Key Takeaways
- Grok Bot adds 1Password login, mobile OS access, and XChat integration, with Musk promoting it as a personal and business manager.
- Perplexity launches a Batch API for up to 50,000 agent requests per file and a 4B decision model that runs locally on Mac.
- A PHP vulnerability triggers emergency patching across customer sites, with AI assistants coordinating fixes in hours.
- Replit patches exploited infrastructure and launches a government-focused offering.
- Boom unveils a completed supersonic turbine core, a 2GW factory, and a digital foundry for single-crystal blades.
- Moderna and Merck report a 42% reduction in melanoma recurrence or death risk for their personalized mRNA cancer vaccine combined with Keytruda.
1. AI Agents and Developer Tools
- Grok Bot is adding a 1Password integration that lets the bot log in on a user's behalf after they approve which credentials to share, rolling out to users within days. Its iOS and Android apps can now read and send messages, view calendars and create events, set reminders, find and add contacts, look up nearby places, and control smart-home devices after an upgrade. It has also been integrated with XChat, allowing most operations inside X. Recent updates include in-chat report and dashboard generation, an iPhone Action Button trigger, a claimed 3x speedup for computer tasks, a bot email alias, Robinhood/Coinbase/Runway connectors, and device-only notifications. Musk described it as an "excellent life and business manager, like a genius employee." 1 2 3 4 5 6 7
- Perplexity launched a Batch API supporting up to 50,000 requests per file, with each request running a full agent loop including web_search and fetch_url, pitched for large-scale data enrichment such as filling a 50,000-company spreadsheet overnight. Its Decision Model runs locally on Mac: the 4B pplx-decider-flash-v1.2 performs on-device inference through the Decider for Mac app with no API key and no data leaving the machine. 1 2
- A PHP vulnerability prompted an NSA Cyber warning that two critical flaws could give attackers direct access to server files or databases, with organizations told to patch urgently or take systems offline. One firm's AI teammate surfaced the alert with fixed versions and sources in a Slack thread, checked each system, identified affected customer WordPress sites, and repaired 7 customer sites within 3 hours; its own systems do not run PHP. A separate warning flagged a Ruby vulnerability that could enable DoS and RCE if user input reaches affected functions. 1 2
- Replit said it patched infrastructure, updated language tooling, and blocked exploits, automatically fixing what it could and giving clear instructions where users needed to republish. It also launched Replit for Government, targeting U.S. and international governments at national, state, local, tribal, and territorial levels, and welcomed Michael Greenwald, formerly of AWS public sector, to the team. 1 2 3
2. Hardware, Aerospace, and Biotech
- Boom unveiled its first completed supersonic turbine core, a 2GW superfactory, and what it calls the world's most advanced all-digital foundry for casting single-crystal turbine blades and vanes. 1 2
- Moderna and Merck's personalized mRNA cancer vaccine, given post-surgery with Keytruda, reduced the risk of melanoma recurrence or death by 42% versus Keytruda alone, using the same mRNA technology as COVID-19 vaccines. 1
- Tractian raised a $130M Series D at a $1.4B valuation; it attaches vibration, temperature, and pressure sensors to industrial equipment and uses AI to predict failures and recommend maintenance, with ARR above $100M and 90% year-over-year growth. Podium said its AI annual recurring revenue passed $150M, reaching that mark in 2.5 years versus about 8 years for its first $100M, with 20,000 AI agents and profitability plus free cash flow. Formic raised $50M, having served over 100 U.S. manufacturing plants with 99.6% uptime and 97% renewal. 1 2 3
3. Security and Infrastructure
- Vercel's Guillermo Rauch argued for eliminating long-lived static credentials in favor of self-destructing keys, citing a survey of 1,000+ SaaS vendors in which only 8.4% supported secure authentication, and called for treating OIDC the way the industry once treated TLS for all websites. He also highlighted a new OIDC configuration component registry that lets developers pick a provider, form and validation libraries, and a token verifier, then copy the setup into an app with one command. 1 2
- Yohei Nakajima said banks should deploy AI agents inside their own systems rather than let third-party agents scrape login credentials, with a non-LLM immutable policy engine validating each action before execution, full logging, a bank kill switch, SOC 2 Type II certification, and integration with FIS, Fiserv, and Jack Henry. He cited reports that major U.S. banks found unauthorized third-party AI agents operating in customer accounts and are restricting access while preparing recovery plans, and said agent activity grew from hundreds of self-hosted engineers to thousands of personal agents in about two months. 1 2 3
- Levelsio advised VPS users to move servers off the public internet using Tailscale and Cloudflare Tunnel, arguing SSH keys alone are insufficient as AI finds more exploits; he noted both are free and Tailscale is built on open-source WireGuard, while acknowledging the setup is not perfect. 1 2 3
4. Startup and Market Signals
- Shopify's River Slack bot initially struggled to build mobile apps; after fixes, engineers remained skeptical because mobile development has traditionally happened on laptops, prompting Tobi Lütke to make a series of internal ads. 1
- Aside Browser was praised by Garry Tan as making AI agents genuinely good at using the web, with the added point that because Aside is itself a browser it is not detected as a bot. GBrain launched a personal plan letting Claude, Codex, and Capy share one memory of contacts and execution style. 1 2 3
- Jack Dorsey's Cash App launched automatic Bitcoin withdrawals to Bitkey: eligible users can set a BTC balance threshold that triggers transfers to a paired Bitkey. Square will roll out Okta or Microsoft Entra ID login, automatic credit-card surcharges on fully paid U.S. invoices, nested modifiers, in-checkout product editing, and left- or right-side cart placement starting next week. 1 2
