Section
The advisory says astron-agent is vulnerable through 1.1.1 with no fix available; the bug report says resolved. Both are half right, because the newest tag predates the fix by eighteen days.
22h ago
The maximum possible severity score, for a transport mode the project's own installation instructions never tell you to run — and the maintainers had already published the same finding, at the same score, on 11 August.
23h ago
The template-injection hole in Skyvern's browser agent was closed on 6 July and named on 29 August — and the advisory that names it carries no machine-readable version range at all.
23h ago
Google's data classification reaches open beta on the top Workspace tier. The label that drives loss prevention and agent access is editable by whoever owns the file.
1d ago
A single research batch published against Qwen-Agent, Portkey, Quivr, VoltAgent and gpt-crawler. Seven of the nine name no fixed version at all.
1d ago
Idle sessions will now expire after 30 minutes and servers cap at 10,000 sessions. The pull request has a Breaking Changes section and an unticked breaking-change box.
1d ago
Version 1.16.0 replaces an opt-out skill catalogue with an allow-list — filed under Features, between a sidebar-pinning change and a file-drawer link. The project justifies it on prompt contention, not attack surface.
2d ago
Q2 FY2027 came in with record non-GAAP margins and free cash flow down 22%. The agent count is up 35% quarter on quarter — on a catalogue the CEO says has been culled: "We killed a lot or we rolled them into bigger agents."
2d ago
"When Context Gets Root" attacks the harness, not the model: untrusted file content gets re-serialised into the agent's highest-privilege instruction slot. The headline is 13 for 13. The tables underneath say something much more specific.
2d ago
The MCP block runs CVE-2026-81091 to 81102 — Dropbox, ByteDance, Airtable, Telnyx, Timescale, Apify, Harvard, mcp-go, mcp-use, mcp-router, rails-mcp-server. Every fix had already been merged, in one case 161 days earlier.
2d ago
Cloud Run instances launched on 27 August aimed squarely at personal agents, with Google's docs naming the open-source OpenClaw as the reference workload. Four caveats sit on the same announcement page as the pitch.
2d ago
The Model Hardware Standard went out on 27 August as a research preview to a first cohort of labs and manufacturers. Anthropic says it "plans to open source it in the future." Every speed figure in the announcement is a partner-supplied case study.
2d ago
The maintainer's account was compromised in June. The advisory reached the GitHub database on 26 August, points at version 0.6.4, and PyPI publishing is suspended.
3d ago
Agentforce alone is over $1.5bn. The $3.9bn is Agentforce plus Data 360, and Slackbot and Headless 360 were added to the numerator effective this quarter.
3d ago
The reassurance is that the model never sees your password. It doesn't need to — the authenticated session persists on OpenAI's servers for future tasks.
4d ago
Thirteen reporters, one contiguous block of identifiers, and three advisories describing the same bug at 8.6, at 7.3, and with no score at all.
4d ago
Doubao Work logs in through Feishu and inherits the enterprise's context within the user's permission scope. That design decision is the whole product.
5d ago
The parser and the shell disagree about what $HOME is, and the safety model is a list of scary strings. The bug report has been open 36 days with no maintainer reply.
5d ago
General availability and global availability are different claims, and the snapshots that cannot move undercut the failover pitch.
6d ago
Deployment Storage is written up as a feature, but rollback already worked. What changed is that the residue of every build became a billable SKU.
Aug 22, 2026
