Shinome Brief · 2026-07-30

AI & Tech

7 stories

The lead

Researcher demonstrates a self-spreading Word document attack that makes Copilot rewrite financial figures

Maloy has been reporting this to Microsoft since March 2026. Two mitigations later, including Edit with Copilot and a move to GPT-5.5, a reworded payload still worked, and he says no robust fix exists for the vulnerability class.

Hidden white-on-white instructions inside a Word file make Copilot silently change numerical values in financial reports, then copy the same hidden payload into the document it generates. That new internal document becomes the next infection vector, so the attack spreads through normal sharing without the original file.

En Klype Salt (Hakon Maloy)

KRALYSBefore any Copilot or Claude assist on a Kralys deck or model, paste the source text into a plain editor first so hidden instructions cannot ride along, and set the rule now that no AI tool edits a numbers document in place.

1
Anthropic's bug-hunting model has surfaced over 10,000 critical flaws and under 1 percent are patched
Project Glasswing put Claude Mythos Preview in the hands of roughly 50 partners and turned up more than 10,000 critical vulnerabilities in system-critical software, some of them decades old. Fewer than 1 percent have been fixed, and Microsoft says its patch volumes will keep trending larger for some time.
Ars Technica
KRALYSUse this as the argument for a boring patch discipline at Kralys: the constraint is no longer finding holes, it is the queue to close them, so anything client-facing needs a named owner for updates.
2
Microsoft confirms a single Copilot app merging chat, coding and agents this year
On the earnings call Satya Nadella said the app will cover both consumer and commercial use when it ships this year, describing Copilot as moving from chat to Cowork to Autopilots. It folds today's separate Copilot surfaces into one product.
The Verge
KRALYSHold off on paying for a second AI seat per person at Kralys until this lands, then compare the bundled version against what the AI receptionist actually needs.
3
Kimi K3 compressed from 1.56 terabytes to 594 gigabytes with 78.9 percent of accuracy kept
Unsloth released 8, 4, 2 and 1 bit versions of Kimi K3. The 1 bit build is 594 GB, roughly a third of the original size, and retains 78.9 percent accuracy, while the 2 bit sits at 861 GB. Home lab reports put throughput around 4 tokens per second.
r/LocalLLaMA
CONVOThe line for a senior conversation: frontier open weights are now a storage and patience problem, not a licensing one, and 594 GB still means nobody is running this in a Swiss SME office.
4
Open-source runtime runs a 26 billion parameter model on an 8 gigabyte MacBook Air
TurboFieldfare keeps a 1.35 GB shared core in memory and streams only the experts each token needs from SSD, running Gemma 4 26B at 5.1 to 6.3 tokens per second on an M2 Air and 31 to 35 on an M5 Pro. Apache 2.0, text only, no tool calling, and about 14.3 GB of storage.
GitHub
SHINOMEWorth a weekend test as the offline drafting model for Shinome client notes, since nothing leaves the Mac and there is no per-token bill.
5
More than half of AI unicorns have never led a scientific paper
A preprint posted 16 July finds AI companies valued above 1 billion dollars accounted for one in every 1,000 AI papers published in 2025. OpenAI drew nearly 40 percent of citations in the dataset, yet only eight of its roughly 4,500 staff had authored five or more qualifying papers.
Science
CONVOSharp counter when someone leans on a vendor's research reputation in a diligence conversation: ask what they have actually published that outsiders can check.
6
China threatens retaliation over the US ban on foreign humanoid robots
Beijing's Commerce Ministry said the FCC has repeatedly ignored its restrained position and that the ban severely damages relations. The measure blocks foreign humanoid robots from the US market ahead of a planned Trump visit.
CNBC
CONVOTrack it as the next tariff-style shock: hardware bans are now moving faster than chip rules, which changes the supplier risk question on any European industrial deal.

Finance & Markets

8 stories

The lead

Fed holds at Warsh's first meeting with three dissents calling for a hike, and 30-year yields hit a 19-year high

Kevin Warsh called the split a good family fight, which is a novel way to describe a committee that cannot agree on direction. The market read is that the Fed is behind an inflation impulse coming from the Iran war.

The Fed left rates unchanged, raised its year-end inflation forecast and now projects a hike before the end of 2026. Three FOMC members dissented in favour of hiking now. The 30-year Treasury yield jumped 12 basis points to 5.21 percent, its highest since 2007, the 10-year rose to 4.67 percent, and the Dow fell 1,153 points.

Financial Times

KRALYSRerun any Kralys valuation or financing case on a long rate above 5 percent rather than the 4.5 percent most 2026 models still assume, because the discount rate just moved and the hurdle for the pivot moves with it.

1
US strikes Iran after the missile attack on its forces, and Brent holds near 90 dollars
US forces began striking Iran on Wednesday, ending a days-long pause that followed Tehran's ballistic missile attack on a base in Jordan. Brent had already climbed 7.9 percent to 90.74 dollars as Trump threatened the strikes, and steadied near 90 afterwards, with WTI above 84.
CNBC
CONVOThis is the inflation input the Fed just refused to price, so pair the two in conversation: rates on hold plus oil back at 90 is the squeeze every European industrial client will complain about first.
2
Infomaniak plans a Swiss listing through a reverse merger with Perrot Duval
The Geneva cloud company signed an agreement on 29 July with Perrot Duval Holding, listed since 1905, with a shareholder vote set for 24 September. A Geneva public-interest foundation holds 65 percent of voting rights to block a takeover, and Infomaniak plans around 200 million francs of infrastructure investment.
Le Temps
KRALYSUseful template for the Kralys pivot conversation: a reverse merger into an old listed shell plus a foundation holding the votes is how a Swiss founder raises public money without losing control.
3
Swiss upper house takes up UBS capital requirements on 10 and 11 August
The Council of States economic affairs committee resumes hearings on how far UBS must back its foreign subsidiaries with CET1 capital. The federal proposal implies around 20 billion francs of extra equity, and talk of a compromise at 70 to 80 percent backing is circulating.
Le Temps
CONVOBook it as the Swiss finance story of early August, and note the direction: less UBS balance sheet capacity means mid-cap Swiss borrowers get repriced, which matters for anyone raising here this autumn.
4
Microsoft gains 8 percent after signing 130 billion dollars of data centre leases
Intelligent cloud revenue rose 32 percent to 39.3 billion dollars, Azure grew 43 percent and passed 100 billion dollars in annual revenue, and quarterly capex hit 41 billion. The stock closed up 8.13 percent at 422.30 dollars.
Financial Times
CONVOPut this next to Meta below when the AI capex debate comes up: the market is not punishing spending, it is punishing spending that has not shown up as revenue yet.
5
Meta falls about 8 percent as free cash flow drops 91 percent and capex guidance rises
Revenue rose 28 percent to 60.8 billion dollars but EPS came in at 6.18 against a 7.22 consensus. Free cash flow collapsed to 784 million from 8.55 billion a year earlier, quarterly capex nearly doubled to 31.1 billion, and full-year capex guidance moved to 130 to 145 billion.
CNBC
CONVOThe number to quote is 784 million of free cash flow at a company earning 60 billion a quarter, which is the cleanest evidence yet that AI capex now bites the cash statement, not just the outlook.
6
Qualcomm will raise prices as the memory crunch hits its guidance
Qualcomm missed on the bottom line and guided light, blaming memory costs. Chief executive Cristiano Amon said plainly that costs went up and prices are going to go up.
CNBC
KRALYSFeed it into any 2027 hardware or device budget you touch: memory inflation is being passed straight through, so quotes taken this summer will not hold.
7
Aschenbrenner's Situational Awareness fund seeks fresh capital after the AI selloff
The hedge fund built around an AI-acceleration thesis has held talks with existing investors and lenders in recent days following the rout in AI-linked stocks.
Financial Times
CONVOGood closing line for an AI-strategy discussion: the fund whose whole pitch was that AI would compound faster than markets expected is now the one calling its lenders.

Fitness & Performance

5 stories

The lead

Nature Communications study maps the protein clean-up system that resistance training switches on

Published 28 July, DOI 10.1038/s41467-026-75501-y. The same group also looked at long stretches of reduced training and full stops, which is the part coaches actually have to manage.

Teams from Hildesheim, Bonn and Freiburg took muscle biopsies from healthy volunteers before and after a hard resistance session and used proteomics to track the contractile apparatus. Training activates a network that tags damaged muscle proteins for removal and drives replacement of them, and the size of that response tracked with training intensity and training history.

University of Freiburg

SHINOMEUse it to justify the taper and deload wiring already in the First Trial playbook: the repair response scales with how hard and how long someone has been training, so a beginner's first block earns a smaller, slower load ramp.

1
ABC Fitness buys Replify to put AI reception and lead follow-up inside gym software
Replify, the Seattle startup formerly called HeyLibby, handles AI reception, lead capture and qualification, tour booking, class scheduling and missed-call follow-up across voice, text, email and chat, and is already used by Gold's Gym, UFC Gym and Club 24. In the same week LegitFit expanded its own LIA agents for operators.
Athletech News
KRALYSDirect read on the Kralys AI receptionist: the feature set is being bundled into vertical operating systems, so selling a standalone receptionist gets harder and the defensible move is owning the workflow around it.
2
January AI ships a free coach that remembers a client's health history and predicts glucose without a sensor
The 29 July update combines one-tap electronic health record import, glucose prediction with no continuous monitor, and wearable data in one free app, with an assistant that carries ongoing memory of the user's history. The platform is also being offered to other companies through an enterprise API and SDK.
Fitt Insider
SHINOMESteal the memory idea for the Shinome client PWA: a coach note that carries forward every past block beats a fresh check-in form, and the enterprise API is worth pricing before building glucose or nutrition features yourself.
3
AI coaching app VEYR opens a 1 million pound round at a 4.5 million pre-money valuation
The raise opened on 27 July with 400,000 pounds through Crowdcube and more than 40 percent already committed, including grant support from Google and Cloudflare. The money funds a go-to-market push after beta testing of VEYR Coach.
Fitt Insider
SHINOMETreat 4.5 million pounds pre-money for a pre-revenue AI coaching app as the ceiling benchmark, and note that grants and a crowd round beat chasing a fund at this stage.
4
STRONG Pilates will reach 25 US studios by the end of 2026 on a hybrid strength and cardio format
Openings across Boston, Los Angeles, Maryland, New York, Charlotte and Philadelphia through 2026 take the Australian brand to 25 US locations, with Miami, Portland and Charleston signed for early 2027. The format pairs Pilates with rowing and cycling on its own machines and is sold on longevity.
Fitt Insider
SHINOMEConfirms where the paying market sits for Shinome positioning: low-impact strength plus conditioning sold as longevity, not as a fat-loss promise, which is the same lane the scoped promise in Offer v1.3 already occupies.