Plugin4Shell: A Zero-Click RCE Hit Four Major Coding Agents, and Two Are Staying Unpatched
A branch name matching a 40-character commit hash was enough to make Claude Code, Codex, Copilot, and Gemini CLI install attacker code while reporting a clean, SHA-verified install -- and Google and Microsoft have both declined to fix it.
India's Compute Buildout Gets Specific: NVIDIA + Yotta's 20,000-GPU Shakti Cloud, 38,000 GPUs, 600 Data Labs
Yesterday's digest covered the $260B topline pledge; today's news is the specific partnerships turning it into deployed hardware -- and a reality check that this is a two-speed market, not a uniform boom.
This Week's GitHub Trending List Is Small Tools, Not Big Frameworks
46,887 stars for a skill that stops an agent from burying the answer; 23,227 for middleware that cuts noisy tool output 98%. Neither is a runtime or a framework -- both are small, focused fixes for specific agent-harness annoyances.
Claude Code Now Reads AGENTS.md -- One File Driving Claude Code, Codex, Cursor, and Copilot
Claude Code 2.1.278 added support for the open AGENTS.md convention, meaning a single instructions file can now drive multiple different coding agents instead of maintaining a separate config per tool.
Epoch AI's New Benchmark Is 68 Unsolved Erdős Problems -- and the Best Model So Far Solved 2
FrontierMath Erdős asks AI systems to write complete Lean proofs for real open problems in mathematics, curated by the mathematician who maintains ErdősProblems.com -- a harder, more honest test than benchmarks with a known answer key.