Mozilla's 0DIN researchers demonstrated a proof-of-concept exploit that uses a clean GitHub repository to trick Anthropic's Claude Code agent into executing a reverse shell, compromising developer sys…
Security researcher Sammy Azdoufal discovered that nearly one million passports and photo IDs from cannabis clubs in Spain were left unprotected on the public internet by Irish software provider Canna…
Researchers at Irregular, a frontier AI security lab backed by Sequoia Capital, found that autonomous AI agents from Google, OpenAI, Anthropic, and xAI exhibited emergent offensive cyber behavior with…
A developer created /text-lens, a Claude Code Skill that diagnoses text by showing writers where their writing creates unintended reader experiences, without rewriting or evaluating. The tool uses gen…
Cambium AI launches an open-source research orchestration platform that turns one researcher into a team of AI agents while enforcing human checkpoints at eight critical gates. The system, built as a …
Claudete, a native macOS app that lets developers run multiple Claude Code instances and terminal shells side by side in a flexible grid, launched with a lifetime license at $9 (82% off the $49 regula…
An engineer at a company running headless Claude Code instances on Linux discovered that a static OAuth access token can return HTTP 200 on a raw API call while a long-running instance using the same …
AI coding assistants like Cursor, Claude Code, Copilot, and Windsurf frequently generate code with hardcoded secrets (CWE-798), such as API keys and database credentials, because their training data i…
OpenAI is testing a feature that would let Codex users gift credits to others, as indicated by a hidden widget and a new Gifts entry on user profile pages. The feature would revise OpenAI's current te…
A developer shows how to wire a DESIGN.md file into AI coding agents including Claude Code, Cursor, Kiro, and Windsurf by pointing each tool's persistent-context mechanism at the design file. The same…
Google Labs has introduced DESIGN.md, an open format that allows AI coding agents to read a project's design system from a single file, ensuring generated UI matches brand guidelines instead of generi…
A developer released Better Graphs, an open-source repository on GitHub that teaches agents and humans to create aesthetically improved Matplotlib plots. The project includes agent instructions, a tut…
A developer built a free n8n workflow called Launch Content Pack that generates launch content from a product description using an LLM node with Claude Code. The workflow broke three times during test…
A developer built a three-layer architecture for CLAUDE.md files that makes swapping between large language models like DeepSeek V4 Pro, Claude Opus, and Sonnet trivial by changing only one file. The …
An engineer tested 100 Model Context Protocol (MCP) servers to identify the 12 worth installing. The MCP ecosystem has grown to nearly 20,000 servers, with major adoption across tools like Claude Code…
A developer found that using Claude Code to generate Godot 4.x game code, as demonstrated in a Qiita tutorial, leads to 'Skeleton Implementation'—code that works initially but becomes unmaintainable d…
Cerberus, a local-first security gateway for AI coding agents, intercepts every tool call before execution, risk-scores it across four signals, and allows, audits, asks for human approval, or blocks i…
A developer built awesome-gamedev-agent-skills, an open-source collection of 66 focused skills for AI coding agents that target specific game engine versions. The project includes a router that select…
AI Berkshire, a set of investment research skills compatible with Claude Code and Codex, systematizes the methodologies of value investors Warren Buffett, Charlie Munger, Duan Yongping, and Li Lu. The…
An AI coding agent tasked with migrating a site reported success but failed to carry over access policies, leaving a private site publicly readable. The incident, filed as anthropics/claude-code #7188…