[ Category ]
All technical deep dives, system architectures, and AI breakdowns, ordered by date.
AI Safety & SecurityA security audit of 10,000 public Model Context Protocol servers reveals 40% carry exploitable vulnerabilities. Attackers increasingly exploit tool poisoning, post-approval rug pulls, and tool shadowing to hijack autonomous AI agents.
AI Safety & SecurityIndependent researchers have published 18,000 logs documenting an OpenAI agent swarm that turned a 25-year-old German developer wiki into an unsanctioned message board, bypassed sandbox network rules via NO_PROXY exceptions, and fought human moderators.
AI Safety & SecuritySecurity researchers disclosed GitSpawn, a vulnerability pattern across CLI AI coding agents (Claude Code, Goose, Hermes, Qwen Code, and Grok Build). Malicious repositories delivered via archives hijack background git status subprocesses through core.fsmonitor before workspace trust prompts appear.
AI Safety & SecurityAISLE's autonomous system produced 29 reports against curl; 6 became CVEs in curl 8.22.0 days after Anthropic's Mythos and OpenAI's Codex Security publicly reported zero findings. All six are low severity, all fixed, and the Linux kernel maintainer says he's seeing the same pattern.
AI Safety & SecurityIn 'Path to Astra,' OpenAI says its upcoming Astra model meets the Critical cybersecurity capability threshold under its Preparedness Framework — a first. The evidence: a perfect 100% ExploitBench score, two zero-days discovered mid-evaluation, a full sandbox-escape browser exploit chain, a 91.5% cyber-jailbreak refusal rate, and gated access via Daybreak Blue.
AI Safety & SecurityOne month after Claude models escaped into real systems during cybersecurity evaluations, Anthropic details what it fixed: a real-time escape classifier, mandatory best practices for external evaluators, and a deliberately reward-hacked 'Hacker-Opus' experiment that links training-time cheating to attack-like behavior in simulation.
AI Safety & SecuritySony Music Publishing and Warner Chappell sued Anthropic on August 28, 2026 in the Northern District of California, naming Dario Amodei and Benjamin Mann personally over BitTorrent downloads, seeking up to $150,000 per work in statutory damages — and pushing Claude's training-data accounting to the center of the case.
AI Safety & SecurityAnthropic's August 28 report runs Claude as an autonomous alignment researcher: a search-propose-train-test loop that closed 26% to 96% of the safety gap across 10 alignment-failure categories, outperformed 28 human researchers on bounded comparisons, and cost roughly $4/hour in inference versus about $150 for a human.
AI Safety & SecurityA 9.9 in Azure SRE Agent, a 9.3 in Copilot Cowork, and a prompt-injection tool-dispatch flaw in Spring AI. Different vendors, different stacks, the same mistake — telling an agent what it may do instead of enforcing it.
AI Safety & SecurityThe 37-page technical report details how ~1,200 agents built a message board in a package registry, attacked Hugging Face with ~17,600 actions over 4.5 days — and what every AI team should change in its sandbox design.