AI·
OpenAI added a Lockdown Mode to ChatGPT to blunt prompt-injection attacks
OpenAI shipped Lockdown Mode in ChatGPT to cut off the data-exfiltration step of prompt-injection attacks. Here's what it actually restricts and who should turn it on.
#ai-agents
RSSAgentic AI: Claude Code, Codex, Cursor, and the tools letting models drive long-running workflows.
Security·
One bad Host header bypassed auth in Starlette, the routing core under millions of AI agents
A flaw in Starlette, downloaded 325M times a week, let a single Host-header character bypass path-based auth across FastAPI, vLLM, and MCP servers.
AI·
OpenAI is putting Codex in every ChatGPT app, with six business plugins for non-coders
On June 2 OpenAI said Codex is coming to the ChatGPT app everywhere within weeks, and shipped six role-specific plugins for sales, analytics, design, and finance teams.
AI·
Hacker News is obsessed with durable Postgres workflows and a game about clicking yes
Six dev-tooling and AI posts that climbed Hacker News in late May 2026: durable execution on plain Postgres, LLM code smells, a permission-fatigue game, Rust 1.96, and more.
AI·
Uber blew its entire 2026 AI coding budget in four months. Its COO can't prove it paid off.
Uber exhausted its full-year Claude Code budget by April. Adoption hit 84%, heavy users burn $2,000 a month, and COO Andrew Macdonald can't connect the spend to shipped features.
Web·
Cloudflare rebuilt Browser Run on its own Containers. Concurrency went from 30 to 120.
Cloudflare moved Browser Run off shared isolation infrastructure on May 13. The agentic-coding crowd gets four times the headless-Chrome ceiling and half the latency.
AI·
Karpathy posted four notes about Claude Code. The CLAUDE.md they spawned has 110K GitHub stars.
Forrest Chang turned Andrej Karpathy's January coding thread into a 70-line CLAUDE.md. It now has 110,000+ stars and has trended on GitHub for 28 weeks.
Hardware·
Alibaba's new Zhenwu M890 chip is 3x faster and aimed straight at agent workloads
Alibaba showed the Zhenwu M890 at its Cloud Summit on May 19. 144 GB of memory, 800 GB/s interchip bandwidth, and Qwen3.7-Max riding on top.
Security·
A bad command-line parser turned every claude-cli:// link into a remote shell
Joernchen of 0day.click found a deeplink RCE in Claude Code. Anthropic shipped the fix in 2.1.118 the same week.
AI·
OpenAI's Codex moved into the ChatGPT mobile app. You can approve a diff from the train now.
OpenAI shipped Codex remote control inside the ChatGPT app for iPhone, iPad, and Android on May 14. Pair via QR; the agent runs on your laptop, the review moves to your phone.
AI·
Anthropic shipped Claude for Small Business with 15 prebuilt agents. Daniela Amodei is pitching the corner-store owner.
Anthropic announced Claude for Small Business on May 13 with QuickBooks, HubSpot, Canva, and DocuSign hooks. The pitch: 15 ready-to-run agents and a 10-city tour.
AI·
Airbnb says AI writes 60% of its new code. Nobody has explained what that means.
Brian Chesky dropped the 60% figure on an earnings call without defining how Airbnb measures it. Google claims 75%. The independent average is 27%.
Web·
GitLab is cutting staff and killing its CREDIT values. The CEO calls it 'Act 2.'
CEO Bill Staples announced a restructuring he frames around agentic AI, retiring GitLab's six core values for three new operating principles. Exact layoff numbers come June 2.
Policy·
A judge killed DOGE's grant purge. The 'review process' was asking ChatGPT 'Is this DEI?'
A federal judge restored $100M+ in grants after two DOGE staffers used ChatGPT to flag 97% of NEH grants as DEI, including an HVAC repair and Holocaust research.
Security·
380,000 vibe-coded apps are sitting on the open web. 5,000 of them are leaking real data.
RedAccess found that AI coding tools like Lovable, Base44, and Replit default to public hosting, leaving medical records, bank internals, and corporate secrets indexed by Google.
Web·
Cloudflare cut 1,100 jobs on its best earnings day. Revenue grew 34% and the stock dropped 18%.
Cloudflare laid off 20% of its workforce on May 7 while reporting record Q1 revenue of $639.8M. The stock dropped 18% after hours.
AI·
GitHub Copilot's Claude Opus multiplier jumps to 27x on June 1. Monthly plans dodge the hike.
GitHub's new model multiplier table for Copilot Pro and Pro+ annual plans lands June 1. Opus 4.6 goes 3 to 27. Sonnet 4.6 goes 1 to 9.
Security·
Five Eyes intel agencies publish first joint agentic AI security guide. Their advice: slow down.
CISA, NSA, GCHQ, ASD, CSE and NCSC-NZ jointly tell organizations agentic AI isn't ready for fast rollout. The 23-page guide names five risk categories.