Shared entity / Contrast
Unredacted NYT v. OpenAI Filings: 91,692 Article Copies in Mid-Training Data and a 93% Click-Through Collapse
TechCrunch / Hacker News (244pts, 171 comments)
Shared entity / Actor role
Microsoft Agent Framework 1.19.0 hardens MCP: per-invocation session scoping, ZIP-only skill archives, digest verification
GitHub Releases
Stack layer / Threat pattern
Plugin4Shell: One SHA-Pinning Bug Gives Zero-Click RCE in Claude Code, Codex, Copilot and Gemini CLI
Help Net Security (corroborated by The Register)
Policy dependency / Stack layer
CrowdSec discloses a May 2026 private-repo leak via a backdoored TanStack component, found four months later
CrowdSec
Stack layer / Contrast
Cactus Needle 3 is a 121M-parameter tool-calling model that ships in 8-29MB slices and refuses to chat
Cactus Compute / Hugging Face (via r/LocalLLaMA, 183 upvotes)
Stack layer / Threat pattern
Five new MCP server CVEs, and four of them are the same bug: a network listener with no authentication
NVD
Stack layer / Threat pattern
Spain's Data Protection Agency Logs the First Breach Where an AI Agent Chained the Whole Attack Itself
SecurityWeek
Shared entity
Mantic Raises $25M After Becoming the First Bot to Beat Every Human in the Metaculus Cup
Reuters via CNA (corroborated by The Star and Metaculus FutureEval results)