Daily AI RoundupsSaturday, 3 October 2026

Apple plans stricter macOS Full Disk Access controls as autonomous AI agents raise privacy risks. Aleph Alpha releases Kolibri with 78B total parameters and 3B active. NVIDIA announces partner-built 64GB DGX Spark systems starting at $4,999, available October 23. Huntback reports an AI-assisted intrusion crew used leaked cloud credentials to steal business data. MariaDB’s Frédéric Descamps reports 173 security submissions across two quarters and explains the resulting patch workload. Simon Roses sets out a coding-agent leak response playbook, while Wagtail’s Thibaud Colas examines provider outages and coding experiments. Anthropic commits $100M to train 10,000 enterprise AI engineers by the end of 2027. Claude Code fixes resumed-session context loss and adds reauthentication for broader MCP permissions.

• AI agents
• Local AI
• Open-weight models
• Agent security
• Software engineering
• Enterprise AI

Stories in this roundup

1. 01
   Apple plans stricter macOS Full Disk Access controls as autonomous AI agents raise privacy risksApple
2. 02
   Aleph Alpha releases Apache-licensed Kolibri, an English-German model with 78B total parameters and 3B activeAleph Alpha
3. 03
   NVIDIA announces $4,999 64GB DGX Spark systems from partners, available October 23NVIDIA
4. 04
   Huntback reports an AI-assisted crew stole 15GB of business data from 10 Spanish firms using leaked cloud credentialsHuntback
5. 05
   MariaDB’s Frédéric Descamps reports 173 security submissions across two quarters as AI-assisted researchers uncover more bugsMariaDB
6. 06
   Simon Roses explains how to contain coding-agent data leaks: preserve logs, rotate keys, then audit public-repository exposureSimon Roses
7. 07
   Wagtail’s Thibaud Colas explains why outages and experimentation prevented a month-long switch to GLM 5.3 FlashWagtail
8. 08
   Anthropic commits $100M to Claude Frontier Academy, aiming to train 10,000 enterprise AI engineers by the end of 2027Anthropic
9. 09
   Claude Code 2.1.288 fixes resumed-session context loss and adds MCP reauthentication when tools request broader permissionsAnthropic