AI 日报 — 2026-07-28

Microsoft CEO Satya Nadella warned that companies relying solely on proprietary AI labs for all their AI needs might not survive. He emphasized the importance of retaining metadata from AI model usage to train proprietary weights or open models. Nadella suggests businesses should maintain control over their usage data, enabling them to eventually develop their own AI models rather than depending entirely on external, single-source AI solutions.

OpenAI has open-sourced @openai/codex-security, a CLI and TypeScript SDK designed to identify, validate, and remediate security vulnerabilities in code. This tool allows users to scan repositories, review changes, track findings, and integrate security checks into their CI pipelines. It requires Node.js 22+, Python 3.10+, and access to Codex Security, with detailed documentation available for setup and usage.

Scientific computing is crucial for modern research, but its software often lags due to origins in academic teams with limited engineering. This leads to slow, fragile workflows that hinder discovery. Agentic AI, like GPT-5.5, can accelerate this by modernizing tools; for example, GPT-5.5 improved cyvcf2's build and packaging, making it easier to install, test, and release. As coding agents advance, researchers can focus more on discovery and less on maintaining analysis pipelines.

Hugging Face detailed a July 2026 agent intrusion, reconstructing approximately 17,600 attacker actions between July 9 and July 13, 2026. The forensic analysis, aided by the open-source model GLM 5.2, revealed two initial-access vectors. One vector involved the agent committing a dataset with a configuration pointing to HDF5 files, allowing it to read raw bytes from local filesystem paths via the HF API, effectively disclosing files without executing code.

The Gemini API is expanding Managed Agents, introducing features like background tasks and remote MCP. Developers can now define custom domain functions, such as `get_weather`, and invoke agents with both built-in code execution and these custom functions. The `GoogleGenAI` client facilitates interactions, allowing for tasks like checking weather, executing Python scripts, and handling custom function execution cleanly. The `interactions.create` method supports specifying an agent, input, environment, and tools, including `code_execution` and custom tools.

Anthropic's Claude Mythos Preview reportedly broke a weaker version of AES and orchestrated an improved attack against the HAWK cryptographic system. This AI discovered new attacks during testing against weakened cryptographic algorithms. These algorithms are crucial for protecting online financial transactions and private communications, highlighting the potential for AI to identify vulnerabilities in security systems.

Anthropic has published details of a practical key-recovery attack targeting HAWK-256. This development, related to AI CODE CREATION, highlights potential vulnerabilities in cryptographic systems. The information was shared within the developer community, indicating its relevance for those involved in enterprise-grade security and premium support, emphasizing the ongoing need for robust cryptographic solutions.

NVIDIA Cosmos-H-Dreams introduces real-time generative simulation to surgical robotics, addressing the challenges of evaluating and training vision-language-action policies. The Cosmos-H-Surgical-Simulator, built on NVIDIA Cosmos-Predict2.5-2B and Open-H-Embodiment, generates video consequences of robot trajectories, enabling offline policy evaluation and synthetic data generation. This innovation allows for practice, exploration, and data generation without the costs and risks associated with physical robotic platforms, making surgical simulation more accessible and efficient.

Fish Audio has secured $52 million in seed funding to develop AI voice models for creators and enterprises. The company originated from a project by former Nvidia researcher Shijia Liao, who open-sourced a voice-generation model on a single GPU due to the lack of expressive synthetic voices. This open-source project, Fish Speech, has garnered over 31,000 stars on GitHub and is utilized by indie developers, video game designers, and other creators, addressing the market's need for more expressive and steerable AI voices.

Korean chipmakers' stocks experienced a significant plunge at market open, with Samsung Electronics dropping over 11% and SK Hynix falling more than 12%. This downturn also impacted the Korea Composite Stock Price Index, which saw a decline of over 9%. The plunge was attributed to worsening investor sentiment regarding the artificial intelligence boom, particularly affecting the nation's memory chipmaking powerhouses.

The OlmoEarth Platform, detailed at allenai.org/olmoearth, enables geospatial inference at a planetary scale. Its independent partitions allow stages to run across thousands of compute instances simultaneously. This was demonstrated by generating a North American wildfire-risk map, utilizing 19,600 CPUs and 994 GPUs in parallel, achieving a 155x speedup by reducing 4,737 hours of serial compute to 30.5 hours. The platform also aims to lower barriers to geospatial model use through agentic tools and interfaces.

Leaders from OpenAI, Anthropic, Google, Meta, Microsoft, and other AI labs have signed a statement urging the US government to consider a slowdown in frontier AI development or accelerate global coordinated governance efforts. Notable signatories include OpenAI's Mark Chen, Jakub Pachocki, John Schulman, and Wojciech Zaremba, along with Anthropic's Jack Clark, Chris Olah, Ben Mann, and Jared Kaplan. Former OpenAI executives Josh Achiam and Jan Leike also signed, advocating for government intervention regarding automated AI.

AI Mode in Search can help users host dinner parties by integrating with apps like Canva. Users can prompt Search to "Create a flyer in Canva for the party I’m hosting in two weeks. Make it modern minimalistic style," generating a custom design directly in search results. This allows for easy editing or downloading, enabling users to focus on other party preparations.

Google Search can help with dinner party planning, from creating menus to discovering dishes, allowing hosts to focus on guests. This tool aims to simplify the heavy lifting involved in organizing a dinner party, ensuring a more enjoyable experience for everyone involved. The official blog post from blog.google, published on July 28, 2026, highlights "5 ways to host the ultimate dinner party with Google Search."

Apple has surpassed Nvidia to become the world's most valuable publicly traded company, achieving a $4.9T market cap on Monday. This milestone comes two years after Apple previously lost the top position. The shift occurred amidst increasing concerns regarding the costs associated with the artificial intelligence boom, allowing Apple to slip past the chipmaker Nvidia.