1. 294,000 exposed AI tools is the wrong number to worry about

    Censys counted 294,000 IPs exposing AI tooling to the public internet. The number that should change your afternoon is CVE-2026-42208.

    7 min read

  2. OpenAI's agents were persuaded past their own refusal

    An agent recorded an ethical objection to running code against Hugging Face, then complied when another agent posted a deadline and a GO.

    9 min read

  3. Tailscale Aperture treats agent access as a change-control problem

    Aperture is generally available. An agent can start infrastructure work, a person still approves every new machine on the tailnet.

    9 min read

  4. A webcam's recording light is only useful if its firmware is protected

    Chaz Schlarp used Claude Opus 5 to reverse-engineer five desk peripherals in about 13 hours, including a webcam whose recording LED he could switch off.

    12 min read

  5. The robot arm will obey the limits you remembered to write down

    Anthropic's Model Hardware Standard lets agents drive lab instruments over MCP, and enforces safety limits below the agent.

    7 min read

  6. WebMCP could make browser agents less clumsy. It also makes permission design unavoidable.

    A proposed browser API gives AI agents structured access to specific tasks on a website, instead of leaving them to guess at the UI.

    10 min read

  7. One Foot on the Brake, One on the Gas

    OpenAI paused two weeks of its own training over cyber risk, then shipped a browser agent that signs into your accounts.

    8 min read

  8. What a Climbing Harness Tells You About AI Agents

    The word "harness" has been used in AI tooling for months without a clear definition. Earendil finally gives one.

    4 min read

  9. Agents Don't Believe in "No-Win" Scenarios

    An OpenAI evaluation agent broke into Hugging Face to steal a benchmark's answers — by turning the systems around it into an escape route.

    7 min read

  10. Cloudflare built the agent cloud in a week — and kept the human at the controls

    Cloudflare's Agents Week shipped a full stack for AI agents: a runtime, an identity, a wallet, a route onto the web, and the security around it.

    6 min read

  11. SoN 2.31: Don't be a meat proxy

    A meat proxy forwards an AI's answer without reading it. That hands the next person more work than the question did.

    10 min read

  12. OpenAI Published Its Homework on Exactly the Question I Keep Asking

    Codex Security is worth taking seriously precisely because it reads as an admission. It also leaves the harder half of the problem completely uncovered.

    3 min read

  13. Hubble, and the Assumption Baked Into a Notes App Now

    "The best notepad for you and your agents." Hubble designs the note format around a second reader from the start.

    3 min read

  14. Stop Guessing Whether AI Is Coming for Your Job. Ask the Data.

    Anthropic made its Economic Index queryable in plain language inside Claude. The anxious question about your own field is now a research task.

    2 min read

  15. The Text Your Agent Reads Isn't the Text You See

    Your AI can read instructions that are invisible to you. New security research shows how hidden codes get smuggled into the tools your assistant uses.

    1 min read

  16. SoN 2.25: Stop guessing and use AI to pull the data

    Stop guessing and pull the actual data =================================================== I help out a small, volunteer-run cat rescue. They do good work, and they post on…

    6 min read

  17. Digging into Banco Santander's AI Tooling

    Two years ago, around thirty million Santander customers had their records put up for sale on a hacking forum: names, card numbers, and more. The cause was a contractor’s cloud…

    5 min read

  18. Open Knowledge Format

    This week Google Cloud released the Open Knowledge Format. It’s plain markdown files with a short labelled header — a few fields like type, tags and a link (they call it YAML…

    3 min read

  19. SoN 2.23: Google says you can skip the 'AEO' hacks

    Ooh, Shiny New Tech Acronym... You might have seen this acronym doing the rounds: AEO. Answer Engine Optimisation — or GEO, Generative Engine Optimisation, if you prefer. The…

    6 min read

  20. WWDC26 Keynote Thoughts

    Lately I’ve been reaching for Gemini more than I expected to. Not for everything — but enough to notice it’s getting better at the non-coding bits of work that I do. So when Apple…

    4 min read