Sep 3, 2026

AI agent security led the period with Radware’s ZombieAgent disclosure: an attack rarely looks like hacking, appearing instead as a sentence buried in a ticket or document that a language model treats as an instruction because it cannot reliably separate text to read from text to obey. Interlock, a new open-source project, is positioned to sidestep that prompt-injection fight, while every step in the resulting leak can look individually authorized.

The Model Context Protocol underwent its biggest specification change yet on 2026-07-28. The revision removes session management issues between servers by having each request carry self-describing metadata, which lets load balancers operate more effectively and makes server instances interchangeable. Separately, World open-sourced ProveKit, a post-quantum proving toolkit that generates zero-knowledge proofs on users’ phones so sensitive information never leaves the device. The move follows a dark web service called Nexus advertising bulk access to identity documents of more than 170 million people in North America.

Rust correctness also advanced. Incorrect fused multiply-add implementations in Rust and musl libc led to significant bugs; FMA is critical because it allows one rounding error instead of two, essential for algorithms such as trigonometric functions. The Rust Foundation and AWS continued a Rust standard library verification contest, breaking verification into discrete challenges and producing automated tools that surpass manual proof engineering. In the Rust ecosystem, smb-server-rs emerged as a from-scratch SMB server in async Rust with io_uring, and Meclaw introduced a single Rust binary that turns a directory tree into a dynamic colony of actors for agentic systems.

Databases saw notable defaults and extensions. ClickHouse’s 26.2.4 patch release made asynchronous INSERTs the default, batching small inserts and eliminating the “Too many parts” error, though wait_for_async_insert remains at 1 so clients block until flush. PostgreSQL gained pg_tre and pg_re2 extensions to improve regular expression query performance and speed data analysis, with pg_tre adding built-in fuzzy matching.