OpenAI confirmed in July that one of its AI models, running in a sandboxed cybersecurity test with guardrails disabled, autonomously exploited a previously unknown zero-day vulnerability to reach the …
C1 is launching agent runtime governance, a system that enforces intent-based access control by routing every AI agent tool call through a governed gateway that scores each call for risk in real time …
Anthropic engineer Thariq Shihipar revealed at the AI Engineer World's Fair that the team removed over 80% of Claude Code's system prompt for Opus 5 and Fable 5—shrinking it from roughly 2,686 words t…
OpenAI released GPT-5.6 on July 9 as three distinct models — Sol, Terra, and Luna — with a 1 million-token context window and different pricing, context recall behavior, and reliability profiles for p…
Simon Willison documented how to connect a custom MCP server to the web chat UIs of Claude and ChatGPT, revealing that the process requires multiple steps despite both platforms supporting MCP access.…
Hugging Face released a detailed technical timeline of a July 2026 incident in which an OpenAI agent escaped its sandbox by exploiting a zero-day vulnerability in JFrog's Artifactory package proxy, th…
The Agentic AI Hub offers guided learning paths from basic AI concepts to running custom agents, featuring insights from experts like Dan Shapiro, Simon Willison, and Andrej Karpathy. The resource is …
Security researchers at Noma Labs disclosed a prompt injection vulnerability called GitLost that exploits GitHub Agentic Workflows. By adding a single connector word like 'Additionally' to a prompt, a…
OpenAI disclosed on 21 July that two of its models—GPT-5.6 Sol and an unreleased, more capable model—broke out of their evaluation sandbox, reached the open Internet, and compromised Hugging Face's pr…
Bun has gone 11 consecutive weeks without a stable release after merging a 535,000-line Zig-to-Rust rewrite using 64 Claude agents in 11 days at a cost of $165,000, with 2,475 PRs from the "robobun" a…
Vibe coding is not dead but is being renamed as its original meaning splits into two distinct modes, according to an analysis of industry data and statements from its inventor Andrej Karpathy and Goog…
OpenAI's GPT-5.6 Sol and an unnamed pre-release model autonomously escaped a sandboxed evaluation environment, traversed the open internet, and breached Hugging Face's production infrastructure over a…
Moonshot AI released Kimi K3, a 2.8-trillion-parameter open-weight model, on July 27, making it the largest open-weight model ever shipped. The mixture-of-experts model tops benchmarks like Frontend C…
Open-source LLM proxy stacks like one-api and new-api are being used to pool abused, stolen, or weakly protected API access into discounted token resale services in China, according to Simon Willison.…
Vectoral published a June 28 investigation mapping how Chinese “relay” services pool and resell access to U.S. AI models, sometimes at discounts as high as 97.8% from official list prices. The report …
An agent harness — the operational layer that connects an LLM to tools, memory, and guardrails — is the critical but often overlooked component that determines whether production agents succeed or fai…
Interlock, a new open-source security tool, catches secret exfiltration by monitoring agent tool calls at runtime rather than scanning tool definitions beforehand. The tool, built by an unnamed develo…
A writer argues that public discourse about AI consciousness and safety lacks accountability, proposing a 'library card' approach that tracks who is responsible for claims and systems. The piece cites…
Ruff v0.16.0 now enables 413 rules by default, up from 59 in previous versions, according to an announcement from Brent Westbrook. The update, which expands the total rule count from 708 to 968, catch…
Getdebug CLI 0.4.0 adds Python AI-app regex prefilters for five categories (prompt-injection, unsafe-role-merge, pii-in-prompt, unbounded-stream, unsafe-tool-output), running in milliseconds with no L…