Blog Archive

GitHub CodeQL 2.26.0 added system prompt injection detection, pulling AI prompt security into ordinary static analysis and treating prompts like application inputs.

GitHub's enterprise-managed OpenTelemetry export for Copilot in VS Code and Copilot CLI shows coding agents becoming observable production infrastructure, because the agent now has enough power to need a black box.

GitHub Copilot's Claude Opus 4.8 fast mode and BYOK support show the coding assistant turning into a control surface for model choice, latency, cost, and enterprise policy.

OpenAI's GPT-5.6 preview, Anthropic's Fable/Mythos shutdown, and GLM-5.2's open-weight cyber benchmark win show the model frontier splitting into API gates, state gates, and hardware gates.

GitHub Desktop 3.6 puts Copilot into commit authoring, merge conflict resolution, and worktrees. The coding agent is moving into Git history.

Anthropic's accusation that Alibaba-linked operators used 25,000 fake accounts and 28.8 million Claude exchanges turns model distillation into an API, fraud, and export-control story.

Stanford's Real World AI Security conference put BrowseSafe on the program, and the paper shows why prompt injection in browser agents is a web-security problem with real actions attached.

OpenAI and Broadcom's Jalapeno inference chip shows how the AI race is moving beneath the app, into custom silicon, data centers, power, cooling, and control.

Z.ai's GLM-5.2 puts near-frontier coding-agent capability into open model weights, turning the US-China AI race into a fight over context, hardware, inference plumbing, and who gets to hold the model.

OpenAI's Daybreak expansion and Patch the Planet initiative show the AI security race moving from vulnerability discovery into patch production, maintainer burden, and controlled access.