Policy dependency / Stack layer
CrowdSec discloses a May 2026 private-repo leak via a backdoored TanStack component, found four months later
CrowdSec
Stack layer / Threat pattern
37,623 provenance-labeled agent PRs: Codex code was reverted half as often as human code, Devin's 31% more, and Claude Code PRs waited 12.6 hours for first review
arXiv 2609.17598
Policy dependency / Stack layer
Fireship contrasts DeepMind's Dream-RSI with China's five-stage RSI roadmap and asks whether rewriting exploration policy counts
Fireship (YouTube)
Stack layer / Contrast
Harness-Layer Auto-Research Cut Agent Token Traffic 44.7-49.0% at Equal Task Performance
arXiv 2609.20519
Policy dependency / Stack layer
SCA-Agent reconstructs a dependency's trace across Code, Build, Release, Deploy and Runtime and beats the best traditional SCA tool by 18.76 points of F1
arXiv 2609.18391
Stack layer / Threat pattern
Spain's Data Protection Agency Logs the First Breach Where an AI Agent Chained the Whole Attack Itself
SecurityWeek
Stack layer / Contrast
Hierarchos-Native trains 143 Transformer architectures on Rust and Vulkan with no CUDA or PyTorch
GitHub / necat101 (via r/LocalLLaMA)
Stack layer / Threat pattern
A Model Can Fingerprint vLLM or SGLang From Its Own Output Tokens, Then Exploit It
arXiv 2609.20614