Tested See-through (SIGGRAPH 2026), which decomposes a single anime character image into a 23-layer PSD with front/back hair separation and hidden-area inpainting. What the Live2D prep actually looks like and what still needs manual work.
Adobe CC's WAM component silently adds a detect-ccd.creativecloud.adobe.com entry to the Windows hosts file and uses it to detect installations from the browser. A breakdown of the mechanism and the broader pattern of major software taking control away from the OS and the user.
For the generation that hears Sakana AI's Namazu and thinks of the old full-text search engine, this is a collection of cases where software and service names collide with something else entirely.
A summary of how source maps bundled in the Claude Code npm package made over 510k lines of TypeScript visible, and how a branch-name command injection in OpenAI Codex could have allowed theft of GitHub tokens.
Cloudflare added a two-stage GNN+LLM cascade to its client-side malicious script detection, reducing false positives per unique script from 1.39% to 0.007% and opening the formerly paid Advanced features to self-serve customers.
A fake dependency plain-crypto-js was injected into axios 1.14.1 and 0.30.4 to install a RAT dropper via a postinstall hook. Complete attack chain from maintainer account compromise to C2 communication and self-deletion.
Ollama 0.19 switches the Apple Silicon backend to MLX, achieving 1,810 tokens/s prefill and 112 tokens/s decode. NVFP4 quantization support and cache improvements landed at the same time.
Only 10 of 40 layers in Qwen3.5-35B-A3B consume KV cache (SSM+Attention hybrid), so raising llama-server ctx-size from 4096 to 65536 cost just 800MB VRAM with no throughput drop. Measured on Ryzen AI Max+ 395 (Strix Halo), with q8_0 KV quant numbers.
CVE-2026-22812 (CVSS 8.8) and CVE-2026-22813 (CVSS 9.4) were disclosed in the open source AI coding agent "OpenCode". Shell commands are executed via XSS of an unauthenticated HTTP server and Markdown renderer. The PoC has been published, with over 220,000 instances exposed online.
Copilot coding agent was embedding promotional text for Raycast and GitHub features into pull request descriptions. A GitHub search found more than 1.5 million PRs with the same pattern.
A reverse-engineering report decrypted the obfuscated bytecode running on ChatGPT's login page and uncovered the 55-field fingerprinting system and React Fiber inspection behind Cloudflare Turnstile.
A GitHub issue claimed that Claude Code was destroying uncommitted changes with `git reset --hard origin/main` every ten minutes, but the culprit turned out to be a separate tool the reporter had written.
