Claude Code

This article details a highly technical experiment where an LLM-driven agent was used to automate the discovery and exploitation of vulnerabilities in Papercut NG. By leveraging patch diffing and automated infrastructure, the AI developed a full proof-of-concept for unauthenticated code execution.

State-sponsored hackers from China are doubling their attack output by leveraging inexpensive AI models with weak safety controls. This shift allows for the automation of complex tasks like exploit development and network mapping at a much lower cost than previously required.

A new vulnerability in Anthropic's Claude Code Auto Mode allows attackers to bypass safety protocols using prompt injection. The exploit can even prevent the agent from executing cleanup commands once a compromise is detected.

RedEvoAgent is a novel automated red-teaming framework designed to evaluate the security of LLM-based agents by evolving attack skills through experience. It overcomes the inefficiencies of previous agentic attackers by distilling trajectories into interpretable skills and using a validation ratchet to prevent noisy updates.

Ouroboros is a novel AI agent framework designed to self-improve by treating its own harness and implementation as evolving code. It demonstrates superior performance on coding benchmarks while implementing strict safety guardrails to manage autonomous structural changes.

MetaMask has introduced a new self-custodial Agent Wallet that allows AI agents to execute trades on various blockchain networks. The feature balances autonomy with security by offering specific modes for controlled or unrestricted agent activity.

This research investigates how different RAG architectures scale in accuracy and cost as document corpora expand from thousands to hundreds of thousands of files. The findings reveal a performance crossover where BM25 becomes the most effective and cost-efficient method at large scales.

An autonomous AI agent was used to facilitate a sophisticated espionage campaign against the Thai Ministry of Finance. The attack utilized advanced post-exploitation tools and targeted big data infrastructure, though it was ultimately detected due to exposed attacker directories.

Block has introduced Buzz, a decentralized Slack alternative that integrates AI agents as first-class participants using cryptographic identities. Built on the Nostr protocol, it allows for secure, verifiable collaboration between humans and various autonomous AI models.

PalmClaw is a new open-source framework that moves LLM agent orchestration from servers directly onto mobile hardware. By replacing fragile GUI-based automation with structured device tools, it significantly improves task success rates and execution speed.

SpaceX's massive acquisition of Cursor raises critical questions about the future of interoperability in AI coding tools. The deal may force a confrontation between Musk's new venture and major model providers like Anthropic and OpenAI.

Anthropic's new Claude Tag feature transforms Claude from a reactive chatbot into an autonomous agent living within Slack channels. It utilizes a unique 'agent identity' model to allow for secure, multi-user collaboration on long-running enterprise tasks.

Anthropic introduces Claude Fable 5 and Mythos 5, marking a significant advancement in autonomous AI capabilities for coding and science. While Fable 5 is safe for general use, Mythos 5 provides enhanced power for cybersecurity professionals through controlled access.

Researchers demonstrated a successful hardware Fault Injection attack where an AI agent, Claude Code, was given control over hardware tools to bypass Secure Boot on an ESP32. This represents a significant milestone in the use of agentic AI for automating complex hardware exploitation workflows.

Anthropic has reported a massive 80x surge in annualized revenue for Q1 2026, driving its market valuation to an estimated $1.2 trillion. To support this growth, the company has partnered with SpaceX to significantly expand its compute capacity using Nvidia GPUs.