News
Japan's 'Kokkai-Map' Goes Viral, Built Solo with Claude Haiku 4.5
DevelopmentAI
Kokkai-Map, a Japanese politician tracker built solo by construction-firm owner Shinnosuke Nakajima with Claude Haiku 4.5 and the National Diet Library API, went viral on May 27, 2026, surviving a 26-minute server outage to hit 21,000 X followers.
2026.05.2953 views
News
Jupyter Server's Login Page Can Be Abused for Phishing: Update to 2.20.0
SecurityAIDevelopment
CVE-2025-61669 (CVSS 6.1) lets attackers craft a Jupyter Server login URL that bounces researchers and data scientists to any external site, turning the familiar Jupyter login page into a phishing launcher. Jupyter Server 2.17.0 and earlier are affected, fixed in 2.18.0. JupyterLab and Notebook 7 inherit the flaw via their backend. Reported by Noriaki Iwasaki of Japan's Cyber Defense Institute.
2026.05.2853 views
News
Budibase Hit by Five Critical Authz Flaws: CVE-2026-46425 et al., Update to v3.39.0
AISecurityDevelopment
Five critical authorization and SSRF vulnerabilities in the Budibase low-code platform (CVE-2026-46425/48150/45716/45717/48153, CVSS 9.9 to 8.5) were disclosed on May 27, 2026. Issues range from SCIM router bypass to tenant-wide privilege escalation to global admin. Fixed in v3.39.0.
2026.05.2857 views
News
TanStack and Nx Console Supply-Chain Compromise: Which Versions Are Safe Now
AIDevelopmentSecurity
Two CISA KEV-listed npm and VS Code supply-chain breaches in May 2026 turned out to be one connected attack. CVE-2026-45321 hit 84 versions across 42 @tanstack/* packages on May 11; stolen GitHub credentials from that leak then powered CVE-2026-48027, the malicious Nx Console v18.95.0 push on May 18.
2026.05.2879 views
News
Critical Langflow Flaw CVE-2026-7524: TAR Symlinks Leak JWT Secret, Chain to RCE
SecurityDevelopmentAI
IBM disclosed CVE-2026-7524 (CVSS 9.8) in Langflow OSS on May 27, 2026. Versions 1.0.0 through 1.9.1 are vulnerable: a crafted tar with symlinks can steal the JWT secret, forge tokens, then chain to RCE via Python Interpreter nodes. Update to v1.9.2 or later immediately.
2026.05.2858 views
News
SGLang CVE-2026-5760 and 3 more RCE flaws hit AI inference server (3 unpatched)
InfrastructureSecurityAI
Four critical RCE vulnerabilities disclosed in SGLang, the AI inference server used by xAI, AMD, NVIDIA, and major cloud providers. CVSS 9.8, no auth required, three remain unpatched as of May 26, 2026. JPCERT/CC issued an advisory.
2026.05.2684 views
News
Langflow CVE-2025-34291: visiting a web page can hijack your AI agent stack
SecurityDevelopmentAI
A CVSS 9.4 flaw has been found in Langflow, the popular AI agent OSS, and CISA has added it to the Known Exploited Vulnerabilities catalog. Visiting a malicious web page is enough to steal a user's session and hijack the entire AI agent stack, including configured OpenAI and Anthropic API keys. A fix is available in version 1.9.3.
2026.05.2258 views
News
Cloudflare Lays Off 20% Despite Beat-and-Raise, Stock Falls 18%: First Time AI Usage 600% Surge Cited as Documented Justification
AIGlobal CompaniesFreelance
Cloudflare announced layoffs of 1,100 employees (~20% of workforce) on May 7, 2026, even as Q1 revenue rose 34% YoY. The stock fell 14–18% after-hours. CEO Matthew Prince cited a 600% increase in internal AI usage over three months as the documented justification — the first time a major IT company has put an internal AI usage metric into formal layoff disclosures.
2026.05.08111 views
Column
Returning to Waterfall in the Age of AI
AIDevelopment
In an era of vibe coding, one developer returned to waterfall at a startup. Plan Mode's true identity was a design process completed decades ago. A case for 'hammer your design.'
2026.04.1144 views
News
OpenAI IPO Update: Confidential Filing, and CFO Friar Is Still in Place
AIGlobal Companies
OpenAI CFO Sarah Friar has pushed back against Sam Altman's Q4 2026 IPO plans, warning the company isn't ready. With $14B in projected losses, the Sora shutdown, executive departures, and the Musk trial, here's what's happening inside OpenAI.
2026.04.0681 views
News
Claude Code blocks third-party model providers in 2026: what changed and how to work around it
DevelopmentAIGlobal Companies
On April 4, 2026, Anthropic cut off third-party tool access from Claude subscriptions. We break down why OpenClaw was blocked and clarify what's still allowed—official CLI, MCP, custom scripts—based on primary sources.
2026.04.06437 views
Lab
AI Multi-Agent Development: What I Learned Running a 32-Person Team Solo
DevelopmentAI
A solo developer built a 32-agent AI team combining 39 characters and 21 roles for autonomous parallel development. Lessons on waterfall + V-model, polling-based state control, and facilitation design — translating real-world org management into code.
2026.04.0466 views
