Security

Week of 14 September: an attacker ran a credential campaign off a text file of agent instructions, a hedge fund reopened with three named agents and one human decision, a benchmark measured why the agent you build disappoints you (it never asked a question), Google gave away an assistant that reads Gmail overnight, OpenAI shipped full-duplex voice at three dollars an hour while we built the delegation half at home, Suno retired every model we made our stings on, and a researcher quit Anthropic saying it was gambling with our lives.

Week of 7 September: Linus Torvalds credits an AI in a kernel commit while Debian votes on whether that should be allowed, a local model rebuilds Adobe’s closed DNG format from the bytes up, a company starts selling models with the safety layer removed (the technique is called abliteration, and a paper measured what it costs), World Labs ships Atlas behind a partner gate, and stolen AI session cookies turn out to be doors into work inboxes that no administrator can close.