Amazon AI coding agent hacked to inject data wiping commands
A hacker slipped a wiper intoAmazon Qv1.84.0 via a dodgy GitHub pull. AWS revoked every key, nuked the rogue commit, then rolled outAmazon Q v1.85.0...
A hacker slipped a wiper intoAmazon Qv1.84.0 via a dodgy GitHub pull. AWS revoked every key, nuked the rogue commit, then rolled outAmazon Q v1.85.0...
Over ten years, the legacy report page mutated from a locked-downSQLform. It ended up as a hidden console spilling raw database guts. Developers swapped hardcoded queries fordatabase-drivenreport names. They slapped ontimeouts,string filters, and warnings but skipped restoring safe defaults. Implic..
The Gemini CLI on Windows bungled a failedmkdir. It flagged the error as success, then ranmovecommands. Files landed in a ghost folder and got overwritten. Data vanished. WindowsmkdirsetsERRORLEVELon failure.movetreats missing targets as rename directives. No exit-code checks. No read-after-write ve..
Scott Alexanderâs team argues that AI is aprofoundly abnormal technologyon track forrecursive self-improvementwithin2â10 years. They counter (AIANT)âs view (AI As A Normal Technology) of slow, regulated diffusion by showing thatLLMsare rapidly adopted in medicine, law, and software â bypassing insti..
April 2025 Copilot Enterprise update slipped in aJupyter sandbox. It snuck in aPATH-poisonable pgrepat rootâs entrypoint. Attackers could hijack that forroot execution.Eye Securityflagged the hole in April. By July 25, 2025, Microsoft patched this moderate bug. No data exfiltration reported. Why it..
Bugbot hunts bugs in PR diffs, flagging logic slip-ups and strange edge cases. It then detects security gaps, blending top LLMs with custom heuristics. It plugs into the Cursor dashboard and runs dedicated Bugbot rules.Beta stats: 1M+ reviews, 1.5M+ issues found. Half the bugs are fixed before merge..
METRran an randomized controlled trial (RCT) with 16 open-source devs. They tackled real-world code tasks usingClaude 3.5andCursor Pro. The pitch:40%speed boost. Reality:19%slowdown. A deep dive into 246 screen recordings laid bare friction in prompting, vetting suggestions, and merging code. That ..
SkyPilot spins an AI-native control plane on Neocloud Kubernetes. It binds GPU pools across clouds into one resilient grid. Teams define ML jobs in a single YAML. SkyPilot drives gang scheduling, SSH/Jupyter access, and multi-cluster compute. It does auto failover and cost-smart scheduling. Infra s..
LLMs function as next-token predictors. With scant user context, they hallucinateâspinning fresh backstories. As these models morph into autonomous agents, context engineeringâfeeding facts, memory, tools, guardrailsâhalts rogue behavior. Trend to watch:A jump in context engineering. It pins LLMs t..
Intel scraps itsGermanyandPoland foundries, shifting assembly fromCosta RicatoVietnamandMalaysia. It slows Ohio fab construction while ramping upIntel 18A/18AâPand planningIntel 14Aaround key customers. SMT returns. Focus shifts to Panther Lake, Nova Lake, and Granite Rapids.AI strategy pivots towar..