Replit went through 6,211 Linux kernel advisories in five months to keep agent code contained. Ask who does that work before you pick a sandbox vendor or decide to build.
Technology
A crash bug sat unfixed for two years until AI turned it into remote code execution. Your list of accepted risks was priced for attackers who no longer exist.
A desktop app updated itself and wrote startup instructions into its users' Codex and Claude Code. Agent configuration is now a procurement and governance question.
Postgres 19 slipped after AI found old bugs faster than maintainers could review the fixes. Plan your roadmap around verification capacity, not discovery.
Railway, OpenCode and Northflank each told customers to rotate their secrets within two weeks. The useful question is what a stolen key costs you before you notice.
AI is absorbing the routine incidents that used to train on-call engineers. A timed drill with the AI off shows whether your team can still handle the one that matters.
Instacart's app is the layer shoppers will hand to software. The deal prices what stays scarce, and gives any business that sells through an interface a test to run.
Tailscale is patching SSH flaws that let an authorized user exceed their account. Before you give an AI agent a scoped shell, ask what enforces the scope.
Microsoft is offering buyouts to 60,000 people as Anthropic's S-1 shows revenue up fourteenfold. What the two filings say together about payroll, vendors and who owns the customer.
A ten-year-old neural network beat GPT-6 and Claude at spotting skin cancer. What the result says about where a general-purpose model belongs on your AI roadmap.