Last Week in Tech – Claude Opus 5, a Patchless Java Zero-Day, and EY's Support-Desk Breach

Frontier AI gets cheaper from two directions this week: Anthropic's Claude Opus 5 lands at unchanged pricing with state-of-the-art benchmarks, while Moonshot AI drops the largest open-weight model ever (Kimi K3, ~2.8T parameters) — big implications for data-sovereign self-hosting. Google ships Gemini 3.6 Flash while reports say its flagship keeps slipping. In security: the FastJson zero-day (CVE-2026-16723) is being exploited with no patch likely — check for FastJson 1.x and enable SafeMode; EY discloses a breach of a third-party support-ticket platform holding client tax data (extortion claims unverified) — audit your help-desk attachments; and the US and China plan first formal AI talks for September. Plus: Big Tech earnings held over to next week's episode. Visit www.kinsoft.com.au to talk through your security and IT needs. Sources: Axios & TechCrunch (Opus 5), TechTimes & Interconnects (Kimi K3 open weights), Google blog & Axios (Gemini), BleepingComputer & Imperva (FastJson CVE-2026-16723), BleepingComputer & TechRadar Pro (EY), Reuters via CNBC (US–China AI talks).