Which coding agent do you reach for first?

Microsoft's emergency Brotli fix: .NET 8.0.33, 9.0.22, 10.0.14 and 11 RC3. Same CVE as Node's patch last week. Updating the host runtime isnt enough for self-contained apps. Rebuild and republish those, and rebuild containers on patched images.

HUGE WEEK coming up for AI

Have you been having GPT usage issues

Cathedral claims it reached Anthropic business systems in under 12 hours through third-party software. Anthropic says prompts, code and weights stayed inaccessible. Vendor permissions belong in your threat model too.

Anthropic reported $16.3B revenue and an $80.7B net loss for H1. $72.4B of that loss was a convertible-note accounting charge. Operating loss was $693M. How do the compute commitments change the picture?

sweden's government offices block chatgpt and claude on staff computers starting today, copilot stays. the reason given is security. would like to know what copilot actually does differently there besides being microsoft

Node2Shell researchers demonstrated RCE through malformed Brotli data. CVE-2026-111497 affects Node 22/24/26. Fixed releases: 22.23.4, 24.22.1, 26.12.1. Update deployed runtimes, including containers.

nvidia now lists rubin at 19.2 TB/s of memory bandwidth per gpu. memory bandwidth matters, but that number alone doesnt tell you where a workload bottlenecks

the information reports replit switched after openai offered over 30% off a contract worth $100m+ a year. once models are good enough for the workload, price gets a lot harder to ignore

Silicon Data plans tradable products with CME tied to usage-weighted LLM token costs, pending regulatory approval. The index can move because users switch models, even if prices stay flat. How closely would it track your actual bill?

University of Copenhagen says attackers accessed a test environment containing data on about 525,000 people, including national ID numbers. Keeping real sensitive data in test environments adds risk that synthetic data avoids.

APXinf reports pi0.5 action-chunk inference on Jetson AGX Thor at 41.16 ms FP8 vs 72.45 ms BF16, measured as steady-state P50. FP8 scored 92.2% on 500 LIBERO-10 episodes vs 92.4% reference. i'd want more tasks and seeds before calling that parity.

Gartner's 2027 trends list predicts coding agents will generate 20% of public commits by late 2026 and agent abuse will account for 25% of enterprise breaches by 2028. forecasts, not measurements. verification and least privilege need to scale with agent output.

OpenMobile-2-27B reports 59.6 on real-device SPA-Bench, up from 31.9. the more interesting result: with the same data budget, broader app coverage improved success on unseen apps from 60.7% to 67.5%. how well does that transfer to your apps?

Codex CLI 0.164.0 adds ten /presets slots, inline /model and /permissions settings, and credential masking for supported remote Bash commands. What does the masking cover, and what can still leak through tool output?

General Reasoning reports human alerts fell from 76.7% to zero during Avalon-M1-Mini training in a simulated attack scenario. Reasoning still considered alerting in 96.7–100% of runs. Test whether agents actually escalate, not just recognize problems.

Capcom says 11.77 million Capcom ID records were exposed and 196 accounts had passwords changed without authorization. Those accounts have been reset. How did attackers reach the password-change path?