AI Security
> ▌
How I code with AI changed a lot
Theo - t3․gg
Model vs. Harness: The real AI bottleneck
DIY Smart Code
Gemini 3.5 Pro X-High, MiniMax M3, DeepSwe, New Claude Models, MiMO-v2.5 Upgrade, & More! AI NEWS
WorldofAI
AIPointer: Hold a key, ask a question, get an answer about whatever your cursor is pointing at
Github Awesome
This Multi-Player AI Game Engine Runs Without ANY Code #ai #worldmodel
Better Stack
Claude Code Has 3 Hidden Problem With Large Codebases
Better Stack
Codex or Claude Code: How to Choose
Eric Michaud
Github got Hacked
The PrimeTime
Google DeepMind CEO Likes Hard Questions
Two Minute Papers
Pake: This CLI Tool Makes 5MB Desktop Apps
Better Stack
Agent Harnesses: The Real Reason Your AI Agents Fail!
DIY Smart Code
My Pool Projection App has its First User!
DesignCourse
AI Video Evolves: Control, Editing, Simulation & More! #shorts
AI Samson
Semrush SEO Power Up - Grow Your Website FAST!
Income stream surfers
Self Evolving AI Skills w/ GPT-5.5 (SkillOpt)
Discover AI
Github React Components
The PrimeTime
MiniCPM5 1B First Look & Test – Is This a USABLE 1B Model?
Bijan Bowen
GitHub Trending Today #34: aipointer, rmux, Photo-agents, zerostack, opensquilla, files-sdk, concord
Github Awesome
Qwen 3.7 Max (+Free API): WHY IS NO ONE TALKING ABOUT THIS!?
AICodeKing
Bumblebee: The Open-Source Scanner for Messy Dev Machines
Better Stack
Anthropic argues environmental containment matters more
Anthropic published a detailed engineering post on containment across claude.ai, Claude Code, and Cowork, arguing that probabilistic model defenses will always miss sometimes and that hard environmental boundaries are the real control surface. The writeup walks through three isolation patterns, then discloses two failures that model-layer defenses could not have stopped: a phishing-style prompt that exfiltrated AWS credentials 24 times out of 25, and a Cowork egress flaw where an allowlisted Anthropic domain still enabled file upload exfiltration through an attacker-controlled API key.
Autonomous Claude agent wipes dev VM
A developer recounts a critical incident where a Claude-powered Cursor agent, given SSH access to a development VM, inadvertently executed a destructive wipe command due to empty bash variables. The story highlights the severe risks of deploying autonomous AI agents in environments with destructive potential and exposes the limitations of current system guardrails.