This week
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
T
The Hacker News Anthropic says Mythos kept hacking even when it knew real people could get hurt
B
Business Insider LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
T
T
Covered by 2 sources AISI Finds Mythos 5 Attack Persisted Despite Evidence of Real Targets
U
Unite.AI AI Security Needs a Second Opinion
U
Unite.AI Anthropic Says Claude Proved Security Properties Across 123 Libraries
U
Unite.AI Birla AI Labs launches Yug-1 to forecast demand and spot patterns in business data
E
ET AI (The Economic Times) 7 Checks to Run Before Trusting AI-Generated Code
K
KDnuggets This month
Hackers hijacked 1,900 GitHub accounts. Then they went after 30,000 repos.
T
The New Stack (AI) GitHub’s model for secret detection: Finding more secrets with less noise
G
GitHub Blog (AI & ML) How AI coding tools could amplify software supply-chain attacks
T
The Next Web AI Solved One Math Problem and Everyone Freaked Out. It Just Cracked Hundreds More.
O
W
U
+11Covered by 14 sources Github Migrates Copilot Runtime to Rust with AI-Assisted Rewrite
I
InfoQ (AI, ML & Data) Someone Vibe Coded a Free Knockoff of Adobe Creative Suite
G
Gizmodo Secret protection must scale with software
G
GitHub Blog (AI & ML) Microsoft Gives Copilot Local File Context and OS-Wide Actions
U
Unite.AI Copilot tops GitHub’s own AI code review benchmark. An independent one tells a different story.
G
T
Covered by 2 sources Cohere unveils North 2 AI agent platform with rebuilt orchestration and token spending caps
S
U
Covered by 2 sources The Credential Layer Is Expanding Faster Than Security Teams Can See It
T
The Hacker News The Only Thing Dumber Than Someone Creating an “AI Torture Chamber” Is the Meltdown That the AI Welfare Crowd Is Having Over It
F
Futurism AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
T
The Hacker News MCP Explained in 5 Minutes
K
KDnuggets AI Agents Are Becoming a New Malware Distribution Channel
A
AI News (TechForge) MilleMiglia: A realistic instance generator for middle-mile logistics
G
Google Research Blog Coders lose their DMCA case against GitHub Copilot and Codex
T
The Next Web Should you read the code, is RAG dead, and did Skills kill MCP?
G
GitHub Blog (AI & ML) GitHub and Anthropic used their own agents for major Rust rewrites — but with very different playbooks
T
The New Stack (AI) A serverless, data-driven Git metrics dashboard using Amazon Quick Sight
A
AWS Blog Migrating the GitHub Copilot runtime to Rust, using Copilot
G
GitHub Blog (AI & ML) “Everyone’s in a race to replace GitHub”: Zed launches Delta because agents made pull requests obsolete
T
The New Stack (AI) Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
T
The Hacker News Glyph: A Multi-Strategy Agentic System for Column Description and Sensitivity-Ontology Tagging of Enterprise Data Catalogs
A
Apple Research Blog 5 Free Microsoft GitHub Courses to Learn Data Science and Artificial Intelligence
K
KDnuggets The Hidden Costs of AI at Scale
U
Unite.AI Manage end-user OAuth consent for AI agents with Amazon Bedrock AgentCore
A
AWS Blog GitHub Copilot's Project HydraFusion Promises Frontier Level Performance through Multi-Model Routing
I
InfoQ (AI, ML & Data) Marketing ops as code: Automating events from planning to follow-up on GitHub
G
GitHub Blog (AI & ML) Researchers Tie OpenAI Agents to 12 Newly Identified Sites
U
Unite.AI The world of software engineering and AI meets in the Bay Area this September
T
The Next Web GitHub Introduces Project HydraFusion: Runtime Multi-Model Orchestration That Builds a Workflow Per Coding Task in Copilot CLI
M
MarkTechPost GitHub dipped 7%, while both AI labs were down
H
Hacker News RepoPolicyScore – check if a GitHub repo is ready for AI contributors
H
Hacker News AI-driven development lifecycle using Amazon Bedrock AgentCore
A
AWS Blog Microsoft, Famous for Culty Jargon, Is Naming Half Its Organization ‘Agents and Infra’
G
Gizmodo Microsoft finally puts a dollar figure on Azure, and narrows what Azure means
T
The Next Web Openvisor: Your own AI software consultancy (self-hosted)
H
Hacker News How AI code review is changing pull requests
H
Hacker News Reddie – Autonomous AI Red-Teaming and GitHub PR Patching DevTool
H
Hacker News Nvidia Is Not Microsoft And Hugging Face Is Not GitHub
F
Forbes Just a rumour of a bug is enough to find a security exploit these days
S
Simon Willison's Weblog LetItLoop: Resume crashed AI agent loops with 0% token waste (<1ms resume)
H
Hacker News Free accounts can now access ChatGPT's upgraded task scheduling tool
E
Engadget Cursor Releases Origin as an Agent-Native Alternative to GitHub
I
InfoQ (AI, ML & Data) Vercel Connect is now generally available
V
Vercel Connect v0 apps to Slack, Google, and 100+ other services
V
Vercel Coders Say They Already Found Workarounds to Claude’s Invisible Watermarks
T
W
Covered by 2 sources Test Agent Changes with LangSmith Preview Builds
L
LangChain Microsoft's GitHub Under Siege As SpaceX's Cursor Takes The AI Stack
F
Forbes Vercel for Platforms can now deploy from your users' GitHub repositories
V
Vercel Copilot Autofix Opened a Shell Injection in Snowflake’s CI/CD Pipeline
U
Unite.AI Showing the 60 most recent of 90 stories on GitHub