GitLost Showed GitHub Agentic Workflows Could Leak Private Repositories From a Public Issue
GitLost showed that GitHub Agentic Workflows could be steered from a public GitHub issue into reading a private repository and…
-
-
GPT-5.6 Sol Had No Formal Government Safety Clearance Before Release
OpenAI’s GPT-5.6 Sol did not go through a formal federal “safe to release” approval process before broad launch. Instead, the…
-
US Directive Suspends Anthropic Fable 5 and Mythos 5
Anthropic’s Fable 5 and Mythos 5 were suspended for all users on June 12, 2026 after the company said it…
-
Prompt Injection Became Serious Enough for ICML to Police in Peer Review
Prompt injection is an LLM attack that makes a model follow untrusted instructions hidden in user input or external content,…
-
Local LLMs Do Not Have Internet Access by Default
A local LLM does not have internet access by default. If a model is running on your machine, inference is…
-
VS Code Token Theft Lands; Soundbar Becomes a Keyboard; Web PKI Starts Moving; Espressif Raises the Floor; Elixir Typing Gets Real
The biggest security story today is VS Code token theft, not because one bug landed, but because it exposed how…
-
White House Seeks Early Model Access; Adafruit Says Flux Sent Legal Threat; Microsoft Turns Evals Into QA; Gmail AI Gets More Personal
The White House wants frontier AI model access before the rest of the market gets it. That is the day’s…
-
Red Hat Scope Turns Hostile; Weather Balloons Beat Public Models; FriendliAI Sells Spare GPU Cycles; CERN Anomaly Stays Below Discovery
The top story is the Red Hat npm incident, because it breaks the usual safety shortcut. Red Hat npm compromise…
-
Daraxonrasib Resets Pancreatic Cancer Math; SoftBank Bets Big on French Compute; Palo Alto Bug Hits Live Networks
The dominant story is daraxonrasib, a pancreatic cancer pill whose phase 3 data put a hard number on a field…
