPod cluster setup by driving the same control-plane APIs behind the web console and terminal workflows. EKS control-plane creation takes about 8–12 minutes before dependency installation and HyperPod cluster creation proceed. As a result, long-running steps become retryable, the agent asks only decision inputs (like zone and instance details), and it returns a verified running cluster with storage mounted instead of a pending request.
A developer scraped 107 million rows of UK council spending data and built a map-style website showing how each council spent money and on whom. The project processed 8.2 billion tokens and ultimately collected spending data from 319 of 339 England councils after some councils blocked automated scraping. The developer consolidated and cleaned the dataset, created visual prototypes including map versions, and is preparing to open-source the site and data after final tweaks and testing.
The repository “3D prompt collection for rerunning the Arena AI gauntlet” published a presentation-order set of 3D prompts meant for copying and reuse.
Nvidia introduced Personal AI Router (PAIR), a local distributed clustering tool that lets people use idle home PCs and Macs to run agentic AI subtasks across multiple machines. Nvidia said the client is available in beta for macOS, Windows, and Linux. PAIR sets up automatic proxy connections to tools like LM Studio and Ollama, discovers devices via mDNS/IP, dynamically redistributes subtasks when nodes become unavailable, and returns results to the main node for faster task completion.
Google’s website claims it created an AI clone of its editor-in-chief. It says the resulting agent is built from 30,000 copyedits. The post frames this as evidence that writing with AI is being used alongside headcount growth and automation.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.
