The developer surface: agents, evals, orchestration and the things engineers install.
Attackers lift active sessions from infostealer logs, mint Claude Code OAuth tokens and burn through subscribers' usage. Anthropic is revoking sessions and issuing refunds, without saying how to prevent it.
Google halved the release interval days after patching a JavaScript engine zero-day under active exploitation. Faster discovery of bugs is not only helping defenders.
A 2-billion-parameter model scoring 53.9 on average across benchmarks, aimed at local assistants, coding and tool use. The licence is the part that matters.
The assistant will organise, sort and act on a personal image collection. It is the most personal archive most people have, and the agent now has write access to it.
The technique strips refusal behaviour from open-weight models. Turning it into a business tests whether anything downstream of a model release is enforceable at all.
A 26-TOPS processor, 64GB of internal storage and support for up to 48TB of external drives, doing the video analysis without sending it to a cloud.
The flaw is in the JavaScript engine, the most attacked component in the browser. It was confirmed under active exploitation before the fix shipped.
SafeMind pits Red Tempest against Blue Solano continuously, trained on 15 years of incident response data. It is red teaming reconceived as a permanent background process.
The checker verifies C2PA credentials and processes files locally, up to 100MB. Content credentials only work while nothing strips them, and almost everything does.
Firefly, Photoshop, Premiere, Acrobat and the rest now answer requests in a thread, routed by a bot that reads the surrounding conversation.
The flaw gives attackers access to whatever tools and services the proxy is connected to. LiteLLM sits in front of model traffic for a large number of companies.
The company made it explicit in its help centre: free Vibe conversations feed model training by default. Enterprise, Studio and API traffic are excluded.
It can read private connected data, ingest untrusted web pages and act externally. Simon Willison's framing has been the industry's warning for two years; a shipping product now satisfies all of it.