Good morning
We’ve found 6 important news and 4 useful articles for you today. Enjoy reading.
News
Atlassian Rovo Exfiltrates Data, Bypassing Controls
securityindustryai
Report on a critical vulnerability in Atlassian Rovo allowing data exfiltration via indirect prompt injection, bypassing security controls.
PSA: Apple’s Private Relay can leak your real IP address
securitynetwork
Security researchers identified flaws in WebKit that allow Apple’s Private Relay to leak real IP addresses, undermining its privacy guarantees.
Announcement of major leadership changes at Google DeepMind, including Demis Hassabis transitioning to Chair and Jeff Dean departing.
Meta Ran Ads That Contained AI-Generated Child Sexual Abuse Imagery
industryaisecurity
Report on the discovery of AI-generated CSAM in paid ads on Meta platforms, highlighting failures in automated ad moderation systems.
Meta launches Muse Code, an AI agent for large code bases
aidevopsindustry
Meta releases Muse Code, an AI agent for large repositories utilizing parallelized sub-agents. Relevant to developer tooling and AI-assisted workflows.
Launch HN: HyperProbe (YC S26) – Agents that do read-only debugging in prod
aibackendinfrastructure
AI-driven production debugging tool that injects read-only probes into live services to capture state without redeployments. Addresses critical on-call fatigue.
Articles
The Valley of Webhooks
backendsystemsinfrastructure
A compelling engineering critique of the 'webhook-for-replication' pattern, advocating for ordered, cursor-based change logs as a more robust solution for data consistency.
NVIDIA’s Vera Whitepaper Has a Thread Loose
systemshardwarebenchmark
A deep-dive technical critique of NVIDIA’s Vera whitepaper, identifying flaws in its SMT claims and marketing-heavy benchmarks.
cloudflare/computer
aisystemsinfrastructure
Cloudflare introduces a virtual filesystem (Durable Objects + SQLite) allowing agents to run shell/JS code in sandboxed containers or workers with persistent state.
Phishers are hijacking legitimate cloud infrastructure
securityinfrastructurenetwork
Technical analysis of how attackers exploit legitimate cloud services (Cloudflare, Vercel, etc.) for multi-stage AitM phishing and session hijacking.