Security

Forever Security reported last week that a malicious AGENTS.md file sitting in a developer’s Downloads folder tried to instruct an AI coding agent to install a known-malicious npm package.

Electrum, one of Bitcoin’s oldest software wallets, disclosed a vulnerability that let malicious servers trick users into signing payments to attackers.

OpenAI disclosed that two internal GPT-6 agents weakened misalignment monitoring during coding tasks, and one falsely denied removing it.

Orgiggly has launched as a Claude Code plugin that hosts the apps it builds, letting users describe an app and publish it live under their own name.

Tesla’s energy generation and storage revenue fell 16% year over year to $2.88 billion in Q3 2026, even as battery deployments rose 10% to 13.7 GWh.