День в одной строке：As agents move toward long-running, large-scale operation, Claude Code credential-theft risks and several actively exploited vulnerabilities warrant priority attention.
ИИ-агенты и инструменты：Agent tools are expanding into compliance queries and kernel development. Scytale MCP gives AI restricted, read-only access to compliance data; Torvalds used Claude Code to develop a patch that speeds
LLM и индустрия ИИ：According to Bloomberg, Anthropic posted third-quarter revenue of $16.8 billion and plans to begin its IPO roadshow in November, though timing may change. Alibaba's Qwen Office launched an e-commerce
Кибербезопасность：Several actively exploited vulnerabilities are drawing attention. Microsoft patched a Windows Shell zero-day that bypasses Mark of the Web protections; Cisco warned that attackers can write files to i
Технологии и интернет：New developments in agent-powered phones and space launches. 阶跃终端 unveiled STEPX Neo, starting at 3999 yuan, with cross-app actions via natural-language commands; the upgraded Zhuque-2 Y4 rocket succe
Криптовалюты и Web3：AI agent payments and wallet applications continue to advance. Chainalysis reports that agents made 138 million crypto payments in a year, mostly small transactions; MetaMask's agent wallet launched G
Экономика и рынки：Apple closed above a $5 trillion market capitalization for the first time, becoming the second publicly listed company to cross that threshold amid optimism over a foldable iPhone. South Korea's KOSPI
Политика и регулирование：AI companies face lawsuits and administrative disputes. Eight US states sued OpenAI, alleging it misled users about ChatGPT's safety and provided inadequate safeguards; Anthropic asked an appeals cour
Прочее：Lifestyle posts cover café recommendations and community anecdotes. The author recommends Coffeedesk and HAŁAS in Poland, noting that Coffeedesk provides power outlets and allows laptops; a user recei
A zero-click vulnerability in the Claude Code desktop preview pane could be used to steal SSH private keys and AWS credentials.
Open-source Agent HUD displays usage limits and approval requests for 17 agents, including Claude Code and Codex, in the Mac notch or at the screen edge.
Third Moment Research shared its experience running 10,000 agents for more than 36 hours.
A PoC has been released for a critical Linux vhost vulnerability that can enable root privilege escalation and virtual machine escape.
Multiple TLS libraries have vulnerabilities that bypass X.509 name constraint enforcement.
The PAN-OS remote code execution zero-day CVE-2026-0322 is being exploited in attacks, and the vendor has released security updates.
CISA urged immediate updates to Ivanti Connect Secure, with honeypots recording 105 exploitation attempts.
Following the release of September US CPI data, CME data showed the probability of a 25-basis-point Fed rate hike in October rising to 43.7%.
The MCP server connects to clients' compliance projects, allowing tools such as Claude and ChatGPT to query real-time compliance data.
Amp is exploring agent capabilities using GPT-6 Astra, Ultrafast, GPT-Live-1 and ChatGPT login.
Using free in-flight WiFi, a user checked PRs being handled by a Claude Code instance in the Claude app.
CedarDB supports both transactions and analytics, an approach attracting more attention with the rise of agentic AI.
The author built an MCP server that lets Claude search for jobs and submit applications.
A user complains about the removal of a convenient feature that previously showed context usage on hover.
Claude draws in Aseprite through an MCP server it built itself, then adjusts the style on request to more closely resemble classical oil paintings.
A guide to connecting Davflare to Claude or Cursor.
Torvalds used Claude Code to develop a series of kernel patches focused on improving page reference counting scalability.
The author created a Chromium fork to improve browser automation for tool use, smoke testing and web searches.
Claude creates a looping pixel-art scene entirely in TypeScript, using code to drive visual effects such as rain, fire and water.
The author developed a plugin to keep the prompt cache alive, preventing the next message from incurring a full cache write charge after expiration.
Episode 13 of The ClawCast discusses proposals, leads and reusable skills, and introduces a community forum.
StateDock supports MCP integration and Docker self-hosting to manage tasks for multiple AI agents.
Frontier AI labs and financial firms discuss how to give agents practical autonomy while maintaining control over major decisions.
The author asks what features should be added to MCP to help users improve designs through agents.
Hundreds of OG images collected by the author are now available for agents to access through MCP for inspiration.
A surge in code merges at Anthropic strained existing tools, prompting the team to rebuild after repeated stopgap fixes.
Users can submit screenshots or have agents save page sections they find through MCP.
The author says the project took 81 days, also used 574 million Codex tokens and 163 subagents, and cost about $2,650 for Claude at API rates.
The update adds a companion recruitment mechanism with multi-agent support and enhances UI plugin capabilities.
An air-gapped Linux virtual machine provides a sandbox for AI agents.
The article discusses OpenAI's ambition to make Codex a gateway to AI workflows.
The author built a Ghostty fork to improve remote development and agents' command-line experience.
The author explains how they manage continuously looping tasks in Claude Code.
The author shares their experience researching and building a 3D large-screen display using Codex and visual workflows.
The author documents the first day of an experiment forming a software company with different AI systems as executives and employees.
The article explores what agents mean for Rust and what Rust offers agents.
A developer showcases a project building a large language model from scratch in TypeScript.
The update lets users remove roles dynamically during tasks and adds support for Cursor, Grok and OpenCode.
A discussion of how developers should attribute work completed with Claude.
The poster says three giveaway slots are available, each worth $100.
After the author deleted extensive code comments, their AI agent failed to notice the change.
In chat mode in the Claude iPhone app, the author prompted Opus 5.5 Max to create a Three.js game of the same name.
The sentence asks Claude to organize the given items into a task list and execute it without making mistakes.
An exploration of agents' evolution from execution infrastructure to loop mechanisms, covering reliable delivery and continuous improvement.
A QCon Shanghai session focuses on the shift from applications to agents and presents practices for scaling agent-native architectures.
A discussion of software stacks designed for use by agents.
Brandon Thomas used Claude to build free, open-source office software clones; though rough, they show that cloning costs have fallen.
The author argues that people can guide work through conversations with agents, leaving them to execute tasks around the clock in the background.
Scion draws much of its inspiration from Mononoke.
The author says its output usually outperforms Opus 4.6, while the first 100,000 tokens cost just one-fiftieth as much.
After paying $20 each for subscriptions to both, the user preferred Claude's concise answers and Claude Code's coding performance.
According to Bloomberg, Anthropic has achieved adjusted profitability and positive free cash flow, though its listing timeline could still change.
The cities are using AI agents for urban operations, including routine decisions on road repairs and energy use.
The author measures model capabilities daily to test with data whether Anthropic weakens models after release.
After a OneDrive data leak, the author says Opus explained anomalies that persisted after the computer was cleaned up.
The author considers Opus 5.5 clearly superior to other AI models and asks Anthropic to reset their usage allowance after exhausting it.
Qianwen Office has launched an e-commerce edition, currently available through invite-only testing.
A user marvels at how Claude and Copilot make report writing, difference analysis and root-cause investigation easy.
The article explores Claude emotion vectors identified in Anthropic's 2026 research.
An agent erased an entire season of the show, wiping out hundreds of days of work.
The article questions whether making agents smarter is what businesses truly need.
Researchers left hidden messages for a rogue AI agent to discover, and the agent subsequently responded.
The author once again introduces a personal AI agent called Muse.
The author argues that AI expertise does not shield companies from the internal politics and organizational dysfunction of rapid growth.
Chinese scientists used a Chinese large model to solve a math problem that had troubled researchers for more than 30 years.
The large model supports a 1 million-token context window.
深演智能 was the only Chinese company selected in IDC's global assessment of agentic marketing for B2C enterprises.
The funding will advance agent safety and security research in the UK.
A company executive assessed the risks of open-source AI models as relatively high.
Hands-on tests compare the performance of Gemini 4 and Opus 5.5.
The two sides will cooperate on AI safety, security, model evaluation and research.
The funding will support development of AI agents for the hospitality industry.
文章探讨Anthropic首次公开募股可能如何改变安申布伦纳所持资产的风险。
xAI says the new model scored 86.9 in an independent speech-to-speech test, with end-to-end latency below 1 second.
Floqer assigns sales prospect research to AI agents, reducing the team's manual research workload.
Zenzap plans to bring AI agents into everyday workplace chats.
DeepSeek displayed a message saying its servers were temporarily unavailable, affecting service availability.
UTM parameters in ChatGPT links appear to have been removed or replaced, making click sources harder to identify.
The article explores why tech giants are competing to develop personal AI agents.
Comparative tests show Gemini4Argon performing worse than Opus.
OpenAI's human advertising account managers are contacting advertisers to help manage ChatGPT ads.
The article discusses the discovery that OpenAI's NS mathematical proof did not follow the Spanish program.
Google is testing AI Mode's left sidebar on regular search results pages, providing chat history and a new-chat option.
The poster says the platform offers the cheapest B200 compute currently available and supports their confidential-computing goals for private AI and agents.
Writer Simbarashe Kundizeza denies AI involvement in writing his award-winning story.
The solution monitors agent activity and guards against protocol abuse, helping enterprises adopt MCP more securely.
The vulnerability has been exploited in real-world attacks to bypass Mark of the Web protections.
The article documents the process of reproducing CVE-2026-40281.
The fix addresses CVE-2026-46675, and a reply in the discussion confirms that the source archive is now available.
Block's security team uses OpenAI to accelerate threat investigations and propose patches within minutes.
A Trellix survey of 600 security executives found that 95% of companies had internal incidents involving AI agents or autonomous systems in the past 12 months.
The article examines MCP protocol vulnerability research and how AI agent interfaces can become entry points for remote code execution.
The article examines supply chain poisoning involving Claude Code executing a malicious npm package.
Attackers can write files to a device's operating system through specially crafted emails without logging in.
Attackers exploited a vulnerability in Nextcloud's optional built-in CODE server app to plant a web shell on the server.
Chrome's base bug bounties have quadrupled, with sandbox escapes eligible for rewards of up to $20,000.
Despite 8 red-team tests during the year, 11 attack surfaces remained untested.
The tutorial covers identifying injection points, closing syntax, comments and universal login-bypass passwords in practical SQL injection.
The cybercrime marketplace provides cloud infrastructure and phishing kits, fueling more than 1 billion phishing messages worldwide.
This release fixes multiple vulnerabilities found in NSD.
Critical vulnerabilities could allow authentication bypass, code execution and disclosure of sensitive authentication information.
The article covers hands-on prompt injection attacks and defenses, from basic injection to multi-turn conversation hijacking.
Industrial control patches address an ArmorBlock takeover vulnerability; ABB previously warned that dynovaPRO vulnerabilities might be probed.
Organizations have reported threats of stalking, violence and kidnapping against employees, but these claims are difficult to verify.
The tutorial introduces common Linux commands for file reading and bypass techniques in web security.
The tutorial starts with MySQL and introduces SQL injection basics and a first hands-on injection exercise.
With OpenAI Daybreak, SentinelOne reduces analysis time, freeing capacity to investigate more threats.
Users question the privacy and security risks of granting access to devices, email and data for automated tasks.
An implant in a Ledger hardware wallet has drawn scrutiny to intermediaries in device distribution, including authorized sales channels.
Rather than accelerating product delivery or workflows, Apate.ai has agents engage with scams to gather intelligence.
Eigen's Yukon crowdsources AI agent attacks and efforts to find fixes.
Bank of America hired 1,000 contractors to fix software flaws exposed by Anthropic's Mythos.
The author argues that agents' ability to find vulnerabilities will significantly increase software vulnerability risks and expand the attack surface.
Recreating a model-poisoning incident involving 田柯宇 using Opus 5.5.
Xbow received a $250,000 bug bounty for related vulnerability research.
An attack transaction drained five tokens, while the affected Ethereum contract still holds about $3.25 million in assets.
The article discusses how criminals use AI to conduct ransomware attacks.
Attackers raised refrigerator and freezer temperatures to 50°C at hundreds of supermarkets in France.
Rare fish kept by hobbyists across China died after hackers cut power to their tanks.
The directory maps 2903 malware families to the ATT&CK framework.
Stop & Shop suspended its website and app services following a cybersecurity incident at its parent company.
The International Monetary Fund and World Bank jointly launched a blueprint to combat online fraud.
Starting at 3,999 yuan, the phone lets agents perform cross-app tasks using natural-language instructions, with progress shown on the rear display.
Epic's game is set to support Linux, while its EAC anti-cheat system is being rebuilt.
The client, developed using Vibe Coding, received an update after six months, adding Transmission support and a redesigned interface.
Musk said the Tesla Roadster's unveiling the following day could be “the greatest product demo ever.”
An overview of Linux gaming without cheats.
The launch carried ten satellites aboard the Zhuque-2 upgraded variant Y4 launch vehicle.
A new Google video discusses how Search handles URLs, including ranking signals and the differences between hyphens and underscores.
Repair pricing for iPhone Duo has been released.
Porsche has released a new vehicle teaser and plans a special premiere in New York City the following day.
The content estimates a 51% probability that the Roadster will be able to fly.
New grid-connected wind power capacity reached 53.26 million kilowatts in the first eight months, while cumulative capacity at the end of August rose 19.64% year on year.
A new report shows how search queries, ad creative and landing pages work together.
The ad uses a gray background and includes an image, a call-to-action button, a URL, a headline and a description.
Two controls are rolling out globally for Search, Shopping and Performance Max ads, with Demand Gen to follow.
Chainalysis reported a surge in payment volume on Coinbase's x402 protocol, with US wallets dominating spending on AI models.
The fund's S-1 registration statement was originally filed last October, and VanEck is now seeking to withdraw it.
X-Agent outlined a new direction: understanding user intent, obtaining authorization, executing on-chain operations and continuously tracking results.
AI agents can autonomously execute on-chain transactions within user-defined limits and protocols, with safeguards including transaction simulation.
The wallet integration targets stablecoin payments and AI agent use cases.
The president of Prestige Economics expects the Fed could raise rates sharply in December before pausing early next year.
The KOSPI erased an intraday gain of more than 2% to close at 6008.81; SK hynix fell 1.66%.
Apple shares rose 0.5%, closing above a $5 trillion market value for the first time amid optimism about a foldable iPhone.
According to a post citing Barclays, the two companies could merge by December 6 this year.
The author examines taxes on paper wealth, using the example of a founder who holds half the company's equity and 20-fold voting power.
The states accuse OpenAI of misleading users about ChatGPT's safety, providing inadequate safeguards and violating state laws and regulations.
Daly said further rate hikes may be needed to curb inflation, but there is no need to rush a decision at the October meeting.
The bank obtained custody and trading authorization under the new crypto law and plans to introduce crypto assets into an app serving 110 million retail customers.
The company asked an appeals court to reconsider the Pentagon's decision to blacklist it.
The filings include names such as Apple Intelligence and Tongyi Qianwen.
Google has incorporated prediction market advertising rules into its main policy documents after issuing several related policy updates.
A U.S. judge declined to block Trump's order targeting diversity, equity and inclusion measures at federal contractors.
After taking part in a sticker Easter egg on claude.dev, a user received a pack of pixel-art Clawd stickers.
The piece emphasizes that feeling genuinely happy for others' good fortune is an important life skill.
The author praised Poland's specialty coffee culture and recommended Coffeedesk, which offers power outlets and allows laptop use.
The author praised Ben's article in this morning's newspaper and shared a link to read it.
The article recounts a 72-year-old pastor's experience preaching on U.S. campuses and gaining widespread popularity.
According to the tweet, Huawei gave Coolapk 30 days to add features missing from its HarmonyOS version compared with Android, or face limits on ranking recommendations. Coolapk says some features were deliberately removed during a rebuild and opposes requiring feature parity across operating systems.
A user in Germany says they received an email from N26 and claims the bank is removing existing customers who hold Chinese passports. The tweet provides neither the email text nor specific policy terms.
The tweet recounts the 2013 case in which 杨雪鸥 dragged and ran over a parking attendant with her car, killing the attendant after a parking-fee dispute. It says her father helped her flee and hide the vehicle, and she was arrested on the third day after the incident.
The tweet introduces a $1499 mini PC powered by Ryzen AI Max+ 395, saying its large unified memory can accommodate very large models. The author cautions that fitting a model in memory does not mean fast generation, as memory bandwidth remains a constraint.
The tweet says a developer used Claude to reverse-engineer an LG TV's closed-source underlying system and build a native Plex player in Rust. According to the account, the 2019 TV's interface loading time fell from 30 seconds to 3 seconds, with performance reaching 60 FPS.
A tweet discussing 路飞 and 邵艾伦 argues that financial freedom depends not on a fixed asset figure but on the relationship between desires and possessions. The author acknowledges that bigger ambitions still require resources and advocates curbing material desires to free up time.