AI·
Humans caught 13.6% of dangerous commands. Claude Code's classifier caught 89%.
Anthropic makes auto mode the default in Claude Code on August 14. Its own study says the permission prompt was catching almost nothing.
Topic
Agentic coding
Every major lab now ships a coding-first agent. Anthropic has Claude Code and Routines; OpenAI is pushing Codex into the OS; Google and Apple are racing to catch up. We track the shipping features, the model-vs-model benchmark fights, and the practical question underneath it all — which tasks you can actually hand off today, and which ones still need a human in the loop.
70 articles in this topic
AI·
Uber spent its entire 2026 AI budget in four months, and the rest of the industry is now metering tokens
Uber's year of AI budget lasted until April. A 15-company survey shows per-developer spend running from $200 to $3,000 a month, and finance has noticed.
Web·
Agents that start with access to nothing: Cloudflare open-sourced the agent platform it runs internally
Cloudflare open-sourced Cloudflare OS under Apache 2.0 and shipped Kitesurf, WebMCP, and Wallets the same week. Here's which pieces are GA and which are private beta.
AI·
Meta's Muse Code: a terminal agent built for repos most devs never touch
Meta's Muse Code is in beta on macOS and Linux, priced at $1.25 per million input tokens. Meta's own benchmarks put it behind Claude Opus 5.
Open Source·
Rust's new rules require disclosing LLM use. A Linux maintainer gives AI patches three seconds.
Five Rust teams ratified an LLM policy that bans AI-written docs and mandates disclosure. Linux leaves it to each maintainer. Both are rationing review time.
Security·
Atlassian went quiet for 75 days on a Rovo bug that leaks Jira tickets
PromptArmor says a hidden instruction can make Atlassian's Rovo fetch a URL carrying Jira and Confluence data, even with web search switched off.
Security·
Anthropic's Claude uploaded malware to PyPI and stole a security vendor's credentials in a test
Anthropic says a Claude model built malware and pushed it to PyPI during a botched eval. Two labs have now breached four companies, and no law clearly covers it.
AI·
DeepSeek's new 304B agentic model now runs on a single 128GB workstation
Salvatore Sanfilippo repacked DeepSeek V4 Flash into a lossless MXFP4 GGUF that streams from SSD at over 20 tokens a second. The hardware bill, and where hosted still wins.
Security·
Hermes in YOLO mode: an AI agent handled post-exploitation in an alleged Thai ministry breach
Threat-intel firm Hunt.io found logs showing an open-source AI agent running unattended against Thailand's Ministry of Finance, with approval prompts switched off.
AI·
Claude Opus 5 nears Fable 5's frontier intelligence at half the price
Anthropic shipped Claude Opus 5 at the same $5/$25 per million tokens as Opus 4.8. It nears Fable 5's intelligence at half the cost, with new effort and fallback controls.
AI·
OpenAI's own model broke out of its test sandbox and hacked Hugging Face to cheat a benchmark
OpenAI says two models it was testing escaped a locked sandbox, chained a zero-day into Hugging Face's production servers, and stole benchmark answers.
Web·
Jack Dorsey launched Buzz to replace Slack and GitHub. Its AI agents are full members
Jack Dorsey's Block launched Buzz, an open-source workspace that fuses team chat, AI agents, and Git hosting on Nostr, aiming squarely at Slack and GitHub.
AI·
Meta will spend up to $145B on AI this year, and Zuckerberg says the agents are behind
Zuckerberg told a July 2 Meta town hall that AI agent progress hasn't accelerated as expected, even as the company plans up to $145B on AI in 2026.
Web·
Cloudflare turned HTTP's unused 'Payment Required' code into a per-request tollbooth for AI agents
On July 1, Cloudflare launched the Monetization Gateway: sites can charge any crawler, agent, or API per request over x402, settled in stablecoins.
AI·
GitHub ran four frontier models through Copilot's harness. None won every task.
GitHub benchmarked Copilot's agent harness against Claude Code and Codex CLI on five tests. The token savings are real, and the best model depends on the task.
Web·
More than half of Notion Mail users never open the inbox. Notion is shutting it down.
Notion is closing Notion Mail on September 22 because most users now let AI agents run their inbox. Here's what to export before September 21.
AI·
Claude Sonnet 5: cheaper agents on paper, until you count the new tokenizer's tokens
Anthropic's Sonnet 5 lands as the default free model with near-Opus quality at a lower price, but a new tokenizer quietly inflates the English bill by 1.4x.
Security·
A fake browser game convinced six AI agents that stealing passwords was allowed
LayerX tricked six agentic browsers, including ChatGPT Atlas and Perplexity's Comet, into leaking credentials by convincing them a web page was a game. Here's the attack class.
Web·
Vercel's AI SDK 7 makes agents a first-class building block for TypeScript developers
AI SDK 7 ships agent classes, provider-agnostic reasoning control, durable workflows, and a Node 22 + ESM-only baseline. Here's what changed and the migration cost.
Policy·
Meta reassigned thousands of engineers to label AI data, and the unit is in revolt
Gergely Orosz reports Meta moved a big share of its engineers into an AI data-labeling org. TechCrunch and Wired describe a revolt. Here is what is confirmed.
AI·
OpenAI is now using GPT-5.5 to find and patch open-source bugs at scale
OpenAI's Daybreak push pairs the new GPT-5.5 default model with GPT-5.5-Cyber, a tool that finds, validates, and patches software flaws. Here's what it does and the catch.
Security·
Claude Code's full source leaked on npm. A stray source-map file gave away every line.
Anthropic confirmed its Claude Code CLI shipped its complete TypeScript source to npm after a packaging slip left a source map in the published package.
Android·
Google's $99 Home Speaker arrives June 25, and the $35 Nest Mini is gone
Google's Gemini-powered Home Speaker opens for pre-order at $99.99 and ships June 25, with 360-degree audio and a new voice assistant replacing the Nest Mini.
Web·
Vercel Ship 2026 bet the keynote on agents, but the quiet shipped wins matter more today
Vercel's Ship 2026 keynote was all agents. The eve framework and enterprise stack stole the stage, but Flags, Claude Design, and signed Blob URLs are what ship today.
Web·
A Firecracker microVM cold-starts an isolated browser in under 400ms on EC2
browser-use runs Firecracker microVMs inside ordinary EC2 boxes to spin up isolated browser sandboxes fast. Here's how the sub-second cold start works.
Android·
Gemini Intelligence turns Android 17 into an agent that drives your apps
Google's Android Show pitched Gemini Intelligence and AppFunctions, an MCP-style way for the assistant to call inside your apps. Here's how it works and what to watch.
AI·
Running a coding agent fully on Apple Silicon, no cloud, is now an off-the-shelf stack
A popular Hacker News how-to walked through a fully local coding agent on Apple Silicon. Here's the realistic 2026 stack: runner, model, and harness.
AI·
OpenAI added a Lockdown Mode to ChatGPT to blunt prompt-injection attacks
OpenAI shipped Lockdown Mode in ChatGPT to cut off the data-exfiltration step of prompt-injection attacks. Here's what it actually restricts and who should turn it on.
Security·
One bad Host header bypassed auth in Starlette, the routing core under millions of AI agents
A flaw in Starlette, downloaded 325M times a week, let a single Host-header character bypass path-based auth across FastAPI, vLLM, and MCP servers.
AI·
OpenAI is putting Codex in every ChatGPT app, with six business plugins for non-coders
On June 2 OpenAI said Codex is coming to the ChatGPT app everywhere within weeks, and shipped six role-specific plugins for sales, analytics, design, and finance teams.
AI·
Claude Opus 4.8 flags the bugs it writes four times more often than Opus 4.7
Anthropic's Opus 4.8 posts 69.2% on SWE-Bench Pro, lets code flaws slip 4x less often, and ships parallel subagents in Claude Code. Here's what matters.
AI·
Hacker News is obsessed with durable Postgres workflows and a game about clicking yes
Six dev-tooling and AI posts that climbed Hacker News in late May 2026: durable execution on plain Postgres, LLM code smells, a permission-fatigue game, Rust 1.96, and more.
AI·
Uber blew its entire 2026 AI coding budget in four months. Its COO can't prove it paid off.
Uber exhausted its full-year Claude Code budget by April. Adoption hit 84%, heavy users burn $2,000 a month, and COO Andrew Macdonald can't connect the spend to shipped features.
Web·
Cloudflare rebuilt Browser Run on its own Containers. Concurrency went from 30 to 120.
Cloudflare moved Browser Run off shared isolation infrastructure on May 13. The agentic-coding crowd gets four times the headless-Chrome ceiling and half the latency.
AI·
Microsoft is canceling Claude Code for its engineers. They have until June 30 to switch to Copilot CLI.
Internal Claude Code licenses end June 30, 2026, for Microsoft's Experiences + Devices group. Engineers move to GitHub Copilot CLI instead.
AI·
Karpathy posted four notes about Claude Code. The CLAUDE.md they spawned has 110K GitHub stars.
Forrest Chang turned Andrej Karpathy's January coding thread into a 70-line CLAUDE.md. It now has 110,000+ stars and has trended on GitHub for 28 weeks.
Hardware·
Alibaba's new Zhenwu M890 chip is 3x faster and aimed straight at agent workloads
Alibaba showed the Zhenwu M890 at its Cloud Summit on May 19. 144 GB of memory, 800 GB/s interchip bandwidth, and Qwen3.7-Max riding on top.
Security·
A bad command-line parser turned every claude-cli:// link into a remote shell
Joernchen of 0day.click found a deeplink RCE in Claude Code. Anthropic shipped the fix in 2.1.118 the same week.
AI·
OpenAI's Codex moved into the ChatGPT mobile app. You can approve a diff from the train now.
OpenAI shipped Codex remote control inside the ChatGPT app for iPhone, iPad, and Android on May 14. Pair via QR; the agent runs on your laptop, the review moves to your phone.
Open Source·
Bun's million-line Rust rewrite is now mainline. 99.8% of tests pass and 13,000 unsafe blocks remain.
Jarred Sumner merged the Bun-in-Rust PR on May 14, ending Zig as Bun's runtime language. Binary shrinks 3-8 MB; one analysis counted 13,000 unsafe blocks.
AI·
Anthropic shipped Claude for Small Business with 15 prebuilt agents. Daniela Amodei is pitching the corner-store owner.
Anthropic announced Claude for Small Business on May 13 with QuickBooks, HubSpot, Canva, and DocuSign hooks. The pitch: 15 ready-to-run agents and a 10-city tour.
AI·
Google's Magic Pointer turns the cursor into a Gemini prompt. The first Googlebooks ship this fall.
Google announced Googlebook on May 12: a premium laptop tier above Chromebook, with a Gemini-aware cursor called Magic Pointer. Acer, ASUS, Dell, HP, and Lenovo are in.
AI·
Airbnb says AI writes 60% of its new code. Nobody has explained what that means.
Brian Chesky dropped the 60% figure on an earnings call without defining how Airbnb measures it. Google claims 75%. The independent average is 27%.
Web·
GitLab is cutting staff and killing its CREDIT values. The CEO calls it 'Act 2.'
CEO Bill Staples announced a restructuring he frames around agentic AI, retiring GitLab's six core values for three new operating principles. Exact layoff numbers come June 2.
Apple·
Apple delayed its camera AirPods because Siri wasn't ready. Gurman says they're back in late testing.
Bloomberg reports Apple's infrared-camera AirPods have reached advanced testing. The earbuds feed visual context to Siri but can't take photos or video.
Policy·
A judge killed DOGE's grant purge. The 'review process' was asking ChatGPT 'Is this DEI?'
A federal judge restored $100M+ in grants after two DOGE staffers used ChatGPT to flag 97% of NEH grants as DEI, including an HVAC repair and Holocaust research.
Security·
380,000 vibe-coded apps are sitting on the open web. 5,000 of them are leaking real data.
RedAccess found that AI coding tools like Lovable, Base44, and Replit default to public hosting, leaving medical records, bank internals, and corporate secrets indexed by Google.
Web·
Cloudflare cut 1,100 jobs on its best earnings day. Revenue grew 34% and the stock dropped 18%.
Cloudflare laid off 20% of its workforce on May 7 while reporting record Q1 revenue of $639.8M. The stock dropped 18% after hours.
AI·
Anthropic doubled Claude Code's limits by renting 220,000 GPUs from xAI
Anthropic doubled Claude Code's 5-hour limits, killed peak-hours throttling, and raised Opus API tiers. The capacity comes from xAI's Colossus 1, via a SpaceX deal.
Web·
VS Code shipped 'Co-Authored-by Copilot' on every commit by default. Microsoft is reverting it.
A two-line PR flipped the AI co-author flag from off to all in April. Hand-typed commits started getting Copilot attribution. The maintainer apologized and promised a fix in 1.119.
AI·
GitHub Copilot's Claude Opus multiplier jumps to 27x on June 1. Monthly plans dodge the hike.
GitHub's new model multiplier table for Copilot Pro and Pro+ annual plans lands June 1. Opus 4.6 goes 3 to 27. Sonnet 4.6 goes 1 to 9.
Security·
Five Eyes intel agencies publish first joint agentic AI security guide. Their advice: slow down.
CISA, NSA, GCHQ, ASD, CSE and NCSC-NZ jointly tell organizations agentic AI isn't ready for fast rollout. The 23-page guide names five risk categories.
Web·
Cloudflare shipped Dynamic Workflows. Multi-tenant agent platforms finally get durable per-tenant code.
A 300-line MIT library lets one Worker route durable execution to every tenant's own workflow. The piece Cloudflare's Agents Week was missing.
AI·
Anthropic just dropped its Claude Code workshop tapes. The playbook is better than the marketing.
Boris Cherny on Claude Code, Applied AI on prompting, Erik Schluntz on vibe coding in prod. Three Code with Claude tapes hit YouTube ahead of the 2026 conference.
Open Source·
Zed 1.0 ships its agentic editor. The Atom team's Rust rewrite finally has a stable label.
Zed Industries shipped 1.0 on April 29 after five years of Rust and GPU work. Free forever for humans, with $10/month hosted AI and an open Agent Client Protocol.
Open Source·
Warp's terminal is now open source. The cloud agent platform Oz is the actual product.
Warp released its 36k-star Rust client on GitHub under AGPLv3 on April 28. OpenAI is the founding sponsor and Oz keeps the bills paid.
AI·
OpenAI's models are on AWS Bedrock the day after Microsoft lost exclusivity
Amazon shipped Bedrock Managed Agents powered by OpenAI on April 28, plus Codex on Bedrock. Altman tells Stratechery the runtime matters as much as the model.
AI·
Disney built an AI leaderboard. One employee called Claude 460,000 times in nine days.
Leaked internal Disney screenshots show 4,800 product and tech staff burning 3.1 billion Claude tokens and 13.3 billion Cursor tokens across nine April workdays.
AI·
GitHub Copilot kills premium requests on June 1. Token billing arrives, fallback models do not.
On June 1 every Copilot plan switches to GitHub AI Credits priced per token. Code completions stay free. Fallback models and credit rollover do not.
AI·
An AI agent built a working RISC-V CPU from a 219-word prompt in 12 hours. Here's what it actually did.
Verkor's Design Conductor agent went from a 219-word spec to a tape-out-ready RISC-V core called VerCore in 12 hours. The catch: it's still a Celeron.
AI·
Anthropic admits three Claude Code bugs quietly tanked quality for six weeks
Anthropic's April 23 postmortem names three bugs that degraded Claude Code between March 4 and April 20. Usage limits are being reset for every subscriber.
AI·
OpenAI shipped GPT-5.5 seven weeks after 5.4. API tokens now cost twice as much.
OpenAI released GPT-5.5 (codename Spud) on April 23. The API runs at $5/$30 per million tokens, double GPT-5.4, with Pro at $30/$180.
AI·
OpenAI's Workspace Agents kill Custom GPTs and take the fight straight to Claude Code
Workspace Agents for ChatGPT Business, Enterprise, Edu, plus Teachers launched April 22. Team-shared, cloud-run, Codex-powered. Free until May 6, then credit-based.
AI·
GitHub Copilot paused new signups and kicked Opus out of Pro. Here's what actually changed.
GitHub froze Copilot Pro/Pro+/Student signups on April 20 and moved Claude Opus 4.7 behind the $39 Pro+ tier. Agent workflows broke the old math.
AI·
Cursor wants $50B for an AI editor that's burning cash on individuals
Cursor is in talks to raise $2B at a $50B valuation, nearly double its September mark. Revenue is up, but it's still losing money per indie seat.
AI·
OpenAI's Codex now drives your Mac, not just your code
OpenAI shipped a Codex update that can pilot desktop apps with a cursor, generate images in-line, and run parallel agents. It's the opening move in a real Claude Code fight.
Apple·
Apple is sending 200 Siri engineers to an AI coding bootcamp. That tells you everything.
A report from The Information reveals Apple is retraining Siri staff on AI tools like Claude Code. With WWDC two months away, Apple's AI gap has never been more visible.
AI·
Google Gemini finally has a Mac app, and it's gunning for ChatGPT's desktop lead
Google shipped a native Swift Gemini app for macOS with screen sharing, voice, and Deep Research. Here's what it does, what it doesn't, and how it stacks up.
AI·
Adobe's Firefly AI Assistant can now drive Photoshop, Premiere, and Lightroom for you
Adobe renamed Project Moonlight to Firefly AI Assistant and opened a public beta. It runs multi-step workflows across Photoshop, Premiere, Lightroom, and more.
AI·
Claude Code Routines: what they actually do, and when to use them over GitHub Actions
Anthropic just shipped Routines: Claude Code sessions as cron jobs, webhooks, and GitHub-event reactors. Here's what they replace, what they don't, and one rule to follow.