On Thursday 29 October, for about eleven hours, the Claude Code extension for VS Code distributed through the Cursor marketplace carried a backdoor. Cursor has published a security notice and the security firm Phorion a …
For a few weeks now, almost every day has brought news of security bugs found with AI, and this very week we had PHP2Shell, discovered with the help of models. If finding bugs has become cheap, the question is what the …
Every time a browser sets up an HTTPS connection with an ECDSA signature, it most likely uses the P-256 curve. It’s one of the elliptic curves NIST published in 2000 in the FIPS 186-2 standard, along with P-192, …
Yesterday I wrote about a Harvard study showing that AI agents write far more code, but the gain gets lost in review. Today Anthropic published Redesigning source control at Anthropic, which tells the other side of the …
Anthropic published its September threat intelligence report yesterday, covering what it detected and shut down between December 2025 and August 2026. Seven areas — cyber operations, influence, surveillance, fraud, …
Two protocols, two philosophies In recent months, two protocols have emerged that will change how we build AI systems: Agent2Agent Protocol (A2A) from Google and Model Context Protocol (MCP) from Anthropic. But …
Confession of a converted skeptic When Anthropic announced the Model Context Protocol (MCP) in November 2024, my first reaction was: “Ah, another protocol promising to solve all integration problems”. As a …
