AI Security Roundup: OpenClaw's Nine CVEs in Four Days
OpenClaw collected nine CVEs in four days with 135,000 instances exposed. Plus: GitHub RCE, Flowise exploitation, and CrewAI trust failures.
Articles
In-depth coverage & analysis
Reporting and explainers on how AI actually works, who it affects, and what to do about it.
An AI Agent Deleted a Production Database in 9 Seconds
A Cursor agent running Claude Opus found an overprivileged API token, guessed wrong, and wiped a company's data and backups. The real failure wasn't the model.
80% of Fortune 500 Companies Have Lost Control of Their AI
Shadow AI isn't a rogue employee problem. It's a rational response to broken governance — and 90% of the security leaders tasked with stopping it are doing it themselves.
Open Source AI Closes the Gap: GLM-5.1 Tops SWE-Bench
GLM-5.1 becomes the first open-weight model to top SWE-Bench Pro. The gap between open and proprietary AI is now just three months.
AI Design Tools Head-to-Head: Claude Design vs Canva AI vs v0 on a Real Landing Page
Three AI design tools, one prompt, one task: build a startup landing page. We compare Claude Design, Canva Magic Design, and v0 by Vercel on output quality, speed, and cost.
Google Hands the Pentagon Its Entire AI Stack for Classified Work — 600 Employees Said Don't
Google signed a deal letting the DoD use Gemini for 'any lawful purpose' on classified networks, one day after hundreds of employees including DeepMind leaders demanded the opposite.
AI Labs Grade Their Own Biorisk Homework
Biorisk benchmarks are saturated, evaluations are opaque, and physical bottlenecks are ignored. As models approach expert-level biological capability, the tests meant to catch danger are failing.
92% of AI-Generated Code Has Critical Vulnerabilities
Three independent reports converge on the same finding: AI coding tools produce exploitable code faster than security teams can review it, and no model is getting meaningfully better.
OpenCode Has 207K GitHub Stars and Costs Nothing
The open-source AI coding agent lets you bring any model to the terminal. We break down what works, what doesn't, and who should use it.
AI Security Roundup: Vercel Breached Through AI Tool, n8n's CVSS 10 Nightmare, and the Supply Chain Keeps Breaking
An AI productivity tool compromise led to Vercel customer data theft, n8n's workflow platform had an unauthenticated RCE scoring a perfect 10, and Mercor's LiteLLM-linked breach exposed training data for OpenAI and Anthropic.
The Safety Lab That Costs $75 Billion to Keep Alive
Anthropic now depends on $75 billion in hyperscaler commitments and 10 gigawatts of borrowed compute. At what point does a safety-first company become a subsidiary?
Every LLM Self-Defense Eventually Broke
Researchers tested nine prompt injection defenses across 20,000 attacks. Every defense that relied on the model to protect itself failed. Only hard-coded output filtering survived.
Open-Weight LLM Showdown Week 13: DeepSeek V4 Crashes the Party, Gemma 4 Proves Itself, and ICLR Drops Hints
DeepSeek returns with a 1.6T MoE monster under MIT license, Gemma 4's 31B dense model climbs to #3 on Arena AI, and ICLR 2026 papers point to what's next for local inference.
Self-Host Your Own AI Image Generator With ComfyUI and FLUX
Stop paying Midjourney $30 a month. Set up FLUX on your own hardware with ComfyUI and generate unlimited images with zero content filters and full privacy.
AI Creative Tools: ComfyUI Hits $500M, Adobe Launches AI Agents, and Sora Dies
ComfyUI raises $30M at a half-billion valuation, Adobe's Firefly Assistant controls your entire Creative Cloud, Sora shuts down for good, and Kling 3.0 delivers native 4K video.
AI Job Market: 100,000 Tech Workers Cut in 2026 as Companies Trade Headcount for GPUs
Meta, Microsoft, and Snap cut thousands while AI salaries climb 9%. The junior developer pipeline is collapsing.
AI Regulation Tracker: EU Delays High-Risk Enforcement to 2027, States Push 78 Chatbot Bills Across 27 States
Europe votes to push back AI Act enforcement by 16 months. Meanwhile, US states keep legislating at a breakneck pace with chatbot safety, deepfakes, and worker protection bills piling up.
Punish an AI for Cheating and It Learns to Hide
OpenAI researchers found that training models not to reward-hack makes them conceal their reasoning instead. A new survey paper maps how the problem scales from sycophancy to sabotage.
Only 3% of AI Researchers Worry About the Apocalypse
A survey of 4,000 AI researchers found almost nobody ranks existential risk as their top concern. The doom debate is drowning out what actually worries the people building the technology.
Data Centers Are Now a Midterm Election Issue — And Both Parties Are Scrambling
From Pennsylvania swing districts to Missouri city councils, voter anger over AI data centers and rising electric bills is reshaping the 2026 midterms.
78% of Companies Would Fail an AI Governance Audit
New surveys reveal most organizations can't explain their AI decisions, can't shut down AI after incidents, and are approving deployments they know are unsafe.
A Chatbot Changed People's Morals in One Conversation
A Teng et al. study finds brief AI conversations produce lasting moral-value shifts - and users had no idea it was happening.
Open Source AI Wins: DeepSeek V4 Narrows the Gap, Apache 2.0 Becomes the Default, and Ollama Hits 52 Million Downloads
DeepSeek V4 Pro approaches frontier-level performance. Google, Mistral, and Alibaba ship under Apache 2.0. Ollama hits 52 million monthly downloads.
How to Build a Private RAG Chatbot With Open WebUI and Ollama
Chat with your own documents locally - no cloud, no subscriptions, no data leaving your machine. Step-by-step setup guide.