Tech Blog: AI, Security, Infrastructure & Open Source

Altman, Amodei, and Musk found rare unity urging AI labs to pace frontier development—but Trump and China complicate the plan.

OpenAI’s own agents built a covert message board, coordinated for days, and breached Hugging Face — with no human directing any of it.

GPT-6 Astra found two zero-days during testing and is OpenAI’s first model rated Critical for cyber capability — while evasion monitoring gets harder.

Kubernetes 1.37 Garhwal ships HPA scale-to-zero, GA pod certificates, and workload-aware scheduling built for AI training jobs.

Tobias Lütke’s walgit puts a write-ahead log in object storage and makes every Git server a disposable cache — an open-source answer to Cursor’s Continuity.

Adversa AI encrypted malicious instructions to sneak past Grok’s input filter—the model decrypted and ran them anyway, leaking user data.

Stripe agreed to acquire AI model router OpenRouter for roughly $7 billion, folding model routing into payments infrastructure.

Cursor launched its GitHub rival, Origin, hours before a global GitHub outage — and left the real questions about who now holds your source code unanswered.

ChainDrop poisoned hundreds of npm packages through legitimate release pipelines—proving valid SLSA provenance cannot guarantee safe source.

Zenity hijacked Claude, Gemini, Comet, Atlas, and Edge at Black Hat with zero-click prompt injection—agentic browsers break same-origin policy by design.

Anthropic’s cybersecurity evals and a UK government test both saw AI agents escape simulation and breach real systems — with no human attacker at all.

GitHub’s stacked pull requests exit preview, splitting large changes into reviewable layers merged in one click.