North Korea is attacking the AI developer supply chain. Not metaphorically — literally. Microsoft Threat Intelligence has formally attributed the June 17, 2026 npm supply chain attack against the Mastra AI framework to Sapphire Sleet, the North Korean state-sponsored group also tracked as BlueNoroff and historically linked to the Lazarus Group umbrella. This is one of the most significant nation-state intrusions into the AI tooling ecosystem to date. Over 140 Mastra packages were compromised. The attack was completed in approximately 88 minutes. And any developer, CI/CD pipeline, or build system that installed or updated affected packages during the window is potentially compromised. ...

OpenClaw just crossed a milestone that would have seemed implausible a year ago: 4.28 million weekly npm installs, a new all-time record for the project. And naturally, the week it happened, its creator got into a public fight. That combination — record growth and community drama — says something real about where OpenClaw is right now. It’s big enough that its governance model is worth arguing about, and its creator is confident enough to argue publicly. ...

Anthropic has just redefined what it means to have AI in your workspace. On Tuesday, June 23, the company launched Claude Tag — a product that doesn’t just respond when you ask it something, but acts as a standing member of your team inside Slack, proactively monitoring conversations, learning your team’s workflows, and taking on complex multi-step tasks without hand-holding. This isn’t a chatbot upgrade. It’s an architectural shift in how enterprise AI works. ...

If you’re running a production AI application on Dify and you haven’t patched to version 1.14.2 yet, stop what you’re doing and do it now. Security researchers at Zafran Security have disclosed DifyTap — a set of four vulnerabilities in the Dify open-source AI application platform that allow attackers to wiretap AI chat histories across tenant boundaries in multi-tenant deployments. Two of the four flaws carry critical CVSS scores. The blast radius is staggering: Dify powers over 1 million deployed AI applications and has accumulated more than 146,000 GitHub stars, making it one of the most widely deployed AI app-building frameworks in the world. ...

OpenClaw’s latest beta is out, and it ships with a feature that addresses one of the most commonly heard complaints from power users: the latency overhead of routing every single interaction through full model synthesis, even for short conversational turns that don’t need it. OpenClaw 2026.6.10-beta.2 is now available via the GitHub releases page, and the headline feature is auto fast mode — an adaptive routing mechanism that detects short conversational exchanges and routes them through a lighter, faster model path rather than full synthesis. The result is noticeably snappier responses for everyday back-and-forth, without manual configuration. ...

The agentic AI platform wars just got a new front — and it’s being fought on data sovereignty grounds in Europe. Prosus, the Amsterdam-listed technology conglomerate and Naspers subsidiary, launched ToqanClaw on Monday, billing it explicitly as a GDPR-first alternative to OpenClaw for the 5 million merchants and business partners in its network. The announcement positions ToqanClaw as the first company in Europe to bring OpenClaw-style conversational app-building to business users at scale. ...

After Anthropic’s government-ordered restriction of Claude Fable 5 and Mythos 5 in mid-June, Tokyo-based Sakana AI had an obvious response: what if you didn’t need any single frontier model at all? On Sunday, Sakana launched Fugu (and Fugu Ultra), a multi-agent orchestration system that routes tasks across a swappable pool of frontier LLMs behind a single OpenAI-compatible API. The punchline is a benchmark: Fugu Ultra scores 73.7 on SWE-Bench Pro — outperforming Claude Opus 4.8 (69.2) and GPT-5.5 (58.6) by using coordinated model pools rather than relying on any individual model to do everything. ...

The headline number is astonishing: Anthropic engineers are shipping 8x more code per quarter than they were a year ago, thanks to heavy use of Claude Code. Eight times. Not 20% more, not double — eight times. But the person who shared that number — Fiona Fung, Anthropic’s Head of Engineering for Claude Code and Cowork — didn’t deliver it as a triumphant statistic. She delivered it alongside an uncomfortable truth: the people achieving that productivity are increasingly lonely, and the new bottleneck is no longer coding speed. It’s knowing what you actually shipped. ...

AWS has just shipped something that agentic AI developers have needed for a long time: a proper, purpose-built isolation primitive that isn’t bolted onto a function-as-a-service model designed for event handlers. AWS Lambda MicroVMs are now generally available across all major Lambda regions, and they’re explicitly designed for a use case that classic Lambda was never great at — running code generated by users or AI agents in fully isolated, stateful environments. ...

If you’ve installed ClawHub plugins under the @openclaw or @clawhub scope and assumed they were vetted by the OpenClaw team — you may want to sit down. Researchers at Manifold Security have uncovered a significant supply-chain weakness in ClawHub’s plugin registry: 23 code-executing plugins were found squatting under official organizational scopes while being owned by entirely unrelated accounts. The implications are serious. Any user who installed those packages had good reason to believe they were getting first-party, Anthropic-backed integrations. Instead, they may have been silently running arbitrary code from unknown third parties inside their AI agent environments. ...