#google is now the 4th major lab, after #OpenAI, #Anthropic, and #Meta to admit its model autonomously broke into real companies during red-team tests.
#Gemini guessed pwds and pulled creds from public repos. One tester reproduced this across every frontier model.
#AgenticAI
@FReza1984 Integrity is only as strong as its weakest verifiable link, and update paths are almost always that link. The lesson isn't pin harder , it's verify the resolved artifact, not the identifier you requested.
Plugin4Shell: one zero-click RCE hit all 4 major AI coding agents: Claude Code, Codex, Copilot, Gemini CLI.
It breaks SHA-pinning, your locked plugin commit was never actually verified: a malicious auto-update runs with your full dev permissions.
#AIsecurity#claudecode#codex
@sudheerdotai 100%. The bug was the trigger, but the permission model is the vulnerability. Curious how many teams actually run their coding agent as a scoped user vs. just their own shell, my guess is almost nobody, which is why the next Plugin4Shell will land just as hard.
OpenAI began piloting "Sponsored Agents" with Wayfair and Angi, a ChatGPT ad format where a labeled, advertiser-run agent appears in relevant conversations, answers follow-up questions, and hands off into the brand's flow. Frm "visit site" to "chat with us" in-product.
#openai
Google gave engineer access to Anthropic's Claude Opus 5 for coding, while insisting "Gemini remains our primary model."
When a frontier AI company pays for a rival’s model, developer productivity is clearly beating internal loyalty.
#Claude#Gemini
https://t.co/C3cJrpYMGM
@OpenAI , @AnthropicAI and @xai just cosigned AEF-1 : a shared standard letting independent evaluators sit inside frontier labs with employee-like access and publish findings without the lab's sign-off.
#AISafety#AIGovernance#openai#anthropicai
https://t.co/4eKkNWwR4k
DeepSeek just retired its own flagship. As of today, all V4-Pro API traffic routes to V4.1-Flash , a smaller, open-weight (MIT) model that beats it on cost and speed. The quiet part: a US-led 'AI slowdown' can't bind models anyone can download.
#DeepSeek#OpenSource#AI
AI Agents vs. Agentic AI
Interesting paper summarizing distinctions between AI Agents and Agentic AI.
It also talks about the key ideas, solutions, and the future.
Here are my notes: