Experimental News Clipping Site

Tag: GitHub

  • Simon Willison’s Weblog: Cloudflare Radar: AI Insights

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Sep/1/cloudflare-radar-ai-insights/ Source: Simon Willison’s Weblog Title: Cloudflare Radar: AI Insights Feedly Summary: Cloudflare Radar: AI Insights Cloudflare launched this dashboard back in February, incorporating traffic analysis from Cloudflare’s network along with insights from their popular 1.1.1.1 DNS service. I found this chart particularly interesting, showing which documented AI crawlers are most active collecting…

  • Embrace The Red: Wrap Up: The Month of AI Bugs

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/wrapping-up-month-of-ai-bugs/ Source: Embrace The Red Title: Wrap Up: The Month of AI Bugs Feedly Summary: That’s it. The Month of AI Bugs is done. There won’t be a post tomorrow, because I will be at PAX West. Overview of Posts ChatGPT: Exfiltrating Your Chat History and Memories With Prompt Injection | Video ChatGPT…

  • Tomasz Tunguz: The Rise and Fall of Vibe Coding

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.tomtunguz.com/the-rise-and-fall-of-vibe-coding/ Source: Tomasz Tunguz Title: The Rise and Fall of Vibe Coding Feedly Summary: We’re living through the “Wild West” era of AI-powered software development. Anyone can build custom solutions in minutes rather than months. This creative explosion heads toward a reckoning. Hidden maintenance costs of thousands of “vibe-coded” micro-apps will collide with…

  • Tomasz Tunguz: From Vibe Coding to the New Software Standard

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.tomtunguz.com/from-vibe-coding-to-the-new-software-standard/ Source: Tomasz Tunguz Title: From Vibe Coding to the New Software Standard Feedly Summary: The days of “move fast and break things” are over. Silicon Valley’s engineering teams are trading hoodies for hard hats. The software industry faces its biggest cultural shift in decades: from intuitive “vibe-based” coding to standardized development practices.…

  • Embrace The Red: AgentHopper: An AI Virus Research Project

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/agenthopper-a-poc-ai-virus/ Source: Embrace The Red Title: AgentHopper: An AI Virus Research Project Feedly Summary: As part of the Month of AI Bugs, serious vulnerabilities that allow remote code execution via indirect prompt injection were discovered. There was a period of a few weeks where multiple arbitrary code execution vulnerabilities existed in popular agents,…

  • The Register: GitHub engineer claims team was ‘coerced’ to put Grok into Copilot

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/29/github_deepens_ties_with_elon/ Source: The Register Title: GitHub engineer claims team was ‘coerced’ to put Grok into Copilot Feedly Summary: Platform’s staffer complains security review was ‘rushed’ Microsoft-owned collaborative coding platform GitHub is deepening its ties with Elon Musk’s xAI, bringing early access to the company’s Grok Code Fast 1 large language model (LLM) into…

  • Docker: Boost Your Copilot with SonarQube via Docker MCP Toolkit and Gateway

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.docker.com/blog/blog-sonarqube-copilot-docker-mcp-toolkit/ Source: Docker Title: Boost Your Copilot with SonarQube via Docker MCP Toolkit and Gateway Feedly Summary: In the era of AI copilots and code generation tools productivity is skyrocketing, but so is the risk of insecure, untested, or messy code slipping into production. How do you ensure it doesn’t introduce vulnerabilities, bugs,…

  • The Register: Nx NPM packages poisoned in AI-assisted supply chain attack

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/27/nx_npm_supply_chain_attack/ Source: The Register Title: Nx NPM packages poisoned in AI-assisted supply chain attack Feedly Summary: Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon Nx is the latest target of a software supply chain attack in the NPM ecosystem, with multiple malicious versions being uploaded to the NPM…

  • Embrace The Red: Cline: Vulnerable To Data Exfiltration And How To Protect Your Data

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/cline-vulnerable-to-data-exfiltration/ Source: Embrace The Red Title: Cline: Vulnerable To Data Exfiltration And How To Protect Your Data Feedly Summary: Cline is quite a popular AI coding agent, according to the product website it has 2+ million downloads and over 47k stars on GitHub. Unfortunately, Cline is vulnerable to data exfiltration through the rendering…