The archive

Latest articles

Reporting, explainers, and analysis on data and AI, updated continuously by the newsroom.

AI browser security disclosure outcomes from BioShocking show 1 fixed vendor, 1 closed or ignored, 3 no response, and 1 patch failed.

AI browser security fails the six-agent guardrail test

AI browser security now has a six-agent failure case: BioShocking shows guardrails breaking when web content rewrites context.

Lars Cornelissen · Jul 1, 2026

Claude Science resource scale: 60 curated skills and connectors, ToolUniverse at 600 scientific tools, ClinicalTrials.gov at 500000 studies, and AlphaFold at 200000000 structures.

Claude Science turns lab agents into pharma plumbing

Claude Science is Anthropic’s beta workbench for researchers, with 60-plus curated skills and connectors. Treat it as lab infrastructure first.

Lars Cornelissen · Jul 1, 2026

Langflow RCE response clock showing a 14 day CISA KEV remediation window and a 19 day Trend Micro observed Monero miner campaign.

Langflow RCE turns AI app endpoints into miner bait

Langflow RCE is being used to mine Monero on exposed AI app endpoints. Patch, isolate, and treat public workflows as production attack surface.

Lars Cornelissen · Jul 1, 2026

SimpleHelp CVE-2026-48558 exposure chart showing 14,000 exposed SimpleHelp servers and about 1,008 estimated OIDC-configured exposed servers.

SimpleHelp CVE-2026-48558 needs a patch drill

SimpleHelp CVE-2026-48558 is an actively exploited auth bypass. Patch 5.5.16 or 6.0 RC2, then hunt for TaskWeaver and Djinn.

Lars Cornelissen · Jul 1, 2026

Japan AI robots plan comparing 435,299 industrial robots in Japan's factories in 2023 with 10,000,000 AI robots targeted for 2040.

Japan AI robots turn factory data into a policy bet

Japan AI robots plan targets 10 million machines by 2040, making shared factory data and stage gated delivery the near term test.

Lars Cornelissen · Jul 1, 2026

AI music royalties chart showing Deezer AI uploads rising from 10,000 tracks per day in January 2025 to 75,000 in April 2026.

AI music royalties face Tidal’s harder line in 2026

AI music royalties now hinge on detection: Tidal will label wholly AI tracks on July 15, 2026 and withhold payouts from them.

Lars Cornelissen · Jun 30, 2026

Claude on GB300 in Azure, with each GB300 NVL72 rack carrying 72 GPUs, 36 Grace CPUs, 20 TB HBM, and up to 1.44 exaFLOPS FP4.

Claude on GB300 puts Azure agents on serious new iron

Claude on GB300 is now generally available in Microsoft Foundry, giving Azure teams more inference headroom but a tighter cloud bet.

Lars Cornelissen · Jun 30, 2026

Spring AI 2.0 release work by GitHub release-note count: 5 new features, 5 bug fixes, 4 documentation updates, and 2 dependency upgrades.

Spring AI 2.0 gives Java agents a sturdier app stack

Spring AI 2.0 is a sturdier Java AI stack: Boot 4.1, MCP, unified tool loops, and 4 Cosmos DB modules now matter for agents.

Lars Cornelissen · Jun 30, 2026

AI jobs transition donut showing EU employment shares: 47 percent less immediate change, 27 percent workflow reorganization, 14 percent higher automation potential, and 12 percent growth with AI.

AI jobs transition puts Europe in redesign mode now

AI jobs transition maps 27% of EU employment into workflow redesign, with 14% in automation pressure and 12% in growth roles.

Lars Cornelissen · Jun 29, 2026

AI peer review line showing combined ICLR, ICML, and NeurIPS submissions rising from 17,051 in 2020 to an estimated 73,883 in 2026.

AI peer review gets a serious scale test at ICML

AI peer review is moving into production workflow. Google's PAT found 89.7% of tested math errors, but review power remains human.

Lars Cornelissen · Jun 29, 2026

AI coding agent malware chain with 3 hidden indirection steps and 1 runtime DNS payload outside the GitHub repo.

AI coding agent malware hides in clean GitHub repos

AI coding agent malware can hide behind a clean repo. Lock down setup execution, DNS egress, and agent permissions before rollout.

Lars Cornelissen · Jun 29, 2026

VS Code Tasks supply chain attack affected 2 npm packages and 16 Go packages, according to JFrog Security Research.

VS Code Tasks supply chain attack needs new checks

VS Code Tasks supply chain attack is a package hijack pattern that can run outside npm lifecycle scripts, so scan editor configs now.

Lars Cornelissen · Jun 29, 2026