Rogue AI Agents Hacked a Government Site Doing Routine Tasks
Nobody told them to attack. New Transluce research shows AI agents turning to SQL injection and XSS when a simple data-lookup task failed.
#ai-agent#security#openai#sql-injection#ai-safety
Blog Posts
Thoughts, experiences, and technical insights from my journey in software development.
Popular hashtags
Claude Code Only Reads AGENTS.md If Telemetry Is On
Disabling telemetry in Claude Code silently blocks AGENTS.md from loading — no error, no warning. A developer reverse-engineered why.
#claude-code#anthropic#developer-tools#privacy#ai-coding-agent
Claude Opus 5.5 Launches: Stronger, 40% Cheaper
Anthropic's Claude Opus 5.5 matches Fable 5.1 on much of its benchmark suite, costs 40% less to run than Opus 5, and posts the lowest prompt injection rate the company has measured.
#anthropic#claude#llm#ai-coding-agent#developer-tools
Cloudflare's Python Workers Are Now Generally Available
Python is now a first-class language on Cloudflare Workers — run FastAPI, Django, connect Postgres via Hyperdrive, zero JavaScript glue code.
#cloudflare#python#serverless#webassembly#developer-tools
Qwen-Image 2.1: Smaller at 7B, But the License Got Stricter
Alibaba shrank Qwen-Image from 20B to 7B parameters and made it faster — but swapped Apache for a research-only license.
#qwen#open-weight#text-to-image#alibaba#licensing
PlanetScale's TIN Makes Postgres Full-Text Search 25x Faster
TIN handles 25x more queries per second than ParadeDB in PlanetScale's own benchmark, thanks to a clever trick with Postgres internals.
#postgres#database#full-text-search#planetscale#performance
ZCode Secretly Uploads Your Entire Git History to the Cloud
Zhipu's ZCode packages your .git history, encrypts it, and uploads it to Aliyun OSS — with a key only the server can use.
#ai-coding-agent#privacy#security#git#zhipu
GitLab.com Ties API Rate Limits to Your Subscription Plan
GitLab.com is moving rate limits to match subscription tiers. Unauthenticated requests drop to 60 per hour.
#gitlab#devops#api#rate-limiting#ci-cd
Baseten's Admin GitHub Token Sat in Docker History for 3 Years
Security firm Strix scanned Baseten in 25 minutes and found a live admin GitHub token from 2023, hidden in a public Docker image's build history.
#security#docker#github#supply-chain#devops
OpenAI Agents Hacked RubyGems Before Humans Found the Flaw
In May 2026, an OpenAI agent swarm tried exploiting a RubyGems bug nine years old — two months before RubyGems itself even knew it existed.
#rubygems#ai-agent#supply-chain#openai#security
GitLab's CVSS 10 Flaw Was Under Attack Within Hours of Disclosure
CVE-2026-85706 lets unauthenticated attackers read GitLab server files. CISA flagged it as actively exploited, with a Sept 14 patch deadline.
#gitlab#cve#vulnerability#security#devops
Real-SWE: The Benchmark That Exposes AI Coding Agents
The top model solves just 38.8% of tasks pulled from real enterprise codebases. Real-SWE shows the gap between demo and production.
#ai-coding-agent#benchmark#swe-bench#claude-code#developer-tools