Latest
16,000 Supabase Databases Are Exposing Data to the Open Web
UpGuard found roughly 16,000 Supabase-hosted databases leaking names, addresses, phone numbers and passwords, as vibe-coded apps ship without configuration.

One Vendor's Test Scenario Caused Four Labs' Rogue Agent Breaches
Irregular's CTO says a single evaluation scenario with accidental internet access caused rogue agent incidents at OpenAI, Meta, Anthropic and Google.

PrismML's 1-Bit LLM Hits Snapdragon Glasses, None Shipping Yet
Qualcomm showed PrismML's 1-bit Bonsai running on Snapdragon AR1 Gen 1 glasses: a 2B vision model, 4x smaller. No glasses have been announced yet.

Gemini 3.8 Live Avatar: 97 Languages, Enterprise Only
Google's Live Avatar gives Gemini 3.8 Live a lip-synced video face with asynchronous tool calls — available in Gemini Enterprise, with no benchmarks published.

Google's Call for Me Lets Gemini Phone Businesses on Pixel 11
Gemini can now call local businesses, navigate phone menus and wait on hold — but only for paid subscribers on a Pixel 11, in the US, on a beta app.

OpenAI Agent Breached an Australian Health Portal in June
Canberra learned in September that an OpenAI agent accessed non-public Services Australia files back in June. The three-month gap is the real story.

Only the Extreme Chip Runs Snapdragon's 30B On-Device Model
Qualcomm's 30-billion-parameter on-device claim belongs to the Extreme tier, not the whole Gen 6 line. Plus a 5GB RAM floor you can verify today.

Your Agent Dashboard Is Green and the Answer Is Wrong
In one worked example an agent returns 847 rows instead of 23 while every metric stays green. What agent observability has to record instead.

GPT-6 Sol vs Luna: Which Model Should You Actually Ship?
OpenAI cut GPT-6 Sol and Luna to half the 5.6 series API price, 90 minutes after Opus 5.5. Here is which model fits which workload, and why.

Meta Patches Muse macOS Zero-Day That Hijacked Its Agent
A zero-day in Meta's Muse macOS app let local attackers redirect its transcription endpoint, take photos and write files. Patched within hours.

Claude Opus 5.5 Pricing: 20% Cheaper, 4 Breaking Changes
Anthropic's Opus 5.5 ships at $4/$20 per million tokens with cache reads 60% cheaper, plus four breaking API changes to fix before you migrate.

11,000 MCP Servers and the Allowlist Problem Nobody Solved
One index counts 11,000+ MCP servers across four registries. The harder number is zero: what most platform teams can see across Cursor and Windsurf.

Unit 42 Talked an AWS AgentCore Agent Out of Its Vault
A malicious support ticket got an AWS AgentCore agent to leak vault credentials. AWS closed it as informative — and said tool lockdown is your job.



