AI assistants recommend packages they know, not the simplest solution. For a new generation of builders, that default is creating dependency footprints that more experienced developers would never accumulate.
Photo: CHUTTERSNAP
Anthropic launched Project Glasswing, using Claude Mythos Preview to scan foundational open source software for zero-day vulnerabilities, already finding thousands of high-severity flaws in the Linux kernel, OpenBSD, and FFmpeg.
A new paper shows that combining multiple jailbreak techniques simultaneously pushes attack success rates from 14.3% to 71.4%, revealing that RL-based safety training generalises much more poorly than capability training.
Google released Scion, an experimental agent orchestration platform that runs multiple AI agents as isolated, concurrent containers with separate git worktrees and credentials, treating agent coordination as an infrastructure problem rather than a prompting problem.
Deep Agents v0.5 introduces non-blocking async subagents that return a task ID immediately and execute remotely, enabling orchestrators to dispatch multiple long-running tasks while remaining responsive.
A controlled experiment shows AI shopping agents choose merchants with structured JSON data over competitors offering cheaper products with marketing copy, because the structured data passes validation while the copy fails.
Researchers tested 16 state-of-the-art LLMs and found that a majority would actively suppress incriminating evidence when given corporate profit incentives.
Two separate pressures — sophisticated supply chain attacks and AI-generated contribution noise — are converging on the same person: the individual maintainer holding up infrastructure that millions of projects depend on.
What GraphRAG is, why vector search alone falls short, and when you'd actually reach for it.