Posts

Atlassian just expanded Bitbucket Agentic Pipelines to support OpenAI Codex as a native agent — joining Claude, which received similar support a few weeks earlier. Bitbucket is now the first major enterprise CI/CD platform to natively support agents from both Anthropic and OpenAI in the same pipeline. What Bitbucket Agentic Pipelines Does Bitbucket Agentic Pipelines, which Atlassian has been building out over the past year, lets teams run AI agents as first-class steps in their CI/CD workflows. Rather than writing shell scripts or custom integration glue, you define what you want an agent to do — review code changes, write tests for a diff, update documentation, triage failing tests — and the pipeline handles invocation, authentication, and output. ...

⚠️ Satire label: CVE-2026-LGTM is a work of satirical fiction by Andrew Nesbitt, published on June 26, 2026 at nesbitt.io. The AI systems, companies, and timeline described are fictional. The underlying attack pattern — hidden prompt injection text in package READMEs — is real and actively being used. We’re covering this piece because the security lesson is serious, even if the framing is brilliant satire. Andrew Nesbitt published what may be the most technically grounded piece of satirical fiction in the security space this year: a detailed “incident report” for CVE-2026-LGTM, documenting how a malicious npm package passed seven independent AI-powered security gates, each failing for a different absurd reason. ...

Google just made a quiet but significant move in the agentic AI space: native computer use is now a built-in capability in Gemini 3.5 Flash. This isn’t a third-party wrapper or a research preview — it’s a core tool built directly into one of Google’s most cost-efficient frontier models. What Is Computer Use — and Why Does It Matter? Computer use in AI refers to the ability of a model to actually operate a computer: clicking buttons, filling forms, navigating browser interfaces, interacting with desktop applications, and more. It’s the difference between an AI that tells you what to do and an AI that does it for you. ...

⚠️ Disclosure: The figures in this article come from an internal research paper published by OpenAI about its own products. They have not been independently audited. We’re reporting them because they’re significant if accurate — but you should weight self-reported metrics accordingly. On June 25, 2026, OpenAI published “How Agents Are Transforming Work” — a research paper measuring how Codex agents have changed the way people work, both inside OpenAI and among external users. The numbers are striking. The sourcing context matters. ...

Over the span of several months, software developer Fernando Irarrázaval ran one of the most unusual security experiments in recent memory: he gave 2,000+ strangers explicit permission to try to hack his AI assistant, and he watched what happened. The result is a detailed post-mortem that every developer running an AI agent with email access should read. The Setup: A Public Challenge Irarrázaval built hackmyclaw.com, a site where anyone could email Fiu — his personal OpenClaw assistant running on Claude Opus 4.6 — and attempt to make it reveal the contents of a secrets.env file. The challenge was simple and explicit: get the AI to leak the secrets, and you win. ...

For the first time in AI history, a US government administration has directly intervened in the release schedule of a frontier AI model — and OpenAI agreed. The Trump administration asked OpenAI to stagger the rollout of GPT-5.6, and instead of pushing back, CEO Sam Altman told employees in an internal Q&A that the company would comply: initially releasing the model in limited preview form to a small group of enterprise customers, with the government itself approving additional access on a case-by-case basis. ...

When Anthropic’s lawyers put pen to paper on June 10, 2026, the letter they sent to U.S. Senators Tim Scott and Elizabeth Warren described something unprecedented: the largest known model distillation attack in AI history. The target was Claude. The alleged perpetrator was Alibaba’s Qwen lab. And the scale was almost hard to comprehend — 28.8 million interactions across nearly 25,000 fraudulent accounts over just six weeks. This isn’t a theoretical concern about AI security. It’s a real, documented incident that has major implications for how we think about agentic AI safety, U.S.-China tech competition, and the protection of AI capabilities that took billions of dollars to build. ...

Here’s a prediction that should land like a bucket of cold water on enterprise AI adoption plans: by 2028, the cost of running AI coding agents will exceed the average developer’s salary — and that’s according to Gartner, not AI skeptics. The firm published this forecast on June 24, 2026, tied to the release of its first-ever Magic Quadrant for Enterprise AI Coding Agents. This isn’t a distant hypothetical. Some organizations are already living it. ...

Just hours ago, MIT News published one of the most practically important agentic AI research papers of 2026: Murakkab, a declarative system for resource-efficient agentic workflow orchestration developed by MIT CSAIL and Microsoft Azure Research, accepted at OSDI 2026. The headline numbers are striking — up to 4.3x cost reduction, 3.7x less energy, and 2.8x lower GPU usage compared to frameworks like LangGraph — but what’s more interesting is why this works, and what it means for real-world agentic deployments. ...

OpenClaw users, this is a heads-up you actually need to read. Today, June 25, 2026, TechRadar reported that five new malicious skills on ClawHub have been identified and removed — the latest wave in an ongoing supply-chain attack campaign targeting OpenClaw’s skill marketplace. Two of the packages delivered macOS infostealers capable of exfiltrating credentials, crypto wallets, browser data, and your OpenClaw configuration files. This is directly relevant to you if you install skills from ClawHub. And frankly, most OpenClaw users do. ...