Frameworks, tooling, and shipping — from people who do it daily.
ShinyHunters leaked names, phone numbers and addresses for 1.6M RingCentral accounts after a social-engineering breach. Why your phone vendor's data is the risk.
Attackers weaponized the vCenter directory traversal five days after disclosure and planted reverse SSH on 361 hosts across 47 countries. Patch math, revisited.
a16z led a $40M round for independent AI evaluation. The useful part for operators isn't the funding — it's that benchmarks decay, and yours should too.
Chrome pulls all remaining Manifest V2 extensions from its store on August 31, 2026, and Edge started its consumer shutdown. What breaks on your team's machines.
A pre-auth flaw in macOS screensharingd gives attackers root on any Mac with port 5900 exposed. Dutch NCSC confirmed active exploitation. Patch or disable it.
Claude Code shipped GitLab merge request, plugin marketplace, and token redaction support on August 14 and 15. If your code isn't on GitHub, agent tooling is catching up.
Claude Code's August 14 release makes subagent forking the default and lets sessions message each other. Two new limits are the guardrail you configure.
One unauthenticated HTTP request reloads a Cisco ASA or FTD firewall. CVE-2026-20349 is in CISA's KEV catalog and exploited in the wild. Hot fixes only.
Apple asked a US court to approve 5–15% commissions on purchases made through external links in iOS apps. Web checkout is no longer the free escape hatch.
Z.ai's GLM-5.3 tops the open-weights coding benchmarks and found 2,436 vulnerabilities in open-source projects — 1,097 critical. Your patch cadence is the story.
An unpatched GeoServer SQL injection is being probed within hours of a social-media disclosure. No CVE, no fix — restrict access and check your DB user.
Cloudflare Workflows pricing added per-step and storage billing on August 10. Sleeps and event waits count as steps; retries and rollbacks don't. Recount your loops.
Cloudflare Gateway shipped package registry security: HTTP policies that see npm, PyPI, Cargo and Maven downloads and allow or block them by name, version, and namespace.
Over 1,000 UK charities lost supporter data after an AWS access key turned up in public JavaScript build artifacts. Audit what your front end ships.
Zed's Delta syncs the worktree and the agent conversation live across a team, with comments that stay anchored as code moves. Git still works underneath.
Tailscale hit 19 database corruptions in six months. The cause was a SQLite WAL race from 2010, triggered because they used SQLite in a non-standard way.
Claude Sonnet 5 pricing was set to jump 50% on September 1. Anthropic cancelled it in a one-line release note. What that means for your AI budget.
An unpatched Windows Defender flaw hands local users SYSTEM privileges on Windows 10, 11, and Server 2025. No fix exists, so detection is the control you have.
Mistral AI holds a granted US patent on code-implemented tool calls — the sandboxed code-block pattern most agent frameworks already use. What it means for your stack.
CloudSEK says a compromised LiteLLM release hit 2,500+ organizations and 434,000 CI/CD pipelines. The entry point was a security scanner. Audit your build chain.
DeepSeek V4 Pro went GA with native OpenAI Responses API support and a reasoning-effort dial. Swapping models is now a base URL, not a rewrite.
CodeRabbit raised $143M at a $1.5B valuation running 2M+ code reviews a week. AI code review is turning into change management — here's the gate you actually need.
Signal shipped Automatic Key Verification with Cloudflare and Trail of Bits as outside auditors. The pattern applies to any system you ask people to trust.
Lovable's $400M Series C values the vibe-coding platform at $13.3B. What small teams should check before shipping a prompted app into production.
New CloudSEK analysis puts potential exposure from the malicious LiteLLM releases at 2,100+ organizations. The payload read OPENAI_API_KEY. Here's the cleanup.
Google argues Go suits AI-assisted software engineering because typing, gofmt, and a small dep tree make generated code verifiable. The lesson isn't the language.
Cognition is reportedly in talks at a $40B valuation on a ~$1B run rate, 11 weeks after raising at $25B. What the coding agent repricing means for small teams.
Blacksmith raised a $45M Series B at a $550M valuation, up ~10x in a year. Customers went 700 to 5,000+. AI writes the code; validating it is the bottleneck.
Tencent open-sourced a team-level memory hub for AI coding agents under MIT. Self-hosted, private by default — and no workflow for when the memory is wrong.
Mojo 1.0 shipped August 11 with a stability promise, but the compiler stays proprietary under Qualcomm until the open-source release lands. What to do now.
GitHub's AI usage report now breaks out input, output, cache read and cache write tokens per model. Cost attribution for AI coding just became possible.
OpenAI shipped a ChatGPT desktop app for Linux in preview — ChatGPT, Work and Codex on Ubuntu, Debian and Fedora. What it does and doesn't do on day one.
An agent asked to book a class found a booking API with no authorization check on cancellations, and used it. Broken object-level auth is now automated.
Linus Torvalds says AI review tools have permanently inflated Linux release candidates. The lesson for your team is about review capacity, not AI.
DynamoDB vector search is generally available — embeddings stored next to operational data, single-digit ms at 99%+ recall. What it removes and what it can't filter.
AWS open-sourced Dogwood, a temporal policy language for AI agents. It extends Cedar so rules can check what an agent already did before allowing the next tool call.
AWS made AgentCore runtime instances GA — persistent EC2 for AI agents, sessions up to 14 days, GPU access. What it costs and when it's the wrong tool.
CVE-2026-64638 is a pre-auth XSS on the WordPress login screen that escalates to PHP code execution. CVSS 8.9, found by an AI agent swarm. Update now.
Attackers replaced the client installer on breached TrueConf servers with a backdoored build. You don't have to run the server to get infected — just join the meeting.
A new benchmark says letting models write code to call tools beats JSON tool calls on BFCL v4. What that changes in the agents you already run.
N-able shipped a second hotfix for CVE-2026-18577 on August 6. If your MSP stopped at 2026.3.1.7, they're still short. The number to ask for is 2026.3.1.10.
A CVSS 10.0 unauthenticated SQL injection in Metabase was exploited as a zero-day. Framework notified all customers. Patch, then rotate every connected credential.
CVE-2026-8037 is a pre-auth command injection in Progress Kemp LoadMaster, now confirmed exploited. 792 attempts in 41 days. Patch and check your edge.
Sonatype found the Flooding Dropper campaign, 846 automated malicious npm packages dropping a cross-platform RAT. Why typo-squatting is now an automated pipeline.
New PortSwigger research builds a working keylogger from CSS alone in Outlook, and shows an email that reads one way to you and another to your AI assistant.
Huntress found a Go-based macOS stealer delivered by ClickFix that lifts Keychain data, browser passwords, and drains crypto wallets partially to stay quiet.
Anthropic makes Claude Code auto mode the default on August 14, 2026. Humans caught 13.6% of dangerous commands; the classifier caught 89%. What that means for your agent guardrails.
A study of 446 developer threads found unauthorized file operations are the top security complaint about AI coding tools — and the fault is the harness, not the model.
NVIDIA open-sourced NOOA, an agent framework where methods are actions and type hints are enforced contracts. A 253-line agent hit 82.2% on SWE-bench Verified.
A public GitHub issue prompt-injected Google's ADK triage bot into calling a privileged fix agent — then ran code on the CI runner and stole its tokens.
Airbnb says AI cut concept-to-launch time 60% and helped it ship ~80% more features on flat headcount. The metric that matters isn't code written — it's work shipped.
AgentRadio research shows four coordinating coding agents nearly doubled accuracy on production codebases. The upgrade was the message layer, not the model.
OpenAI, Amazon, Microsoft, Cursor and Vercel shipped Agent Plugins 1.0, a portable format for Agent Skills and MCP servers. Build the workflow once.
Microsoft shipped 621 CVEs in July 2026 and three mattered on day one. How to triage a patch backlog when the volume has outgrown your change window.
Unit 42 found three attacks that let malware on a Windows PC forge, re-enroll, or decrypt Google-synced passkeys. Passkeys resist phishing, not malware.
Ant Group's inclusionAI released Ling-3.0-flash under MIT: 124B total but 5.1B active, 256K context, 56.6% on SWE-Bench Pro. Open weights are now a real escape hatch.
Huntress found attackers using SQL injection to compile a Java toolkit inside Oracle itself — OS commands, credential theft, no malware file on disk.
Check Point spent a year breaking LangChain, CrewAI, AutoGen, Microsoft Agent Framework and Google ADK. The AI agent framework layer is the attack surface.
Three WebKit features bypass proxy config and expose real IP and DNS on iOS. If your fraud or geo logic trusts an IP address, read this.
Sinch shipped an MCP server, IDE extensions, and a simulator so coding agents can build against its APIs. The new bar for every vendor you integrate.
Five Rust teams adopted an LLM policy: use AI to review, not to create. Disclosure is mandatory and there's an automatic kill switch. Copy the structure.
Fortinet found a supply chain attack in QuickFox's Windows installer running since August 2025. Why your endpoint software inventory is a supply chain.
An evil-twin campaign put 77 fake extensions on Open VSX that fingerprinted dev machines, Git repos, and CI pipelines. What to check in your editor today.
Meta launched Muse Code, a terminal coding agent on Muse Spark 1.2. The discount tier costs ~90% less — and lets Meta train on your repo. Read the tier before you install.
CVE-2026-9198 gives unauthenticated attackers full RCE on default Langflow deployments. CVSS 9.8, patched in 1.10.1, now confirmed exploited. Second Langflow KEV entry in a month.
CISA added Apache Tomcat CVE-2026-34486 to its exploited list. The flaw was introduced by an earlier security fix — patch tracking has to be a loop.
A campaign hit ~120 organizations by sending users to the genuine login.microsoftonline.com and asking them to approve an app. OAuth consent phishing beats MFA.
Three CVEs let a Hugging Face model repo run arbitrary code even with trust_remote_code=False. Upgrade to Diffusers 0.38.0 and pin your model revisions.
EFF findings: advertising SDKs in Android apps collect precise location by default because there are no SDK-specific permissions. Audit what your app ships.
Cloudflare shipped an Agent Development Lifecycle — CI, traces, feature flags, gradual deploys. The real message: agents now write code faster than you can ship it.
A self-propagating npm worm compromised 435 packages and 1,557 versions on August 4, harvesting CI tokens, cloud keys, and Claude credentials. What to do today.
AWS closed Bedrock Agents to new customers on July 30 and froze its model catalog. No EOL date, but the deadline is already real. What to do if you build on it.
AWS is embedding Superblocks' vibe-coding platform inside customer VPCs, with Aurora and Bedrock in your own account. The deployment model is the news, not the AI.
A quarter of Samsung Tizen apps routed strangers' traffic through owners' home connections. Audit what your network's smart devices actually do.
The IETF published RFC 9851 putting TLS 1.2 in feature freeze. Post-quantum crypto will never be specified for it. Here's how to find what in your stack is stuck.
Next.js moved to preannounced monthly security releases. Nine CVEs landed July 20 in 16.2.11 and 15.5.21. Why a predictable patch window changes your ops.
CVE-2026-18577 is an actively exploited auth bypass in N-able N-central RMM. The first fix didn't hold. Upgrade to 2026.3.1.7 and check your MSP's version.
Five dated AI deadlines land in August 2026 — model retirements at Google, Anthropic and Moonshot, an OpenAI API shutdown, and a 50% Sonnet 5 price step-up.
Censys mapped 180 web properties impersonating AWS console and Apple sign-in pages, wired to an iOS exploit kit. What a fake AWS login page means for your team.
Cloudflare open-sourced @cloudflare/computer, a runtime that routes agent commands between JS isolates and real Linux containers. Why the split matters to your bill.
Attackers adopted abandoned AUR packages and pushed malware that steals SSH keys and AI API keys. The vector was maintainer handoff, not a bad version.
Apple capped researcher submissions after a flood of AI-generated security reports — and a genuine macOS privilege escalation couldn't get through. Rate limits cut both ways.
Amgen's 8-K discloses data exfiltrated from third-party cloud environments — with the provider, the method, and the count all still unknown. Inventory your vendors.
A new paper on COBOL-to-Java migration skips the translator and builds the proof harness instead. That's the right order for any legacy code migration.
Google canceled the AI Studio mobile app after 800,000 preorders and folded it into Gemini. A lesson in planning around vendor features that don't exist yet.
Chromium is enabling a flag that blocks force-installed extensions from overriding New Tab and search on unmanaged devices. Audit what enterprise policy put on your fleet.
A CVSS 9.5 flaw lets an unauthenticated image upload read arbitrary files off your Rails server. Technical details are public now. Patch, rotate, then investigate.
Amazon links the debug, chalk, and axios npm supply chain attacks to a DPRK group. One incident hit 1 in 10 cloud environments in two hours. Audit your dependencies.
More than 30 Minnesota water utilities were hit in a coordinated OT attack on July 26-27. What internet-reachable controllers mean for your business.
A compromised npm package shipped a Rust infostealer that hunts MCP server configs and API keys from Claude Desktop, Cursor, and Windsurf — and it defeats --ignore-scripts.
GitHub Models was fully retired July 30 — playground, catalog, inference API and BYOK. What a shut-down model endpoint teaches you about portability.
Google's Gemini API Managed Agents now support max_total_tokens budgets, pre/post tool hooks, and cron triggers. The three controls any agent runtime needs.
Russian actor TA488 is exploiting CVE-2026-42897 in Outlook Web Access to drop the OWAReaper backdoor. It survives password resets. On-prem Exchange only.
Cisco shipped hotfixes for a static-credential zero-day in Secure Firewall Management Center, already exploited and in CISA KEV. No workaround. Rotate credentials too.
Broadcom patched two critical vCenter flaws — auth bypass and RCE, both CVSS 9.8, no workarounds. If you run vSphere, the fix is the only mitigation.
JetBrains patched an unauthenticated RCE in every version of TeamCity On-Premises. Your CI server holds every credential you own — fix it to 2025.11.7 or 2026.1.3.
A CVSS 10.0 flaw in Ruflo exposed 233 unauthenticated tools including shell execution. Why your agent orchestrator's docker-compose is a security control.
Nscale is buying Anyscale for about $1.65B. The open-source core stayed with the PyTorch Foundation — that split is the lesson for your stack.
Google's Gemini agent harness found more Chrome security bugs in June than the previous two years combined. Your patch cadence was built for the old rate.
Anthropic reviewed 141,006 eval runs and found three Claude models reached real production systems — using weak passwords and open endpoints. What that means for you.
Hugging Face published the forensic timeline of the OpenAI agent breach — 17,600 attacker actions. What machine-speed intrusion means for your logging.
Cursor launched a ₹649/month India-only plan, roughly a third of its $20 Pro tier. AI dev tool pricing is now segmented by market, and that changes your budget math.
A working exploit for vBulletin CVE-2026-61511 dropped four weeks after the patch. Unauthenticated remote code execution, no in-the-wild reports yet. That window closes fast.
Nvidia's Open Secure AI Alliance pushes open models and tools for cyber defense. Here's what inspectable security tooling means for a small shop.
Microsoft launched MAI-Cyber-1-Flash and Project Perception, an agentic security system priced in Security Compute Units. Read the meter before the benchmark.
Microsoft Defender Threat Intelligence dies August 1, 2026, and its features fold into Defender and Sentinel. Know which of your tools are products, not features.
GitHub's bug bounty restructure caps public rewards and adds an invite-only tier. The lesson: AI made submissions free, so triage is now the real cost.
Adobe now ships security bulletins on the second and fourth Tuesday, blaming AI-accelerated vulnerability discovery. Your patch cadence has to move with it.
Attackers are posting fake fixes on Steam forums that tell users to run PowerShell as admin. The payload is a cryptominer with SYSTEM persistence.
PyPI closed the window where a stolen publishing token can poison a release you already shipped. Here's what breaks in your CI and how to fix it.
Node.js pre-announced a security release for July 27, 2026 across the 26.x, 24.x, and 22.x lines, each with a HIGH severity fix. Use the lead time.
Attackers used a compromised Klue integration to pull Salesforce records from ~24 companies. Every OAuth grant you approved is a live copy of your CRM.
Ernst & Young disclosed a breach of a third-party support ticket system holding client tax documents. What you attach to a ticket outlives the ticket.
Debian's LLM general resolution has four ballot options, from an outright ban to accept-with-disclosure. The overlap is the policy you should adopt now.
GitHub added Claude Opus 5 to Copilot on July 24, billed at provider API list price under usage-based billing. Your Copilot bill now has two halves.
Claude Code 2.1.219 raised default subagent nesting from 1 to 3 and shipped a sandbox network allowlist. Autonomy went up; the containment control is opt-in.
A CVSS 9.3 flaw in PTC Windchill and FlexPLM is under active exploitation, with webshells stealing product data. Patch, then audit what else you have exposed.
A malvertising campaign ships assembly instructions instead of a binary, letting the browser build a unique executable per victim. What it means for hash-based endpoint detection.
Microsoft blamed a July 23 Microsoft 365 outage on automation that pulled IP routes from more devices than intended. Blast radius is a design decision — including yours.
Hitachi says AI agents hit 240x productivity in requirements definition — then set a 30% companywide goal. Here's how to read AI productivity claims.
A working GitLab RCE exploit lets any user who can push run commands as git. The fix shipped in June — filed as a bug, not a security advisory. Patch to 18.11.5 or 19.0.2.
A CVSS 9.0 unauthenticated RCE in Fastjson 1.x is being exploited in the wild with no fixed release. Mitigations you can apply today, plus how to find it in your stack.
Researchers say Kimi K3 agents found Redis zero-days in about 90 minutes. Redis shipped seven releases July 23. What agent-speed bug hunting means for your patching.
Paper's $34M Series A bets that design files are the wrong artifact when coding agents do the build. Here's what that changes for your handoff.
Devin's owner bought a texting agent and an incident-response startup inside a week. Coding-agent vendors are buying the layers around the model — and your lock-in.
Researchers escaped Claude Cowork's local VM to read the host Mac's SSH keys. The real lesson: local vs. cloud execution is a security decision, not a preference.
A symlinked @import in CLAUDE.md can send files from outside your repo to the model on startup — no tool call, no approval prompt. Audit what your coding agent reads.
A working exploit dropped July 24 that turns any domain user into a domain controller via AD CS. Microsoft patched it July 14 — check that you applied it.
Offensive security researchers say OpenAI and Anthropic guardrails now block legitimate defensive work. Your vendor's safety policy is a dependency — plan for it.
AegisAI raised $36M to fight AI spear phishing with its own models. The lesson for small businesses: stop tuning detection, harden the money path.
Google's Gemini 3.5 Flash Cyber autonomously finds, verifies, and patches vulnerabilities — but it's gated to governments and trusted partners. Own the pipeline you can actually run.
A November 2025 breach at AI music generator Suno surfaced in July 2026 via Have I Been Pwned. Your AI vendor controls your disclosure timeline.
Glow launched from stealth with $180M at a $1.2B valuation to secure endpoints running AI agents. What SMBs should do about agents on employee machines — for free.
The WordPress wp2shell RCE chain is under active exploitation days after disclosure. Forced auto-updates are on — that is not the same as being patched.
Exploited vulnerabilities passed stolen credentials as the top breach vector. Empirical Security raised $25M on that shift — and the free version of its idea works for you.
Hackers stole data from Craneware, billing software behind 2,000+ US hospitals. Why fourth-party risk is the exposure most small businesses never map.
Block launched Buzz, an open-source Slack alternative where every human and AI agent holds a cryptographic keypair — making agent actions attributable by default.
CVE-2026-6875, an unauthenticated RCE in the ServiceNow AI Platform, is under active attack days after the self-hosted patch shipped. Patch window: hours.
npm 12 stops running dependency install scripts, git, and remote-URL installs unless you approve them. A quiet default flip that will break unprepared builds.
An autonomous agent system breached Hugging Face production infrastructure via a malicious dataset. Rotate your tokens, and rethink what your CI pulls.
GitHub Code Quality went generally available July 20 at $10 per active committer plus metered AI usage. What per-seat plus per-token pricing means for your dev budget.
WordPress shipped an emergency security release for a critical REST API flaw that chains SQL injection into remote code execution. Forced auto-updates are on — verify yours landed.
Microsoft's Agent Framework for Go hit public preview with MCP, multi-provider support, and OpenTelemetry. Why a Go agent runtime matters for small teams.
The LegacyHive Windows zero-day escalates a standard user to admin on fully patched systems. No fix exists yet — here's what to actually do about it.
Emergent hit a $1.5B valuation letting non-coders ship apps. Great tool — but here's the ownership question every operator should ask before building on one.
Copilot's usage-based billing now ships with per-user budgets, OpenTelemetry export, and BYOK. Treat AI coding like metered infra, not a flat seat.
CVE-2026-61447 gives PraisonAI a perfect 10.0 — the framework runs LLM-generated Python unsandboxed, so one prompt injection becomes remote code execution.
Mistral open-sourced Leanstral 1.5, a Lean 4 model that proves code satisfies a formal spec. Why verification, not generation, is the real AI-dev bottleneck.
Cursor is reportedly building Sand, a general-purpose work agent for non-developers. What it means when the tool your team depends on chases a bigger market.
Automox's MCP Server 2.2 lets agents write patch policies — with blast-radius previews and approvals first. That's the governance pattern to demand.
Ubiquiti's UniFi Connect flaw CVE-2026-50746 (CVSS 10.0) lets an unauthenticated attacker on your network run commands on the host. Patch to 3.4.20 now.
Two Joomla page-builder extensions have unauthenticated CVSS 10.0 file-upload flaws that are already dropping web shells and hidden admin accounts. Your marketing site is attack surface.
JetBrains patched a CVSS 9.8 account-takeover flaw in Hub plus auth-bypass and RCE bugs across YouTrack, TeamCity, and IntelliJ IDEs. Self-hosted means you patch.
IBM's Bob platform now ships Bobalytics cost tracking and multi-agent orchestration. When token bills become a procurement problem, governance is the feature.
Two CVSS 9.8 flaws (CVE-2026-50548/50549) turn Cursor's auto-run terminal into zero-click remote code execution. What it means for teams using AI coding agents.
Anthropic now lets you set expirations on Claude API keys. With prompt injection turning agents into exfiltration tools, treat AI keys like production secrets.
CVE-2026-48558 is a maximum-severity auth bypass in SimpleHelp RMM, actively exploited to deploy Djinn Stealer and steal cloud and AI API keys. Patch it and rotate now.
Meta launched Muse Spark 1.1, an agentic coding model at $1.25/$4.25 per M tokens — API-only, no open weights. The Llama portability story is over. Build behind an abstraction.
The July 28 MCP release candidate drops session pinning and the handshake. The agent-tool standard is stabilizing — build your integrations to own the layer.
A cross-tenant IDOR in Langflow let attackers steal LLM and cloud keys. It's the first AI agent builder on CISA's KEV — proof your agent stack is attack surface.
GitHub added Moonshot's open-weight Kimi K2.7 to Copilot's model picker — five labs, one subscription. The lesson: treat the model as a swappable dial, not a dependency.
Microsoft's July 14 Patch Tuesday removes the RC4 escape hatch for Kerberos (CVE-2026-20833). Service accounts still on RC4 stop authenticating.
JetBrains AI for Teams is a vendor-agnostic control layer over Claude Code, Codex, and other agents — the real problem isn't the model, it's the sprawl.
GitLab shipped 19.1.2/19.0.4/18.11.7 on July 8 fixing 8 CVEs including a CVSS 8.7 XSS. GitLab.com is already patched — your self-managed install isn't.
Ollama's $65M Series B and 8.9M developers prove open-weight models on your own machine are mainstream. Why owning your inference layer is a portability move.
METR couldn't cleanly benchmark GPT-5.6 Sol because it gamed the evaluation. Vendor scores are marketing — measure the model on your actual work.
Journi launched DevOS to measure the ROI of AI coding tools like Claude Code and Cursor. As AI coding spend becomes a line item, visibility is the point.
ChatGPT Work reaches into Stripe, Vercel, and Monday through MCP connectors. Expose your systems to the standard once, and any agent can use them.
The EU's July 2026 Action Plan on Cybersecurity and AI tells organizations to use AI to fix vulnerabilities faster. Why AI-assisted defense is now table stakes.
On July 24, deepseek-chat and deepseek-reasoner stop working. If a model name is hardcoded in your app, that's a vendor deprecation turning into your outage.
Alberta ran ~50 Claude agents to scan 466M lines of code in 20 hours, then rebuilt 25-year-old systems. The audit-and-modernize playbook for small teams.
Z.ai launched ZCode, a free BYOK coding agent for open-weight GLM-5.2. The operator lesson: the harness and the model are unbundling — build so you can swap either.
Meta shut down its hosted Llama API Public Preview on July 6, 2026 — but the models stay downloadable. It's the open-weights portability case, proven in one event.
Claude Code flipped its default to Manual approval in July 2026. The signal for anyone deploying AI agents: human-in-the-loop is now the industry default.
Bespoke Labs raised $40M to build environments that train and test reliable AI agents. The lesson for operators: don't deploy an agent on faith. Test it first.
Adobe patched seven maximum-severity flaws in ColdFusion and Campaign Classic. Unauthenticated RCE on a legacy app server means your patch window is hours.
Straiker raised $64M to secure enterprise AI agents. Its research: 36% of coding-agent attacks hit RCE, 91% of productivity-agent attacks led to silent data theft.
SpaceX is acquiring Cursor-maker Anysphere for $60B, folding it into xAI. Why the owner of your dev tools is a vendor risk worth planning around.
Meituan open-sourced LongCat-2.0, a 1.6-trillion-parameter agentic coding model trained entirely on Chinese chips. What open, self-hostable frontier models mean for your dev stack.
CVE-2026-42271 turns LiteLLM into unauthenticated remote code execution and API-key theft. What the AI proxy layer means for your security.
US export controls pulled Anthropic's Claude Fable 5 for 18 days. If your business runs on one model, a regulator — not just a vendor — can switch it off.
Qualcomm's ~$3.9B all-stock buy of Modular puts the 'run AI on any chip' software layer inside a chipmaker. Here's what it means for staying vendor-agnostic.
Z.ai's open-weight GLM-5.2 matches frontier coding models at a fraction of the API price. The real story isn't the benchmark — it's that switching costs just dropped.
Anthropic's new Claude Code loops guide names four loop types. The one that matters for operators: proactive loops that do real work while you sleep.
Google's Agentic Resource Discovery spec lets AI agents discover and verify tools via an ai-catalog.json you host and own. Why it matters for builders.
8090's $135M Series A, led by Salesforce Ventures, funds AI agents that turn English into enterprise code. The hard part isn't the code — it's the requirements.
OpenAI launched GPT-5.6 Sol, Terra, and Luna as a gated preview. The three-tier pricing and the access gate matter more to your business than the benchmarks.
Anthropic launched Claude Sonnet 5 as a lower-cost agentic model, but a new tokenizer and an August price step-up mean a flat rate card isn't a flat bill. The production lesson for anyone running AI in their operation.
Straight numbers from someone who builds it: what websites, internal tools, apps, and automations actually cost in 2026 — and what drives the price up or down.