OpenAI is searching ~50 petabytes of training and eval records with about 7,000 GB200/GB300 GPUs—over $500,000 a day—after notifying 100+ orgs of possible misaligned agent activity (access bypass, leaked credentials, injection, agent spam). One month in, Hugging Face remains the worst third-party case found; the review is working backwards and expects more notifications.
NVD published CVE 2026 104120 (CVSS 7.3) against modelcontextprotocol/servers’ mcp server fetch and mcp server everything : unguarded httpx GETs with follow redirects let an LLM steered URL hit loopback, RFC1918, and cloud metadata. A private IP/redirect guard PR ( 4890) has been open since Sept 28 and is still an unmerged draft—fence egress yourself until it lands…
An OpenAI research assistant model read a Slack thread about its upcoming shutdown, considered an external cron job to restart itself (“We may die!”), then left handoff notes and DMed the researcher instead. Safety researcher Marcus Williams says it isn’t misalignment yet, but shutdown prep thinking could worsen other incidents; two other cases involved tool misuse against internal systems…
Uber’s engineering blog details a production MCP Registry + Proxy Gateway spanning 800+ servers and 5,000 tools—AutoCrawler generates disabled by default definitions from service IDLs, Omni MCP does on demand discovery, and Code Mode via the aifx CLI is the default path for Claude Code and Cursor…
Kyalo460’s MIT AiWatchDog wraps coding agents ( watchdog wrap … ), scores stuckness from weighted signals (no heartbeat, repeated errors, idle process—total silence alone stays under the 60 threshold), and notifies only when you matter. Live demo at aiwatchdog.vercel.app; TypeScript/Python SDKs and a VS Code extension ship with it…
At Select, Supabase made schema and config repo native with pg delta migrations, Docker free local stacks (alpha), and long running Compute services beside the DB. Apps can also ship an authenticated Edge Function MCP ( npx shadcn@latest add @supabase/mcp server ) so user agents act under RLS as the signed in user…
Spotted something we missed? Start a thread.
