A single git trick beat the safety lock on four AI coding agents
THE SO WHAT
Plugin4Shell shows that even SHA-pinned plugins in AI coding agents can be subverted with a single git trick — turning “reviewed code” into a zero-click RCE vector. If your developers use AI agents tied to external plugins, treat them as part of your attack surface and audit both plugin provenance and sandboxing this week.
READ THE SOURCE
MORE FROM THE WIRE
Applied AIA Microsoft scientist called AI training the largest theft of labor
When a senior Microsoft scientist calls large-scale model training “an astonishing theft of unprecedented proportions,” the IP and labor framing around training data is no longer fringe. Expect more aggressive demands for compensation, provenance, and opt-out—if your product depends on scraped or user-generated data, get ahead of this with explicit data policies and licensing.
Applied AIiPhone owners can now submit a claim in Apple’s $250 million Siri AI lawsuit
A $250M settlement over an “AI-upgraded” Siri that allegedly underdelivered is a warning shot: marketing AI capabilities as magic creates real legal and financial risk. If you’re shipping AI features, tighten the gap between promo language and actual performance—and log what your sales teams are promising.
Applied AIThe first 5 Googlebook laptops are here, with an OS that blends Android and Gemini
Blending Android with Gemini on laptops makes AI a default layer in the OS, not an app you open. For internal tool builders, that means your workflows may be invoked via system-level AI surfaces — design prompts and APIs with that orchestration in mind.
Applied AIThe Googlebook’s most compelling AI feature isn’t even AI
When the standout “AI feature” is really UX — like smarter widgets or pointer behavior — the bar for AI branding just went up. Teams shipping AI features should focus on invisible, workflow-native wins rather than marquee tricks that don’t change how people actually use the device.