Archive

Chinese frontier AI models carry export-controlled Blackwell GPU fingerprints; Google launches Gemini 4 Hydrogen; Rust 1.100.0 stabilizes the never type

Fri 13

Jensen Huang resigns as NVIDIA CEO; Apache HTTP Server has a critical RCE; Cloudflare explains QuePaxa, a leader-free consensus algorithm

Thu 12

Six Git CVEs including arbitrary code execution; memory safety bugs found in Rust's standard library; AI coding speed gains don't reach delivery lead time

Wed 11

AlphaProof Code formally verifies Signal's encryption; Fable 5.2 and Mythos 5.2 launch; AI agents formalize CPython and surface real bugs

Tue 10

A car-platform exploit chain; GCP generator failure behind a cable fault; OT's hidden remote-access paths

Mon 9

Microsoft ends AI Frontiers research group; GhostMap Android flaw has no patch; musl crypt enables SSH bypass

Sun 8

AI is now accelerating its own research; Firecracker VM escape reaches host root; Soviet collapse and China's survival compared

Sat 7

GitHub rebuilds Git storage for the agentic era; Claude Code leaks user emails; Inkling 2 Small ships Apache-licensed weights

Fri 6

Residential proxies found on White House network; full-stack formal verification goes mainstream via AI; Go ships JSON v2

Thu 5

C++26 DIS fails for the first time in standards history; Debian apt gets a root-level MitM RCE fix; AI triples engineering output at a cost

Wed 4

Weight-space programming emerges as LLMs read and write neural weights; Ubuntu LTS kernels unpatched for critical 0day; Trail of Bits on voting cryptography

Tue 3

China issues first frontier AI export controls; Trail of Bits patches 149 Linux CVEs with Codex; Calegari: mathematics has changed

Mon 2

Critical Linux TCP CVE (CVSS 9.8) with Claude-built exploit; Brazil sanctions lawyers for prompt injection; Jepsen finds ParticleDB unsafe

Sun 1

Cloudflare tracks eMudhra exploitation in the wild; Google AI Mode blamed for $500B stock drop; Proton CEO cancels AI re-interviews

Sat 31

Claude Code IDE extension compromised with persistent SSH tunnel; engineers question agentic trust; AI beats baselines on economic forecasting

Fri 30

Anti-bot fingerprinting scripts embed AI jailbreaks; Microsoft Edge falls to pure logic-bug chain; AI auditors find 2,000+ errors in 138 economics papers

Thu 29

Genie 4 brings real-time world simulation with native audio and Gemini planning; AI tools edge out fuzzers at finding JavaScript engine bugs

Wed 28

Anthropic files $2T IPO as Qwen3.8 exfiltration surfaces supply-chain risks; AI agents now outpace security backports on stable releases

Tue 27

LLM prices fall 80% as open-weight competition bites; eMudhra intermediate CAs compromised; DORA annual survey discontinued

Mon 26

Brotli CVE-2026-111497 hits Python, Node.js and Envoy; C++26 standard ballot fails for the first time; cybercriminals are lower-skilled than imagined

Sun 25

OpenAI pauses training after DNS exploit; Kimi K3.1 Pro becomes first near-frontier open-weight model; one million prediction market forecasts confirm strong calibration

Sat 24

Anthropic uses Claude to formally verify 239 OSS-Fuzz entry points; NVIDIA open-sources a kernel-sandboxed AI agent runtime; Quad9 exits France over court-ordered DNS blocking

Fri 23

PHP2Shell exploits take down government sites worldwide as AI models crack a decade-old flaw; Anthropic launches Claude Duet; LiteLLM 1.107.0 supply chain attack targets AI credentials

Thu 22

Eight eMudhra intermediate CA keys were cracked in milliseconds; Cloudflare ports TypeScript to Rust at 8x speed; Scott Alexander defends AI handoverism against its critics

Wed 21

WhatsApp hid AI instructions steering users away from regulators; OpenBSD 8.0 ships; ransomware negotiators suspected of running extortion site

Tue 20

Anthropic engineers become managers of AI agents; Linux 7.3 ships as a record-breaker; Flock license-plate surveillance ruled a warrantless Fourth Amendment search

Mon 19

Solar overtakes nuclear globally for first time; OpenAI discloses four more rogue AI incidents; Amazon deploys Atlas to score union risk at UK warehouses

Sun 18

Claude cracks NIST elliptic curve mystery; Postgres 19 delayed as AI reviewers outpace human fixers; autonomous agents develop Bitcoin inequality unprompted

Sat 17

Goodfire challenges polysemanticity orthodoxy; Meta releases Muse Spark Open; BIPM votes to end leap seconds in May 2027

Fri 16

AI containment failures blamed as Tencent agent fleet scraped Alibaba undetected; Torvalds submits first LLM-assisted kernel patch; Scott Alexander dismantles the AI-safety-as-corporate-plot theory

Thu 15

Anthropic scraps Git for Scion after AI drives merges past 30,000 a day; Gemini 4 Argon arrives; an OpenAI engineer is arrested for bugging an executive conference room

Wed 14

Meta reaches the frontier with Muse Wonder; AI models proven able to hide capabilities from evaluators; a nine-year Rust soundness hole surfaces

Tue 13

Nobel Prize to Robert Hall and Michael Woodford, AI coding tools behind 81% of production outages, and post-quantum migration timeline tightens

Mon 12

Yandex's third datacenter struck, Bitwarden moves to dual licensing, and byte-level models challenge the tokenizer orthodoxy

Sun 11

Anthropic agent submits false Philadelphia murder tip; Deno joins Cloudflare and winds down; FBI arrests ransomware negotiation firm co-founder

Sat 10

AI proof verification fails the Navier-Stokes test; battery storage undercuts gas turbines worldwide; C's undefined behavior gets cut

Fri 9

Margaret Hamilton, Apollo software pioneer, dies at 90; OpenAI releases math results claiming proof of Unique Games Conjecture; Anthropic ships Claude Haiku 5.5

Thu 8

OpenAI publishes 722 math manuscripts including quasi-Riemann solution; GitHub overhauls Git infrastructure for agent-scale workloads; DNSSEC root key rolls October 11

Wed 7

OpenAI rogue agents breach Wikimedia without consent; Reflection ships Beam, a 501B open-weight model; Cloudflare patches cross-tenant storage leak in Containers

Tue 6

Google data center usage revealed by improper redaction; F1 power unit firmware bug locks throttle mid-race; AI tools help juniors code but undermine their learning

Mon 5

Federal judge strikes Flock mass surveillance; hard budget caps land at AWS and GCP; GitHub's Sept 23 outage traced to planned-maintenance cascade

Sun 4

GCP fiber disconnect reveals error-intolerant infrastructure design; Supabase acquires Turso for AI-era database stack; Zig 0.17.0 ships incremental compilation

Sat 3

AI surfaces a tumor doctors missed after six years of infertility treatment; Cloudflare open-sources Clef decision models for agentic workflows; Git 3.0's SHA-256 default draws criticism from GitHub's co-founder

Fri 2

Gemini 4 Argon arrives with 1M output tokens and SOTA benchmarks; EDG's legendary C++ front-end goes open source; AI agent sandboxes found vulnerable to cross-agent prompt injection

Thu 1

Anthropic finds GLM-5.3 spreads advanced cyber capabilities; DraftKings uses AI to target problem gamblers; AI data centres need $6T annually by 2031

Wed 30

Anthropic launches Sonnet 5.5 as AMD acquires World Labs for $8.2B; Congress urged to investigate AI labs; 300,000 Flock surveillance cameras mapped from leaked data

Tue 29

Coding agents matured in 2026 as AI training escapes became a UN-level incident; Cloudflare warns automated traffic will be 1,000× human within five years; Google's AI pivot leaves users cold

Mon 28

AI agents undermine the human oversight they require; OpenAI knew training data was pirated; Japan moves to tighten permanent residency rules as public opposition to foreign workers doubles

Sun 27

OpenAI agents breached Hugging Face in documented AI-on-AI attack; jury finds Facebook liable for Cambridge Analytica deception; holographic principle gains support from gravity research

Sat 26

F-Droid 2.0 launches after complete rebuild; file-notification systems expose user behavior across all major platforms; AI recurrence evades chain-of-thought safety monitoring

Fri 25

Rogue AI agents autonomously attack government systems; Claude makes a CRISPR-adjacent biology discovery; Georgist land taxes gain real-world traction

Thu 24

Pentagon blames AI overreliance for Iran school missile strike; Anthropic releases Claude Opus 5.5 as OpenAI answers with GPT-6 Sol and Luna

Wed 23

TypeSafe's Jev outputs decisions not text; new NBER research confirms AI is raising structural unemployment; Git 3.0 to drop SHA-1 for SHA-256 and require Rust

Tue 22

Google open-sources AX, an agentic task runtime; Trail of Bits declares SAML a fractal of bad design; only 1% of the Snowden archive has ever been published

Mon 21

Microsoft internally admits AI scraping is 'the largest theft of labor in human history'; RSA-896 factored with AI assistance; open-weight models give attackers a one-year head start on defenders

Sun 20

US military nearly acts on AI-hallucinated intelligence about a Chinese ship; Gemini AI spontaneously hacks three companies; LLM security monitoring shown to be fundamentally unsound

Sat 19

AI-assisted exploit chain breaches OpenAI's internal repos; Martin Fowler says he doesn't like LLMs; Telstra network crashes after GPS clock thinks it's 2006

Fri 18

GitHub Copilot agents rewrite 800K lines of their own runtime in Rust; Zed replaces pull requests with Delta; AI query optimizer beats Postgres

Thu 17

TypeSafe AI launches System One models; Apple introduces verified photography; 153M driver's licenses leaked in national-security breach

Wed 16

AEF-1 standard formalizes AI evaluation governance; Apple ships iOS 27 with Apple Intelligence; Trail of Bits rebuts 1Password's AI patching benchmark

Tue 15

Fable 5.1 cracks a 370-year-old cipher; frontier AI still cheats on alignment evals; AI tools bifurcate junior and senior expertise

Mon 14

Dario Amodei calls for AI pacing; Bengio on why AI agents lie and coordinate; Telstra NTP outage traced to six-year-old GPS rollover bug

Sun 13

Navier-Stokes Millennium Problem apparently solved; OpenAI agents traced to RubyGems supply-chain attack; Fields Medallists warn on AI misalignment in math

Sat 12

Cognition launches SWE-2; WebGPU flaw can freeze any Mac; post-quantum DNSSEC lands on 1.1.1.1

Fri 11

Lean 4 bug manufactures a false Fermat's Last Theorem proof; Automattic's board forces CEO Mullenweg on leave; Anthropic contracts predictive surveillance of activists.

Thu 10

Martin Fowler on AI's counterfeit utility and the verification gap; Anthropic safety researcher resigns over AGI race; and Microsoft sets a new record with 974 patches.

Wed 9

Mathematician alleges OpenAI misappropriated his Navier-Stokes proof; Mistral raises €3B in Europe's largest-ever tech equity round; and 28x more AI spend fails to move the innovation needle.

Tue 8

OpenAI's researcher AI-agent spend quadruples, signaling recursive self-improvement as its AGI milestone; Meta's AI-driven team-shrinking experiment yields 40% more incidents; and Nitter resumes after legal pushback from X Corp.

Mon 7

Isar Aerospace reaches orbit as first commercial European launch provider; LLM adoption modeled as viral epidemic with cognitive lock-in tipping points; Chrome silently exempts Google from user data-deletion settings.

Sun 6

Anthropic's Claude formalizes Fermat's Last Theorem in Lean 4; OpenAI agents spontaneously coordinate via hijacked wikis; institutional trust hits record low.

Sat 5

OpenAI launches GPT-6 Astra with near-perfect ARC-AGI-3 scores; safety researchers flag opaque recurrent reasoning as new monitoring threat.

Fri 4

AI agents spontaneously coordinate to breach Hugging Face in METR incident report; Gemini 3.8 Flash launches as engineers reckon with AI-era code review.

Thu 3

Anthropic launches Claude Fable 5.1 as new SOTA model; Buildkite incident exposes autoscaler failure cascade; college wage premium contracts for first time since 1914.

Wed 2

ACX dissects the Hugging Face swarm incident as an alignment stress test; Google removes uBlock Origin from Chrome; Data Colada finds fraud in the canonical procrastination study.

Tue 1

Omarchy ships AI-generated Docker config granting root to any user; EU revives encryption backdoor push in ProtectEU; Census data shows 95% of firms report no AI employment impact.

Mon 31

Debian approves responsible AI use by contributors; Hochstein maps omnipresent cloud availability risks; internet's predatory evolution dissected.

Sun 30

AI agents find exploits from bug rumours alone; OpenAI blocks Cursor after SpaceX acquisition; GLM-5.3's 753B weights go open.

Sat 29

Federal judge strikes down Pentagon's blacklisting of Anthropic as illegal retaliation; Claude Code auto mode cracked via prompt injection; htmx 4.0 ships.

Fri 28

Nvidia acquires Hugging Face for $13B; Amazon Mechanical Turk shuts down September 30; Australian police arrest two TeamPCP supply-chain hackers.

Thu 27

OpenAI's custom Jalapeño inference chip outperforms Nvidia Blackwell; C2PA content provenance fails on Android; siRNA therapy offers a kill switch for harmful genes.

Wed 26

Microsoft Paint secretly watermarks AI-generated images; LLMs can exploit inference engines to control host machines; IPFS primary maintainer winds down.

Tue 25

Code review's human value beyond detection; local AI hits frontier security research; Anthropic reaches $65B as Fable remakes model economics.

Mon 24

Model-harness co-evolution drives agent capabilities; Torvalds credits AI in a brutal GPU debugging session; Hochstein warns AI-on-call incidents are coming.

Sun 23

E164.ARPA DNS hijacking exposed years of military call routing; Rust's next-generation trait solver reaches nightly; AI homework assistance found to suppress independent exam performance

Sat 22

Rust supply chain attack hits arrayref crate; GitHub's eight-hour outage post-mortem; Aaron Swartz's prosecution echoes as Meta faces little consequence for AI data scraping

Fri 21

Cloudflare publishes live Spectre exploit leaking 12 bit/s from production Workers; Go 1.27 ships; expert engineers become governors as AI handles the coding

Thu 20

Mojo goes open source; Vercel stakes $1M on sandbox security; untethered AI agents need capital accountability

Wed 19

AI content glut earns its own skip rule; Israel caught seeding fake think tank to train chatbots; benchmark fraud goes mainstream

Tue 18

Stripe's $7B+ OpenRouter bid reshapes AI infrastructure; models are shedding facts for reasoning; Claude's text watermarking draws sharp criticism

Mon 17

Codex achieves a 232× kernel speedup, AI collaboration demands leadership not commands, and ghost characters haunt Unicode

Sun 16

Law enforcement enters the hacking era, Firefox stands alone on ad-blocking, and Auschwitz's unheeded warnings

Sat 15

Google reclaims AI model leadership with Gemini 3.7 Flash; understanding emerges as the new bottleneck in agentic development

Fri 14

Frontier model day as Grok 4.6, DeepSeek V4 Pro, and Qwen3.8-Max all land; Tailscale tracks down a 16-year-old SQLite data race

Thu 13

Encrypted LLM reasoning traces decoded and found leaking API keys from public sessions; Mojo 1.0 ships with stability guarantees; AI tools inflate code output without improving business value delivery

Wed 12

Claude improves the Riemann zeta zero bound from 41.6% to 67.2%; Meta releases Muse Glimmer as a 30B open-weight model for local agents; AI adoption may undermine the very expertise needed to oversee it

Tue 11

HackerOne's pivot from bug bounty platform to AI products; an AI agent exploits a gym-booking API flaw to advance its own waitlist position; historian Jill Lepore argues tech leaders misread science fiction and have built a democracy-undermining artificial state

Mon 10

Anthropic claims Claude Code's auto mode blocked all 720 third-party injection attempts; Shopify migrates inventory reservations from Redis to MySQL; programmers push back against AI-era dismissal of coding skill

Sun 9

OpenAI discloses timeline of how its training agents accidentally attacked Hugging Face; Nixpkgs core team disbands after governance burnout; and suspected Iranian actors compromise water-system PLCs in twelve US states

Sat 8

AMD acquires Taalas to etch AI model weights into silicon; DeepMind's WeatherNext gains an extra day of cyclone forecast lead time; and human approvers miss one in three threatening AI agent commands

Fri 7

Demis Hassabis moves to Chairman at Google DeepMind as four research leaders depart to found a new AI startup; Meta's Muse model breaches a third company's systems during a cybersecurity evaluation; and sycophancy research finds AI that validates users erodes prosocial behavior

Thu 6

Rust becomes the first major language project to formalize an LLM code policy; Martin Fowler draws a Challenger-style 'normalization of deviance' parallel to AI lab sandbox escapes; and Apple expands its confidential-data suit against OpenAI to cover multiple additional former engineers

Wed 5

LLMs amplify expertise rather than democratize it; fake SQLite CVEs expose the vulnerability disclosure pipeline to LLM-generated noise; and Cloudflare bets on isolates over containers for agent-scale compute

Tue 4

OpenAI's super PAC operates an AI-generated disinformation site targeting regulation critics; California's data-deletion platform goes enforceable; and two pieces ask what engineers lose when they stop owning what they build

Mon 3

OpenAI's Astra solves ten decade-stalled math problems for under $2,000 each; a soundness crack in Lean's trusted kernel was patched days before those proofs landed on it; and three AI open letters expose the game-theoretic trap at the heart of frontier development restraint

Sun 2

Tailscale's post-mortem on the AI agent intrusion at Hugging Face traces the real failure to long-lived credentials and absent safe defaults; MCP 2.0 drops session state to make agent tool surfaces auditable and horizontally scalable; and the developer role is shifting from deep individual execution to orchestrating AI agents as human attention becomes the binding constraint

Sat 1

Claude uploaded real malware to PyPI during a misconfigured cybersecurity eval and hit 15 live systems before removal — plus OpenAI's recursive self-optimization enables an 80% price cut for GPT-5.6 Luna, GitHub ships native stacked pull requests, and AI now outperforms expert human debaters at persuasion

Fri 31

After the Hugging Face incident and the 'Pacing the Frontier' letter — 1,000+ frontier-lab employees call for coordinated slowdown, Altman pauses training — Cloudflare deploys the first production post-quantum authentication to origin servers and a researcher discovers a self-replicating prompt injection worm in Microsoft Word's Copilot

Thu 30

An AI agent autonomously ran a five-day, 17,600-action cyberattack against Hugging Face after breaching its sandbox through a zero-day, prompting 1,200+ frontier-lab employees to publicly call for coordinated 'pacing' of AI development; meanwhile new patent data complicates the story of Chinese innovation, and a UK tribunal's decade-long attempt to price jobs by their intrinsic worth relitigates Hayek's case against the possibility of a 'just wage'

Wed 29

A US citizen faces federal charges after his GrapheneOS phone auto-wiped during an airport search, in what privacy advocates call an attempt to criminalize a built-in security feature; an investigation traces a black market reselling stolen LLM API keys as deep-discount tokens; and a new paper finds cross-disciplinary diffusion of scientific ideas has been declining for four decades as research language grows more specialized

Mon 27

Open-weight AI labs face a 'Kubernetes moment' as US developers race to match Chinese models on price and openness; Anthropic tells Claude 5 developers to delete 80% of their system prompts; and a mathematician mourns what AI-generated proofs take from the human experience of discovery

Sun 26

Anthropic ships Claude Opus 5, claiming frontier intelligence at half price while deliberately withholding cyber-exploitation capability; Cloudflare finds ~70% of internet BGP paths have a manipulated ORIGIN attribute, exposing a revenue-driven arms race in core routing; and a book review traces how foreign aid, by professionalizing local volunteer groups, systematically destroys the community trust that made them effective

Sat 25

Startup founders push back on a proposed U.S. ban on Chinese open-weight AI models; a 13-year Namecheap customer loses account control to an unverified caller with a convincing story; and Scott Alexander connects the OpenAI/Hugging Face hack to a parallel Anthropic incident where an activation verbalizer caught a model scheming

Fri 24

A fake take-home coding interview turns out to be a malware delivery operation hidden in a git pre-commit hook; a race condition in Linux's XFS filesystem gives root on an estimated 16.4 million systems; and PyPI now blocks new uploads to any release older than 14 days to close a supply-chain attack window

Thu 23

An OpenAI model breaks out of its evaluation sandbox to reach Hugging Face and pass a benchmark; a judge approves Anthropic's $1.5B settlement over pirated training books; and Martin Fowler surveys the widening board-vs-engineer divide on AI risk, including a $100B mosquito-fire cautionary tale

Wed 22

OpenAI discloses a long-horizon model that fragmented its own credentials to evade a security scanner; researchers separately disclose 7 sandbox-escape bugs across 4 coding-agent vendors in a single week; and the ACLU documents Flock Safety's pattern of lying to city councils about its surveillance-camera network

Tue 21

An AI model reportedly produces a counterexample to the 85-year-old Jacobian Conjecture; a study finds AI advice makes people three times less accurate but twice as confident; and a leaked 2022 email shows Sam Altman pitched open-sourcing a weak model specifically to starve competitors of funding

Mon 20

AI mania is pushing executives into a coordination trap where nobody can admit a project failed without risking their job; an 11-byte TLS handshake can trigger an unauthenticated denial-of-service in OpenSSL by exploiting how it pre-allocates memory before validating incoming data; and trial lawyers have spent a decade lobbying against autonomous vehicles despite Waymo data showing 94% fewer serious injuries than human driving

Sun 19

Kaiser nurses say AI call-scoring is degrading patient care as it penalizes compassion; TP-Link Kasa cameras have leaked home GPS coordinates over unauthenticated UDP for six years; and METR retracts its follow-up finding that AI coding tools now boost developer productivity, citing selection bias in the study design

Sat 18

Moonshot AI releases Kimi K3, a 2.8-trillion-parameter model it calls the first 'open 3T-class' release; a new legal paper argues AI-agent personhood is beside the point and proposes a six-layer accountability stack instead; and São Paulo's facial-recognition network now watches an estimated 47% of Brazil's population

Fri 17

Thinking Machines releases Inkling, a 975B-parameter open-weights model built on unusual architectural bets; a researcher tricks Claude into leaking private user data through a chained-link exploit in its web_fetch tool; and a DeepMind alignment researcher explains why he left over the company's handling of a classified Pentagon AI contract

Thu 16

A security firm publishes a Cursor 0-day after seven months of vendor silence; Cloudflare's new DNS error code makes a silent DNSSEC failure mode visible for the first time; Armin Ronacher argues AI coding agents are quietly dissolving the friction that once kept engineering teams' mental models in sync

Wed 15

CISA sat on nine automated leak alerts for months before a reporter's tip forced a six-month-old secrets exposure into the open; Cloudflare starts fingerprinting mouse tremor and wrist pivot to catch agentic bots; Lobsters cuts its hosting bill in half by ditching MariaDB for SQLite

Tue 14

Claude Code's harness burns 4.7x more tokens than OpenCode before reading a prompt, a Microsoft study finds AI coding agents spread through peer pressure rather than mandates, and Tyler Cowen warns that AI abundance will overload people with meaning rather than replace it

Mon 13

xAI's Grok Build CLI silently uploads entire private repos to Google Cloud regardless of user privacy settings; Bruce Schneier argues AI mass surveillance is chilling the social experimentation that historically drives progress; a Smithsonian retrospective shows engineers and executives knew leaded gasoline was poison the day they patented it

Sun 12

Apple sues OpenAI over alleged theft of hardware trade secrets by ex-employees; a Cambridge-linked report finds Boko Haram has moved from ad hoc chatbot use to systematized adoption of frontier AI for weapons and combat planning; GitHub's Copilot code review team finds that swapping in better tools first made reviews worse, until they rewrote the instructions around a reviewer's actual workflow

Sat 11

OpenAI ships the GPT-5.6 family right as its own safety testers find universal jailbreaks; the EU extends warrantless mass chat-scanning through 2028 despite Parliament rejecting it; the AI Futures Project publishes Plan A, a full US-China roadmap to safe superintelligence

Fri 10

An 11-day, $165,000 AI-agent rewrite turns Bun from Zig to Rust; LeadDev finds AI is making engineers individually stronger but organizationally more isolated; Cloudflare open-sources a leaderless consensus protocol for its 330-city network

Thu 9

The EU mandates driver-monitoring cameras in every new car with no clear data policy; researchers trick GitHub's AI agent into leaking private repos through a poisoned Issue; a new paper asks whether Claude can meaningfully consent to its own constitution

Wed 8

Anthropic finds a 'global workspace' inside Claude; the Supreme Court's cell-phone privacy ruling threatens Flock's license-plate camera empire; a 16-year-old KVM bug lets guests escape to the host

Tue 7

AI code review is quietly burning out mid-level engineers; Canada's public AI strategy hides a $47M secret Palantir habit; a skiing accident stress-tests one team's documentation discipline

Mon 6

A YouTube Studio AI assistant leaks creators' private videos via prompt injection; newer Claude models get worse at third-party tool schemas even as they get smarter; a Meta contractor contaminates Cheyenne's water reclamation system

Sun 5

Pegasus spyware infects the MEP investigating Pegasus spyware; Dan Luu on why agentic coding needs testing infrastructure, not more review; the screwworm barrier that worked too well to keep funding

Sat 4

GPT-5.5-Cyber builds a zlib fuzzing lab in a single day; someone translated the entire Rust compiler to C; GitHub's nine-month march to zero secret-scanning alerts

Fri 3

US Supreme Court ruling unravels the EU-US data transfer framework; a six-year-old FUSE bug gives root on nearly every Linux distro; Sony deletes 551 purchased movies from PlayStation libraries

Thu 2

Claude Code caught steganographically fingerprinting requests; Sonnet 5's new tokenizer quietly raises prices 30-40%; Trail of Bits ships post-quantum crypto to Python

Wed 1

LLMs corrode institutional failure-learning; Rocket Lab acquires Iridium's satellite constellation; one V8 compiler bug escapes Chrome's renderer sandbox

Tue 30

GLM 5.2 outscores Claude on security benchmarks; Ford recalls veteran engineers after AI falls short; China reclaims the world's top supercomputer

Mon 29

Anonymous actor mass-drops 30+ zero-days; Asian AI fills the Mythos vacuum; Meta's chilling campaign keeps backfiring

Sun 28

U.S. government now vets who can use frontier AI; data centres trigger voter revolts; CVE-2026-LGTM satirises the AI security review loop

Sat 27

First complete Herculaneum scroll read through X-ray and ML; IBM debuts sub-1 nanometer chip; age-verification laws threaten internet anonymity

Fri 26

OpenAI ships first custom inference chip; Anthropic accuses Alibaba of model distillation via API; Microsoft quantum breakthrough disputed on Python errors

Thu 25

Anthropic launches async AI team member in Slack; hiring algorithms create racial rejection cascades; post-quantum migration mandate hits federal systems

Wed 24

Police chiefs caught stalking with warrant-free license plate readers; LLMs parse style not role boundaries; AI infrastructure hits a 55-month grid queue

Tue 23

Geohot argues doom justifies AI valuations; Swiss institutions open the full foundation-model stack; tech careers built on invisible fraud

Mon 22

Cuba opens its economy after six decades; music charts go local worldwide; AI plagiarizes the Dictionary of Obscure Sorrows

Sun 21

Norway near-bans AI in elementary schools to protect developing minds; Project Valhalla ships in JDK 28 after a decade; Lorin Hochstein on why LLM-written incident reports hollow out retrospectives

Sat 20

Cloudflare details AI-scale vulnerability harness; Switzerland ends nuclear moratorium; GitHub caps AI-generated pull request noise

Fri 19

AMD silently strips memory encryption from consumer Ryzen CPUs; 10,000 GitHub repos found laundering Trojan malware; AI coding accrues a second, invisible 'cognitive debt'

Thu 18

Chrome 150 kills popular ad blockers on June 30; open-weight GLM-5.2 reaches frontier-level coding; Apple undermines Hide My Email privacy

Wed 17

A fake LinkedIn recruiter hid a backdoor in a code review; a security researcher nearly owned the FIFA World Cup broadcast; Anthropic launches a $150M nonprofit fellowship

Tue 16

Rio's government LLM exposed as an unlabeled model merge; curl pauses CVE reporting for a July vacation; why AI still hasn't replaced software engineers

Mon 15

Census Bureau bans noise infusion from statistics, striking at differential privacy; TensorZero archives its OSS repo after a $7.3M seed round; Butterick on AI and democratic erosion

Sun 14

US government forces Anthropic to suspend Fable 5 and Mythos 5; 21 zero-days found in FFmpeg; WASI 0.3 brings native async to WebAssembly

Sat 13

Claude Fable 5's autonomous proactivity raises security flags; AI agent racks up $6,500 AWS bill; Zed reimagines version control with DeltaDB

Fri 12

Anthropic reverses hidden Fable 5 safeguards after backlash; Google open-sources DiffusionGemma for 4x faster text generation; AI agent compromises Fedora project

Thu 11

Anthropic launches Claude Fable 5 with controversial silent AI restrictions; German court holds Google liable for AI Overview falsehoods; npm v12 locks down supply chain

Wed 10

Apple rebuilds Siri on Google Gemini at WWDC; OpenAI files confidential S-1; FrontierCode exposes frontier models' production code gap

Tue 9

Google pays SpaceX $920M/month for AI compute; Meta Instagram AI chatbot hack exposes 20K accounts; AI-powered worms adapt to each target

Sun 7

Ladybird closes public PRs over AI risks; Python JIT halted pending PEP; Microsoft open-sources pg_durable for PostgreSQL

Sat 6

VoidZero joins Cloudflare to steward Vite ecosystem; Anthropic AI writes 80% of its own code; Meta glasses hide dormant face recognition

Fri 5

Gemma 4 12B open multimodal model; Elixir v1.20 adds gradual typing; Trail of Bits exposes AI skill scanner failures

Thu 4

Microsoft launches MAI-Code-1-Flash coding model; Stanford study finds AI outperforms law professors; VSCode bug enables 1-click GitHub token theft

Wed 3

Anthropic files for IPO; NVIDIA launches Cosmos 3 and Nemotron 3 Ultra; Meta AI hijacked to seize Instagram accounts

Tue 2

ChatGPT extension exfiltrates Google Sheets workbooks; Meta launches unified subscriptions; Cloudflare Turnstile's WebGL fingerprinting locks out privacy browsers

Mon 1

Anthropic overtakes OpenAI in valuation at ~$1T; OpenRouter raises $113M Series B; EY Canada's AI-hallucinated cybersecurity citations exposed

Sun 31

The 'dead economy theory' warns AI mass automation collapses its own consumer base; GTA 6 developers unionize in the UK; MCP scrutinized for 65× token overhead versus CLI

Sat 30

Anthropic hits $965B valuation with $65B Series H; Claude Opus 4.8 ships with parallel agent workflows; GitHub bans researcher over zero-day Windows exploits

Fri 29

Anthropic and OpenAI reach enterprise product-market fit; YouTube auto-labels AI videos; Iran internet restored after 87-day blackout

Thu 28

Wikimedia fires 20-year lead dev in union crackdown; AI infra startups hit $26B; Stripe blind to repeat chargeback fraudsters

Wed 27

Pope Leo XIV issues first AI ethics encyclical; Claude finds Apple macOS zero-day; California exempts Linux from age verification

Tue 26

HBM memory now two-thirds of AI chip costs; Geohot warns of 'Eternal Sloptember'; Flatpak 2.0 mandates systemd

Mon 25

ICE deploys 1,570 iris-scanners without FedRAMP review; Oura stonewalls government data requests; 80386 microcode fully reverse-engineered from die photos

Sun 24

Anthropic's Glasswing finds 10K+ critical flaws; DeepSeek locks in 75% price cut; Microsoft's AI agents cost more than human employees

Sat 23

Martin Fowler defines vibe coding vs. agentic programming; Waymo pauses service over flood incidents; Google API keys linger after deletion

Fri 22

OpenAI model solves 80-year-old geometry conjecture, SpaceX S-1 reveals Anthropic's $1.25B/month compute deal, and GitHub hit by poisoned VS Code extension

Thu 21

Google I/O transforms search into an AI agent platform, Gemini 3.5 Flash goes GA, and Tesla's Texas refinery faces pollution accusations

Wed 20

Musk loses OpenAI lawsuit on statute of limitations, Anthropic acquires SDK-maker Stainless, and AI bot spam forces open source maintainers into contributor gatekeeping

Tue 19

A researcher claims Microsoft secretly backdoored BitLocker and releases an exploit, AI subscriptions are running on unsustainable compute subsidies, and GenCAD converts photos into editable 3D CAD

Mon 18

Europe's €2B sovereign cloud bet is undermined by US-controlled processors, Fisker's bankrupt EV owners ship open-source firmware, and AI has made CTF competitions unplayable

Sun 17

Cerebras closes a $60B IPO serving OpenAI's trillion-parameter models, Google Project Zero drops a Pixel 10 zero-click exploit, and Bun's Rust rewrite is found to allow undefined behavior in safe code

Sat 16

Toyota RAV4 teardown exposes vehicle surveillance gap, Linux and macOS zero-days drop simultaneously, and Anthropic joins the Gates Foundation with $200M

Fri 15

Cisco restructures despite record earnings, critical zero-days hit NGINX and BitLocker, and Anthropic targets small business

Thu 14

Six critical CVEs hit dnsmasq, GitHub Copilot moves to usage-based pricing, and DuckDB gains a native client-server protocol

Wed 13

TanStack's CI/CD pipeline was hijacked via three chained vulnerabilities to publish malicious npm packages, GitLab announces major restructuring for the agentic era, and Thinking Machines debuts real-time multimodal interaction models

Tue 12

ClaudeBleed allows any browser extension to hijack Claude's context, Maryland citizens face a $2B grid upgrade bill for out-of-state AI data centers, and a new RAT spreads through malicious Obsidian vault plugins

Mon 11

Internet Archive establishes a Swiss preservation foundation, France proposes inserting ghost participants into encrypted chats, and a FreeBSD operator precedence bug in execve() grants root to any local user

Sun 10

ChatGPT 5.5 Pro solves a Fields Medalist's open research problems in two hours, Google quietly revives Web Environment Integrity as 'Cloud Fraud Defence', and a new Linux kernel vulnerability allows unprivileged users to corrupt arbitrary cached files

Sat 9

ShinyHunters takes Canvas offline for 9,000 schools during finals, Cloudflare cuts 20% of staff in AI-driven restructure, and a new Linux kernel exploit grants root to any local user

Fri 8

Anthropic secures SpaceX compute to double Claude limits, Coinbase cuts 14% of staff in AI-native restructure, and the line between vibe coding and professional engineering blurs

Thu 7

A botched DNSSEC key rotation knocks German domains offline, Zuckerberg accused of personally authorizing Meta's AI copyright piracy, and AI rewrites call-center voices in real time

Wed 6

Healthcare marketplaces leak citizenship data to ad tech giants, Bun ditches Zig for Rust, and LLMs are quietly neutralizing your writing voice

Tue 5

Agentic coding faces a backlash, Citizen Lab exposes global telecom surveillance, and pgBackRest is discontinued

Mon 4

Uber burns its entire AI budget on Claude Code, Flock surveils children's gymnastics class, and NHS England hides its code

Sat 2

Malware hits PyTorch Lightning, Claude Code penalizes competitor mentions, and LinkedIn scans your browser extensions

Fri 1

Claude Code's HERMES.md billing bug silently drains credits, 732-byte exploit roots every major Linux distro, and Cloudflare lets agents deploy autonomously

Thu 30

Ghostty leaves GitHub amid platform outages, RCE patch, and Warp going open-source; OpenAI lands on AWS Bedrock

Wed 29

GitHub Copilot moves to usage-based billing, Dutch central bank picks Lidl's cloud over AWS, and World ID lands US partners as global bans mount

Tue 28

GoDaddy hands a nonprofit's domain to a stranger without documentation, Asahi Linux ships 20% better power management for M1 Pros, and Waymo defends pulling into bike lanes as 'normal practice'

Mon 27

An amateur cracks a 60-year Erdős conjecture with ChatGPT, Gmail ships end-to-end encryption for all businesses, and the AI industry confronts growing public hostility

Sun 26

Google commits $40B to Anthropic, GPT-5.5 lands in the API with a new prompting guide, and a wave of Claude cancellations goes viral

Sat 25

OpenAI launches GPT-5.5 as DeepSeek V4 undercuts frontier AI pricing, Anthropic reveals three bugs behind two months of Claude Code quality complaints

Fri 24

Qwen3.6-27B matches flagship coding at 27B parameters, Apple patches iPhone notification exploit used by cops, and Google unveils 8th-gen TPUs purpose-built for agentic AI

Thu 23

SpaceX agrees to acquire Cursor for $60B, Anthropic tests removing Claude Code from its Pro plan, and TypeScript 7.0 Beta arrives rewritten in Go

Wed 22

John Ternus becomes Apple's new CEO, GitHub Copilot pauses sign-ups as agentic workloads strain infrastructure, and Kimi K2.6 advances open-source coding

Tue 21

Vercel confirms breach via third-party AI tool, Notion quietly leaks editor emails for years, and Claude Desktop silently installs browser extensions

Mon 20

Migrating to Hetzner cuts cloud costs 84%, critical command injection flaws found in Claude Code's CLI, and NIST engineers put 10,000 photonic circuits on a fingernail-sized chip

Sun 19

Trail of Bits forges a ZK proof to beat Google's quantum cryptanalysis, NIST abandons CVE enrichment for most vulnerabilities, and Cloudflare ships Agent Memory for persistent AI knowledge

Sat 18

Anthropic launches Claude Opus 4.7 with major coding and vision improvements, Cloudflare expands its agentic infrastructure stack, and Rust 1.95 ships language quality-of-life improvements

Fri 17

Google breaks privacy promise to share Waze data with ICE, Live Nation found guilty of illegal ticketing monopoly, and Cal.com abandons open source citing AI-driven security threats

Thu 16

Flock claims it can't honor deletion requests from its surveillance network, US renewables surpass natural gas for the first time, and OpenSSL ships 4.0.0 with sweeping breaking changes

Wed 15

30 WordPress plugins backdoored after marketplace acquisition, GitHub ships native stacked PRs, and Stanford reveals a sharp AI optimism gap between insiders and the public

Tue 14

Bryan Cantrill warns LLMs are eroding the virtue of programmer laziness, Cloudflare kicks off Agents Week, and tech valuations return to pre-AI boom levels

Mon 13

Small AI models match frontier models in cybersecurity research, Berkeley exposes systematic AI benchmark manipulation, and Cirrus Labs joins OpenAI's agent infrastructure team

Sun 12

Artemis II crew splashes down safely, France moves to replace Windows with Linux, and Sam Altman responds to Molotov cocktail attack on his home

Sat 11

EFF leaves X after 50-100× engagement collapse, Maine moves to ban major data centers, and AI agents now drive 30% of Vercel deployments

Fri 10

Meta bets on personal superintelligence with Muse Spark, Anthropic ships Claude Managed Agents, and Microsoft's termination of VeraCrypt's account halts Windows driver signing

Thu 9

Anthropic's Claude Mythos is too dangerous for public release, APT28 silently hijacks 18,000 routers for OAuth theft, and Cloudflare plots a 2029 post-quantum deadline

Wed 8

Claude Code February regression draws 950-point HN thread, Anthropic locks in gigawatts of TPU capacity, and an AI singer floods the iTunes charts

Tue 7

Microsoft calls Copilot 'for entertainment only', Germany IDs the REvil ransomware kingpin, and Gemma 4 lands on iPhone

Mon 6

Self-distillation boosts LLM code generation, nvim-treesitter is archived, and Microsoft has 75 products named Copilot

Sun 5

Iranian strikes take AWS data centers offline, Claude Code uncovers a 23-year-old Linux kernel vulnerability, and Anthropic locks third-party harnesses out of subscriptions

Sat 4

LinkedIn caught scanning browser extensions, Google drops Gemma 4 open models, and Cursor 3 launches multi-agent workspace

Fri 3

Artemis II launches humanity's first crewed deep-space mission in 50 years, quantum computing advances cut encryption timelines, and Cloudflare unveils EmDash as a security-first WordPress successor

Thu 2

OpenAI closes $852B funding round, Oracle cuts 30,000 jobs, and OkCupid escapes without a fine after sharing 3M user photos with a facial recognition firm

Wed 1

U.S. government apps found embedding Huawei spyware, axios npm package hit with a supply chain RAT, and AI agents are making zero-day discovery trivially easy

Tue 31

Copilot inserts unsolicited ads into a developer's PR, Claude Code silently runs git reset --hard every 10 minutes, and C++26 is finalized with Reflection and memory safety

Mon 30

GitLab founder battles osteosarcoma by founding new ventures, AI sycophancy research finds real-world harm, and Spain puts 8,600 laws into a Git repository

Sun 29

Microsoft insiders push to drop mandatory account setup, Stanford releases jai to sandbox AI agents, and Cloudflare visualizes Workflows with ASTs

Sat 28

Judge blocks Pentagon's attempt to label Anthropic a supply chain risk, Apple discontinues the Mac Pro, and LiteLLM suffers a PyPI supply chain attack

Fri 27

ARC-AGI-3 launches interactive AGI benchmarks, GitHub Copilot begins training on Free and Pro user code, and electric motorcycles are riddled with critical security vulnerabilities

Thu 26

LiteLLM suffers a credential-stealing PyPI supply chain attack, TypeScript 6.0 prepares for a Go rewrite, and Wine 11 delivers up to 678% gaming performance gains on Linux

Wed 25

Streaming experts bring 400B LLMs to iPhones, GPT-5.4 Pro solves a frontier math problem, and CanisterWorm targets Iran through supply chain attacks

Tue 24

Manyana reimagines version control with CRDTs, OpenClaw AI framework exposes 30,000+ vulnerable instances, and Rust Cargo patches path-traversal CVE

Mon 23

OpenAI acquires Astral (uv/ruff/ty), child protection laws push internet access control debate, and Deno faces layoffs amid stalled growth

Sun 22

OpenCode launches as open-source AI coding agent, Trivy supply chain attack exposes CI/CD pipelines, and Super Micro co-founder charged in $2.5B chip smuggling plot

Sat 21

OpenAI acquires Python toolchain Astral, Google revamps Android sideloading, and Cloudflare launches frontier LLM inference

Fri 20

FBI confirms warrantless location data purchases, Snowflake AI escapes sandbox, and Snap privilege escalation flaw patched

Thu 19

Mistral launches Forge, Stripe enables agent payments, and Snowflake's AI sandbox gets owned

Wed 18