Tech

Inside the Architecture of Stripe’s AI Coding Agent “Minions”

Stripe’s Minions agent generates 1,300+ PRs per week with zero human effort. Implementation details of the four components: Devbox, Blueprints, Toolshed, and a fork of goose.

Google engineers indicted, and MuMu Player's reconnaissance commands

A week that shook trust in both people and software: three former Google engineers were indicted over alleged transfers of sensitive information to Iran, while NetEase's MuMu Player was found running 17 reconnaissance commands on macOS every 30 minutes.

Accelerating LLM Inference: CDLM and Attention Matching KV Compaction

Two February 2026 papers on reducing inference cost: Together AI’s Consistency DLM (up to 14.5× faster) and MIT/Harvard’s Attention Matching KV compaction (50× compaction in seconds).

Clinejection: How Cline’s AI bot was abused in a supply‑chain attack

This article explains how Cline’s issue‑triage bot was exploited via a three‑step chain—prompt injection, cache poisoning, and credential commingling—leading to an unauthorized package release that potentially affected about five million users.

Seedance 2.0 API and ComfyUI Integration Status

As of February 2026, the Seedance 2.0 API is not yet public. This article summarizes the outlook for ComfyUI integration once the API is released and the preparations to make.

How IT-Bench and MAST expose enterprise AI agent failure modes

Using IBM and UC Berkeley's IT-Bench benchmark and the MAST failure taxonomy, this article examines why enterprise AI agents fail. It covers the reality of 11% SRE success and 0% FinOps success, plus the Replit production database deletion incident.

Dev Infrastructure Roundup: Native Frontend Tooling, EC2 Nested Virtualization, Tailscale Peer Relays GA, Let's Encrypt DNS-Persist-01

Covers four topics: native language migration strategy for frontend tooling, Amazon EC2 nested virtualization support, Tailscale Peer Relays GA, and the Let's Encrypt DNS-Persist-01 challenge.

Slack launches an MCP server, and Gemini adds AI music generation

Two examples of existing platforms going deeper on AI integration: Slack's MCP server and real-time search API, and Google Gemini's Lyria 3-based music generation.

Chrome, VS Code, and Copilot Security Issues Roundup

A UAF zero-day in Chrome, critical flaws in four VS Code extensions, and a Microsoft Copilot bug that leaked confidential emails. A review of security risks lurking in developers’ everyday tools.

CISA Adds Four Actively Exploited Vulnerabilities to the KEV Catalog

In its February 2026 KEV catalog update, CISA added four vulnerabilities, including a Google Chrome use-after-free flaw (CVE-2026-2441). One of them dates back 17 years.

Dell RecoverPoint zero-day CVE-2026-22769 exploited by China-linked APT since mid-2024

A CVSS 10.0 vulnerability in Dell RecoverPoint for VMs was found to have been exploited by the China-linked threat group UNC6201 for more than a year and a half.

With gr.HTML in Gradio 6, You Can Build a Full Web App from a Single Python File

This article explains how Gradio 6's new gr.HTML component works. You can write HTML, CSS, and JavaScript directly inside Python and build interactive web apps without a separate build step.