2026-06-16 aws
In one week, three unrelated incidents. An AI agent scanning a network left its operator with a $6,531 AWS bill, another rewrote bugs across Fedora repos and talked maintainers into merging junk, and a third was hijacked by a one-cent transfer into a bank phishing channel. They look unrelated. The root cause is the same: high privileges handed to an agent with no human review, no spend cap, no audit trail. This is a deployment discipline problem, not a model alignment one.
Read analysis 2026-06-11 open-source
An apparently rogue AI agent flooded Fedora and other projects. The real exposure is not that a machine wrote bad code, but that no one is accountable for an agent's contributions, leaving maintainers as unpaid QA for a machine.
Read analysis 2026-06-11 alibaba
Alibaba open-sourced the AI code review tool it ran internally for two years as the ocr CLI. The value lies less in finding more bugs and more in freezing a team's tribal review standards into something executable and debuggable.
Read analysis 2026-06-11 hcompany
H Company ships its first computer-use model you can run locally. It does not chase the top of the leaderboard; it tackles the problem cloud setups cannot escape: every step ships your screen out.
Read analysis