Kimi-K3 Releases on HuggingFace 7/27

HN (moonshotai/HF), 2026-07-27. Moonshot AI's Kimi K3 model card goes live this morning. Direct loop with Saturday's UK AISI / CAISI joint cyber-capabilities assessment: state assessment first, public release ~48h later.

Nvidia, Palantir, Hugging Face join 30 others in race to defend open-weight AI from cyber threats

The New Stack, 2026-07-27. The Open Secure AI Alliance launches. Coalitional follow-through on Friday's Nvidia/Microsoft/Meta open-weight letter — the coalition now has a name.

NVIDIA Cosmos-H-Dreams: Bringing Real-Time Generative Simulation to Surgical Robotics

Hugging Face Blog, 2026-07-27. Real-time generative simulation targeted at surgical robotics. Domain-specific world-model piece.

MCP's biggest update removes the machinery many servers were built around

The New Stack, 2026-07-26. MCP release-candidate rewrite. Structural break for servers built against the current shape of the protocol.

Microsoft and Google DeepMind agree on AI control — but not on who holds it

The New Stack, 2026-07-26. Nadella/Hassabis converge on the need for frameworks, diverge on who owns them. Governance-frame piece.

An Inside Look at the Relay Market Powering Token Resellers and Fraud

Simon Willison, 2026-07-26. Willison's pointer to the vectoral.com piece. HN carried the original Sunday.

The relay market powering token resellers and fraud

HN (vectoral.com), 2026-07-26. Source article Willison links.

Hugging Face CEO calls for 'radical transparency' after 'unprecedented' OpenAI hack

TechCrunch, 2026-07-26. Fresh framing on the Hugging Face sandbox breach. Ties to Saturday's Slashdot OpenAI's Rogue Agent Went Unnoticed For a Week.

Making sense of the panic over Chinese AI

TechCrunch, 2026-07-26. Sits alongside today's Kimi K3 launch and Saturday's DeepSeek investor-meeting leak.

Google's Anti-search-scraping Lawsuit Dismissed

Slashdot, 2026-07-26. Counterbeat to Saturday's top online sites debate cutting off Google's crawlers — the legal side of the same conflict.

Apple's Smart Glasses Delayed, As Engineers Consider Privacy Concerns

Slashdot, 2026-07-26. Paired Slashdot/TechCrunch coverage of Apple stepping back on smart-glasses privacy.

Can Apple make smart glasses that aren't a constant privacy threat?

TechCrunch, 2026-07-26. Companion piece to Slashdot Sunday.

Firefox's New Tab Page Will Get Widgets - Including an AI-Powered Daily Crossword

Slashdot, 2026-07-26. Mozilla ships AI features into new-tab surface.

Is Huawei Building Its Own DRAM Fab?

Slashdot, 2026-07-26. China-AI-supply-chain thread; sits with the Making sense of the panic TechCrunch piece.

Closing the Find-Usages Gap in CIDER

Planet Clojure, 2026-07-27. Followup to Sunday's Modernizing CIDER's Completion from the same author. Two consecutive posts on CIDER internals.

How Unix spell ran in 64 kB of RAM

HN, 2026-07-27. Constraint-programming history post.

PGSimCity - How PostgreSQL Works

HN, 2026-07-27. Visual walkthrough of PostgreSQL internals.

The old-school way of keeping the summer heat out of your home

HN (Monocle), 2026-07-27. Design-side companion to today's Hackaday music-box piece.

Being a Luddite Is Fun Again

404 Media, 2026-07-27. NYC off-tech events. Reads with Saturday's Librarians host viral 'Avoiding AI' workshops TechCrunch piece.

A New Middle Class of Content Creators Is Quietly Quitting the 9-to-5

Slashdot, 2026-07-27. Labor-frame piece; sits with the Monday.com AI-layoffs list from Sunday.

Are brain waves the next unlock for physical AI?

TechCrunch, 2026-07-27. Speculative piece on brain-derived signals for embodied AI.

China-AI thread (Kimi K3 release + assessment + panic frame)

HN via moonshotai/HF: Kimi-K3 Releases on HuggingFace 7/27 (Mon), HN via NIST: UK AISI / CAISI Preliminary Assessment of Kimi K3's Cyber Capabilities (Sat, carryover), TechCrunch: Making sense of the panic over Chinese AI (Sun), Slashdot: Is Huawei Building Its Own DRAM Fab? (Sun), HN: DeepSeek pause fundraise after leaked compute-gap comments (Sat, carryover).

Open-weight coalition (Open Secure AI Alliance)

New Stack: Nvidia, Palantir, Hugging Face join 30 others to defend open-weight AI (Mon), CNBC via HN: Nvidia, Microsoft, Meta warn against overregulating open-weight models (Fri, carryover), TechCrunch: Industry urges against broad open-weight restrictions (Fri, carryover), New Stack: Microsoft, Nvidia, Meta and 22 others defended open weights. Anthropic and OpenAI didn't sign. (Sat, carryover).

MCP protocol churn

New Stack: MCP's biggest update removes the machinery many servers were built around (Sun).

AI-governance frameworks (Nadella + Hassabis)

New Stack: Microsoft and Google DeepMind agree on AI control — but not on who holds it (Sun).

OpenAI-Hugging-Face rogue-agent postmortem

TechCrunch: Hugging Face CEO calls for 'radical transparency' after 'unprecedented' OpenAI hack (Sun), Slashdot: OpenAI's Rogue Agent Went Unnoticed For a Week (Sat, carryover), New Stack: What really happened in the Hugging Face breach (Fri, carryover).

Crawler-access dispute (Google + AI training)

Slashdot: Google's Anti-search-scraping Lawsuit Dismissed (Sun), Slashdot: Top Online Sites Debate Cutting Off Google's Crawlers (Sat, carryover), Slashdot: Amazon Cracks Down On Use of AI Images By Sellers (Sat, carryover).

Wearable-camera privacy pushback (Apple + Meta)

Slashdot: Apple's Smart Glasses Delayed (Sun), TechCrunch: Can Apple make smart glasses that aren't a constant privacy threat? (Sun), Slashdot: Instagram Is Now Banning Pickup Artists, Pranksters Who Use Meta Glasses (Sat, carryover).

Debian / Codeberg LLM policy cluster

debian.org via HN: LLM Usage in Debian — Three Proposals (Sat, carryover), LWN: A Debian general resolution on LLM usage (Sat, carryover), Hackaday: Codeberg Bans Cryptocurrency and LLM-Generated Code Projects (Fri, carryover).

CIDER internals streak

Planet Clojure / metaredux: Closing the Find-Usages Gap in CIDER (Mon), Planet Clojure / metaredux: Modernizing CIDER's Completion (Sat, carryover).

AI-and-jobs / anti-AI cultural frame

404 Media: Being a Luddite Is Fun Again (Mon), Slashdot: A New Middle Class of Content Creators Is Quietly Quitting the 9-to-5 (Mon), TechCrunch: Monday.com plus 20 others blame AI for layoffs (Sun), Stanford SIEPR via HN: What is happening to jobs? Separating AI hype from reality (Sat, carryover), TechCrunch: Librarians host viral 'Avoiding AI' workshops (Sat, carryover).

Opus 5 aftermath

claude.com via HN: New rules of context engineering for Claude 5-gen models (Sat, carryover), Latent Space AINews: Fable-level performance at Opus price (half Fable) (Sat, carryover), Willison: Quoting Boris Cherny (Sat, carryover), claude-code v2.1.220 (Sat, carryover).

• Monday HN front page
  • Kimi-K3 Releases on HuggingFace 7/27, HN, 07-27
  • How Unix spell ran in 64 kB of RAM, HN, 07-27
  • PGSimCity - How PostgreSQL Works, HN, 07-27
  • The old-school way of keeping the summer heat out of your home, HN (Monocle), 07-27
• Monday Slashdot
  • A New Middle Class of Content Creators Is Quietly Quitting the 9-to-5, Slashdot, 07-27
  • 2.1 Million People View Leaked 'Odyssey' Bootleg on X, Slashdot, 07-27
  • Inside the Dystopian World of Germany's Free Speech Crackdown, Slashdot, 07-27
• Monday TechCrunch
  • Are brain waves the next unlock for physical AI?, TechCrunch, 07-27
  • Europe got its own TBPN-style live show, TechCrunch, 07-27
• Monday Hackaday
  • A Music Box With A Very Modern Heart, Hackaday, 07-27
  • 2026 Frikkin Lasers Challenge: Nanometer-Scale Displacements with an Optical Cavity, Hackaday, 07-27
  • Scanwheel: A Pocket-Sized POV TV, Hackaday, 07-27
• Monday Hugging Face Blog + New Stack + 404 Media + Planet Clojure
  • NVIDIA Cosmos-H-Dreams: Real-Time Generative Simulation to Surgical Robotics, Hugging Face Blog, 07-27
  • Open Secure AI Alliance — 30+ signatories, The New Stack, 07-27
  • Being a Luddite Is Fun Again, 404 Media, 07-27
  • Closing the Find-Usages Gap in CIDER, Planet Clojure, 07-27
• Sunday HN front page
  • JetZero, HN, 07-26
  • Inflect-Micro-v2: complete voice in 9.36M parameters, HN, 07-26
  • Ruff v0.16.0 – 413 default rules up from 59, HN, 07-26
  • An ESP32 based plane radar for my desk, HN, 07-26
  • GrapheneOS protections against data extraction from locked devices, HN, 07-26
  • US citizen charged after GrapheneOS phone wipes during airport search, HN, 07-26
  • Git rebase -I is not that scary, HN, 07-26
  • Alien World Chemistry Found Inside Meteorite That Struck New Jersey Home, HN, 07-26
  • The relay market powering token resellers and fraud, HN, 07-26
  • We have proof automation now, HN (imperialviolet), 07-26
  • Scriptc by Vercel: TypeScript-to-Native compiler, HN, 07-26
  • Htmx 4.0, the first JavaScript library to release exclusively on the Game Boy, HN, 07-26
  • Kill The Cookie Banner, HN, 07-26
  • Decker, a platform that builds on the legacy of Hypercard, HN, 07-26
  • Go Analysis Framework: modular static analysis by go team, HN, 07-26
• Sunday Slashdot
  • Google's Anti-search-scraping Lawsuit Dismissed, Slashdot, 07-26
  • Apple's Smart Glasses Delayed, As Engineers Consider Privacy Concerns, Slashdot, 07-26
  • Is Huawei Building Its Own DRAM Fab?, Slashdot, 07-26
  • AI-Equipped Garbage Trucks Could Soon Start Spying On People in the US, Slashdot, 07-26
  • A Promising Process For Nuclear Fuel Re-use and Disposal?, Slashdot, 07-26
  • Typo-Squatting Scammers Con South Carolina Town Out of $545K, Slashdot, 07-26
  • NASA Replaces ULA's Vulcan Centaur With SpaceX Falcon Heavy For Solar Storm Research, Slashdot, 07-26
  • Three Astronauts Safely Return from Space Station, Slashdot, 07-26
  • Wildfires, Evacuations, and Smoke Hit Europe and North America, Slashdot, 07-26
• Sunday TechCrunch
  • Hugging Face CEO calls for 'radical transparency' after 'unprecedented' OpenAI hack, TechCrunch, 07-26
  • Making sense of the panic over Chinese AI, TechCrunch, 07-26
  • Can Apple make smart glasses that aren't a constant privacy threat?, TechCrunch, 07-26
  • Inside one London founder house rewriting the founder-house rules, TechCrunch, 07-26
  • TechCrunch Mobility: Uber bets on its former CEO, TechCrunch, 07-26
• Sunday Hackaday
  • Ever Seen Claude Use Fusion 360?, Hackaday, 07-26
  • Delta Pen Plotter Draws In Multiple Colors, Hackaday, 07-26
  • Filling High Pressure CO2 Tanks From Sugar Fermentation Gas, Hackaday, 07-26
  • Repairing a "for parts" Canon 7D Mark II DSLR, Hackaday, 07-26
  • Hackaday Links: July 26, 2026, Hackaday, 07-26
• Sunday The New Stack + Willison + Planet Clojure + LWN
  • MCP's biggest update removes the machinery many servers were built around, The New Stack, 07-26
  • Microsoft and Google DeepMind agree on AI control — but not on who holds it, The New Stack, 07-26
  • 5 ways SRE AI agents are set to augment human capabilities, The New Stack, 07-26
  • An Inside Look at the Relay Market Powering Token Resellers and Fraud, Simon Willison, 07-26
  • AI is ruining self-learning, Planet Clojure, 07-26
  • Clojure vars - notes, Planet Clojure, 07-26
  • Kernel prepatch 7.2-rc5, LWN, 07-26

Kimi K3 assessment-then-release sequence

Saturday: UK AISI + US CAISI publish a joint preliminary assessment of Kimi K3's cyber capabilities on NIST. Monday: Moonshot AI puts the Kimi K3 model card live on Hugging Face at moonshotai/Kimi-K3. The state assessment ran ~48 hours ahead of the public release. That is unusual sequencing worth flagging.

Open-weight coalition names itself

Friday was the Nvidia/Microsoft/Meta open-weight letter to Washington. Saturday, The New Stack framed it as 22 others defended open weights; Anthropic and OpenAI didn't sign. Monday, the coalition has a name — Open Secure AI Alliance — with Nvidia, Palantir, Hugging Face and 30 others. The positioning shifted from don't overregulate to we'll defend open weights against cyber threats ourselves.

MCP structural break

New Stack Sunday: MCP's biggest update removes the machinery many servers were built around. Anyone shipping an MCP server built to the current release should read the RC. Structural break, not a bug-fix release.

CIDER internals two posts in three days

metaredux Saturday: Modernizing CIDER's Completion. metaredux Monday: Closing the Find-Usages Gap in CIDER. Two consecutive deep-dive posts on CIDER internals from the same author.

Apple smart glasses delayed on privacy

Paired Slashdot / TechCrunch coverage Sunday. Sits with the Saturday Instagram bans pickup artists and pranksters who use Meta glasses Slashdot piece. Two vendors, one weekend, same wearable-camera-privacy problem surfacing.

Aviation goes quiet for the first weekday in a week

Air Current and Leeham both silent since Friday. No new posts on JetZero, composite allowables, or the dollar-pricing story today.

Sources that publish frequently but have gone quiet:

• Alignment Forum (3 days) — last item 2026-07-24.
• Apple ML Research (3 days) — last item 2026-07-24.
• Citizen Lab (3 days) — last item 2026-07-24.
• Cloudflare (3 days) — last item 2026-07-24.
• Leeham News (3 days) — last item 2026-07-24.
• METR (3 days) — last item 2026-07-24.
• Pydantic (3 days) — last item 2026-07-24.
• Schneier on Security (3 days) — last item 2026-07-24.
• The Air Current (3 days) — last item 2026-07-24.
• Vercel (3 days) — last item 2026-07-24.
• Databricks (4 days) — last item 2026-07-23.
• EFF Deeplinks (4 days) — last item 2026-07-23.
• GitHub Blog (4 days) — last item 2026-07-23.
• Grafana Labs (4 days) — last item 2026-07-23.
• OpenAI (4 days) — last item 2026-07-23.
• Interconnects (5 days) — last item 2026-07-22.
• Julia Evans (6 days) — last item 2026-07-21.
• Martin Fowler (6 days) — last item 2026-07-21.
• Stephen Wolfram (6 days) — last item 2026-07-21.
• Tailscale (6 days) — last item 2026-07-21.
• RTL-SDR (7 days) — last item 2026-07-20.

build: 2026-07-27 | crawler-sha: 5fe7ab8 (Walsh-Research/1.2, compliance v1.3) | feeds: 66 core | items-considered: 4065 (14d, incl. 2196 arXiv) | warehouse: 28805 items | published: 89