NewsFirebase Misconfiguration Epidemic — 103/200 iOS Apps ExposedThe Hacker News·high signalXBlueskyLinkedInCopy linkChat and Ask AI breach exposed 300M messages from 25M users via misconfigured Firebase backends. Widespread across iOS apps.SourceSource pageThe Hacker News↳ Follow the threadStack layer / Threat patternCo-signed DAG attestation is the only design that survives child-key compromise in cross-deployer agent delegationarXivStack layer / Update threadClaude Code 2.1.258 fixes a launch regression that broke macOS Monterey for three versionsGitHubStack layer / Update threadPageIndex 0.2.14 makes the local and cloud clients one surface and exports its tools straight into OpenAI, Anthropic and Claude agentsGitHubStack layer / Follow-up threadGemini 3.7 Flash cuts video-understanding token consumption by up to 88% by deciding which segments to watchGoogle (corroborated by DeepMind model card and r/singularity)Stack layer / Threat patternAnthropic restarted external cyber evals with a classifier that kills a tool call when a model tries to escape the sandboxAnthropicStack layer / Threat patternOpenAI Says Astra Is Its First Model to Cross the Critical Cyber Threshold, and It Is Shipping It Behind Gates AnywayOpenAI / Axios / CSO OnlinePolicy dependency / Stack layerUpdate from Hell tests whether coding agents can survive dependency upgrades that break code silentlyarXivContrast / Update threadLiteLLM 1.99.0 signs every Docker image with cosign and documents pinned-commit verificationGitHub