Cognition Nets $1B as Enterprise Agents Surge, Security Warnings Grow

AI & Machine Learning

Cognition announced a greater‑than‑$1 billion funding round led by Lux Capital, General Catalyst and 8VC at an estimated $25 billion pre‑money valuation, citing rapid enterprise revenue growth and large customers for its autonomous coding agent, Devin. The raise underscores continued investor appetite for agentic developer tooling and positions Cognition as a major player in the developer‑agent category where automation of coding workflows is driving enterprise adoption. Market watchers say the valuation and investor roster may accelerate competition for integrated coding agents inside IDEs and cloud toolchains, and could push incumbents to deepen AI-assisted developer features. The funding also raises questions about how enterprises will operationalize and govern agentic systems at scale. Source: TechCrunch Verified: True

Roblox Research released CubePart, an open‑vocabulary, part‑controllable 3D generator that uses a two‑stage diffusion architecture and dataset pipeline to output meshes decomposed into named, functional parts like wheels or doors. The system is designed so generated assets can be used directly in game engines and integrated into Roblox Studio, shortening the pipeline from concept to playable content and enabling interactive control over parts for gameplay. CubePart’s dataset and repo publication will let creators and studios experiment with part‑aware generation and could accelerate content production and procedural asset workflows in virtual worlds. Roblox frames CubePart as a practical step toward making generative 3D assets immediately usable for simulation and game design. Source: Roblox Newsroom Verified: True

Apple’s LiTo (Surface Light Field Tokenization) research and runnable code were published publicly, providing an ICLR‑accepted image→3D approach that jointly encodes geometry and view‑dependent appearance to better capture specular and reflective materials. The released repos, demos and configs let researchers and developers reproduce Apple’s lighting‑aware 3D conversions and adapt the method for spatial computing and Vision Pro content pipelines. By opening LiTo, Apple has put a high‑quality, lighting‑sensitive tool into the hands of studios and academics, which may speed adoption of photorealistic image→3D workflows across AR/VR and content production. The move signals growing momentum in the developer race to produce dependable, productionizable 3D generative tools. Source: Startup Fortune Verified: True

Consumer Hardware

No major stories this sector today.

Cybersecurity

Trend Micro disclosed multiple vulnerabilities in its Apex One endpoint platform and confirmed that a relative‑path traversal (CVE‑2026‑34926) is being actively exploited in the wild, prompting CISA to add the issue to its Known Exploited Vulnerabilities (KEV) list and order federal agencies to patch. The advisory warns that compromised Apex One servers could be abused to push malicious updates to managed agents, elevating risk across networks that rely on centralized management consoles. Security teams are urged to apply vendor fixes immediately, review access controls, and monitor for signs of abuse because the attack vector enables broad, stealthy distribution of malicious payloads. The disclosure highlights the systemic risk when centralized endpoint management tools are targeted by attackers. Source: Help Net Security Verified: True

Researchers disclosed a host‑header parsing flaw in the Starlette ASGI framework (tracked as CVE‑2026‑48710 and nicknamed “BadHost”) that can bypass path‑based authorization and expose MCP/agent servers, FastAPI apps and many LLM tooling stacks to unauthorized access. The vulnerability impacts widely used Python AI tooling (including vLLM and LiteLLM integrations and FastAPI‑based UIs) and has been described as trivial to exploit on deployments lacking proper firewalling or host validation. Maintainers released a patched Starlette version and published scanner tools to help operators find vulnerable endpoints, but the scale of affected open‑source stacks means rapid remediation is required to protect millions of agent deployments. The incident underscores how small parsing bugs in foundational libraries can cascade into major risks for modern AI infrastructures. Source: Ars Technica Verified: True

Enterprise Infrastructure

Snowflake announced an expanded multi‑year strategic collaboration agreement with AWS that reportedly includes a $6 billion infrastructure commitment and the acquisition of Natoma to extend governance from data to AI agent interactions. The deal deepens product integration for generative and agentic AI while positioning Snowflake as a control plane for governed enterprise agent workflows and lifecycle management. Analysts say the move cements Snowflake’s strategy to capture higher layers of the AI stack—data, models, and agent governance—and could accelerate adoption among regulated customers seeking a unified governance surface. The acquisition of Natoma signals a focus on observability and policy controls specifically tuned to agent‑to‑data interactions. Source: CRN Verified: True

Qumulo updated its Cloud AI Accelerator and formalized integrations with Cisco to pitch “GPU liquidity” by presenting distributed datasets to GPUs in place and enabling workload scheduling based on compute availability rather than data locality. The architecture is intended to reduce data‑staging bottlenecks that often leave GPUs underutilized, allowing hybrid deployments to treat storage and compute more flexibly. Qumulo says this approach improves throughput for large training and inference jobs and simplifies hybrid orchestration when GPUs are the scarce resource. If adopted broadly, the design could shift practices around data gravity and change how enterprises provision and schedule expensive accelerator resources. Source: StorageReview Verified: True

Amazon MGM Studios and AWS launched the GenAI Creators’ Fund to finance filmmakers, creators and startups while offering access to Project Nara, an AWS‑based AI production platform for animation and live‑action workflows. Selected projects will receive funding, tooling access and potential distribution on Prime Video, tying creative financing to cloud production stacks and verticalized generative workflows. The initiative exemplifies how studios and hyperscalers are bundling platform access with financing to accelerate content pipelines and capture new creative ecosystems. Observers note this could lower barriers for independent creators but also concentrate content production influence with platform operators. Source: Afrotech Verified: True

Policy & Regulation

Reuters reports that EU antitrust regulators are preparing a high triple‑digit million euro penalty under the Digital Markets Act against Google over search practices, an escalation that would mark one of the first major DMA fines at scale. The potential sanction signals the EU’s willingness to apply significant financial penalties to enforce gatekeeper obligations and could set precedent for remedies and compliance timelines across major platforms. If finalized, the fine will ratchet up pressure on tech companies to demonstrate DMA compliance and may force operational changes in how search and related services are offered across the bloc. The development also underscores the growing impact of EU digital regulation on global platform strategy and competition law. Source: Reuters Verified: True