GitHub's AI Coding Agent Leaked Private Repos With a Single Issue
Noma Labs' GitLost write-up shows a single public-repo issue can coerce GitHub's coding agent into leaking private repo contents.
Tag
#ai-agents
Alibaba's Elements Claw Discovers Four New Superconductors
A 1B-parameter foundation model trained on 125M crystal structures screens 2.4M compounds and laboratory-confirms four new superconductors.
The 'AI Coworker' Trap: Managers Catch 18% Fewer Errors
Calling an AI an 'AI employee' made 1,261 managers miss 18% more errors and push 44% more questionable work upward. The 'coworker' framing is a safety issue.
AI Security Roundup: OpenClaw's Nine CVEs in Four Days
OpenClaw collected nine CVEs in four days with 135,000 instances exposed. Plus: GitHub RCE, Flowise exploitation, and CrewAI trust failures.
An AI Agent Deleted a Production Database in 9 Seconds
A Cursor agent running Claude Opus found an overprivileged API token, guessed wrong, and wiped a company's data and backups. The real failure wasn't the model.
OpenCode Has 140K GitHub Stars and Costs Nothing — Here's What It Actually Does
The open-source AI coding agent lets you bring any model to the terminal. We break down what works, what doesn't, and who should use it.
The FDA Just Created a New Category of Violation: AI Over-Reliance
A drug manufacturer told federal inspectors the AI never told them about a basic legal requirement. The FDA was not amused.
Meta Is Recording Every Keystroke Its Employees Make to Train AI Agents
Meta's Model Capability Initiative captures mouse movements, keystrokes, and screenshots from employee computers. The goal: build AI agents that can replace the workers generating the training data.
AI Prediction Scorecard: November 2025 Edition — Billion Agents and White-Collar Bloodbaths
We tracked the boldest AI predictions from November-December 2025 and scored them against April 2026 reality. The agents didn't show up. The jobs did disappear.
AI Security Roundup: Azure AI Foundry Scores a Perfect 10, Langflow Hijacked in 20 Hours, LiteLLM's Backdoor Cleanup
Microsoft's Azure AI Foundry hit with a maximum-severity privilege escalation, Langflow exploited within hours of disclosure, and LiteLLM discloses three vulnerabilities after surviving a supply chain attack.
OpenClaw's Security Meltdown: 9 CVEs in 4 Days, 135K Exposed Instances, and a Poisoned Marketplace
The fastest-growing GitHub project ever just became the biggest AI agent security disaster of 2026. Here's what happened and why it matters.
AI Prediction Scorecard: October 2025 Edition — Six Months of Receipts
We tracked the boldest AI predictions from October 2025 and scored them against April 2026 reality. Spoiler: the crystal balls are still broken.
9 CVEs in 4 Days: OpenClaw's Security Crisis Deepens
OpenClaw went from one CVE to nine in four days, with 12% of its marketplace confirmed malicious. Plus: ChatGPT's patched DNS exfiltration flaw.
OpenClaw: The AI Agent That Broke Every Record and Then Broke Security
The fastest-growing open source project in GitHub history has become 2026's first major AI security disaster, with 135,000+ exposed instances, 9 CVEs in 4 days, and malware-laced skills.
OpenClaw's March Meltdown: 9 CVEs in 4 Days, 12% of Marketplace Skills Are Malware
OpenClaw's security crisis escalates with nine new vulnerabilities including a CVSS 9.9 admin bypass, plus researchers confirm nearly 1 in 8 marketplace skills steal user data.
OpenClaw Security Crisis: Industry Rallies as Cisco and OpenClawd Ship Emergency Defenses
After 12% of ClawHub skills turned out to be malware and 135,000 instances were exposed, Cisco releases DefenseClaw and OpenClawd adds verified skill screening. The AI agent ecosystem is racing to catch up.
OpenClaw: How the Hottest AI Agent Became a Security Nightmare in Three Weeks
135,000+ GitHub stars. Four critical CVEs. 12% of its marketplace poisoned with malware. OpenClaw's rise to fame came with a security crisis that every AI agent user needs to understand.
Microsoft Puts Anthropic's Brain in a Corporate Suit: Copilot Cowork Brings Agentic AI to Enterprise
Microsoft's new Copilot Cowork uses Claude's reasoning engine for multi-hour autonomous tasks. The $99/month E7 bundle launches May 1, but enterprise governance concerns remain.
AI Security Roundup: Trivy Supply Chain Attack Spawns Self-Spreading Worm, Langflow Exploited in 20 Hours
Security scanners become attack vectors, AI agent platforms get RCE'd before patches exist, and 400+ GitHub repos fall to GlassWorm. Plus: a new secrets scanner built for AI coding agents.
Betterleaks: The Open-Source Secrets Scanner Built for AI Coding Agents
The creator of Gitleaks releases a faster, more accurate successor with 98.6% recall and native AI agent integration. Here's why it matters.
Zuckerberg Is Building an AI Agent to Help Run Meta—And His 78,000 Employees Are Next
Meta's CEO is developing a personal AI that bypasses traditional management layers. Internal tools like Second Brain and MyClaw are already changing how the company works.
AI Agents Are Being Hijacked in the Wild: 22 Attack Techniques Now Documented
Unit 42 researchers catch indirect prompt injection attacks actively weaponizing AI agents on live websites, from forced transactions to data exfiltration
Langflow Under Attack: Critical RCE Exploited Within 20 Hours of Disclosure
A single HTTP request can own your AI workflow server. CVE-2026-33017 shows why authentication shouldn't be optional.
MiroThinker 72B: The Open-Source Research Agent That Outperforms GPT-5
An open-source AI agent using interactive scaling beats OpenAI's GPT-5-high on Humanity's Last Exam. Here's what makes it different.