Articles from Source: The-New-Stack

Apple just turned Safari into something AI agents can control

2026-07-03 17:19
🚀 Apple recently launched Safari Technology Preview 247, featuring a built-in Model Context Protocol (MCP) server. This allows AI agents to interact directly with the Safari browser. 🛠️ Developers can now utilize 16 tools to capture screenshots, inspect elements, and run accessibility checks without leaving the terminal. 🔒 Importantly, this server operates locally, ensuring user privacy by not accessing personal data or browsing history. This update signifies a shift in how browsers can...
Source: The New Stack
Amanda Caswell

The $1.3 million theft that exposed AI’s blind spot

2026-07-02 21:05
A recent cargo theft in Chicago has highlighted a new vulnerability in AI infrastructure: the physical supply chain. 🏗️🚚 Two trailers containing $1.3 million worth of data center equipment and copper wire were stolen from different locations. This incident underscores that as AI demand grows, the risk of theft of essential hardware is increasing. Supply chain delays can impact the entire deployment of AI systems, making this an emerging concern for the industry. 📈🔒 #AI #CyberSecurity...
Source: The New Stack
Amanda Caswell

Microsoft just admitted its biggest AI mistake — and spent $2.5 billion fixing it

2026-07-02 21:03
Microsoft has announced a significant shift in its AI strategy, launching a new $2.5 billion initiative aimed at helping businesses customize their AI solutions. This move comes as the company acknowledges past mistakes, particularly in relying solely on OpenAI models. The new Microsoft Frontier Company will assist clients in integrating various AI tools from different providers, prioritizing flexibility and effectiveness. With this approach, Microsoft aims to enhance AI deployments tailored...
Source: The New Stack
Amanda Caswell

“AI contributions are demoralizing”: Godot bans coding agents to save its mentoring model

2026-07-02 20:31
Godot Engine is updating its contribution policy to restrict AI-generated code in its repositories. This decision follows extensive discussions within the Godot Foundation, as maintainers face difficulties managing the influx of AI-authored pull requests. The Foundation emphasizes that code reviews are essential for mentoring future contributors, which is compromised when dealing with AI. While AI use is still allowed for simple tasks like code completion, new contributors will need explicit...
Source: The New Stack
Paul Sawers

What comes after attention? This startup says it already knows.

2026-07-02 17:00
🚀 Subquadratic has launched its SubQ 1.1 Small model, which utilizes a unique sparse-attention mechanism to handle a 12-million token context window efficiently. Despite early skepticism, the company has released model benchmarks and is collaborating with design partners. Co-founder Alex Whedon emphasizes that their focus extends beyond sparse attention models to innovative architectures. The SubQ 1.1 shows strong results in long-context retrieval tasks, achieving near-perfect scores on...
Source: The New Stack
Frederic Lardinois

Your social login buttons run on third-party cookies. FedCM doesn’t.

2026-07-02 14:00
🚀 Social login options like "Sign in with Google" and "Continue with Apple" have simplified user onboarding for over a decade. However, they depend on third-party cookies, which privacy regulations are challenging. 🍪 Browsers like Safari and Firefox have already blocked these cookies by default, leaving many users in a cookieless environment. 🔄 FedCM (Federated Credential Management) is emerging as a solution, enabling federated logins without cross-site tracking. This new API allows browsers...
Source: The New Stack
Jeff Hickman

Why traditional CI/CD fails for LLMs (and the release gates we built to fix it)

2026-07-02 13:00
Traditional CI/CD gates often fall short for production AI systems, especially with LLMs. This article outlines a new release-gating approach that includes baseline evaluations, drift detection, and shadow validation. The goal is to catch silent AI regressions before they impact users. Unlike conventional software, LLMs are probabilistic, requiring more nuanced release checks to ensure acceptable behavior. Learn more about the challenges and solutions for deploying LLMs effectively. 🤖📊🔍...
Source: The New Stack
Freddy Daniel Alvarez Pinto

OpenClaw’s new app doesn’t run AI on your phone. That’s the whole point.

2026-07-01 21:00
🚀 OpenClaw has launched its new iOS and Android apps, allowing users to connect directly with their personal AI agents without relying on Telegram or WhatsApp. 📱 The app functions as a remote control, enabling communication with an AI that runs elsewhere, rather than on the phone itself. This design enhances performance and usability. 🔍 Similar approaches are seen in platforms like Anthropic’s Claude and OpenAI’s Codex, indicating a shift in how mobile apps are developed. #OpenClaw #AI...
Source: The New Stack
Amanda Caswell

Cordyceps flaw pattern is more proof CI/CD is part of the attack surface

2026-07-01 20:29
🔍 On June 24, Novee Security revealed a CI/CD vulnerability named "Cordyceps," affecting organizations like Microsoft and Google. This flaw allows unauthorized GitHub users to hijack workflows, compromising open-source supply chains. Out of 30,000 scanned repositories, 654 were flagged, with 300 confirmed exploitable. Developers often neglect CI/CD pipelines as security risks, leading to potential threats. Security scanners also struggle to identify such nuanced vulnerabilities....
Source: The New Stack
Meredith Shubel

Cloudflare wants to build the economic layer of the AI web

2026-07-01 20:10
Cloudflare is evolving to support publishers in the AI-driven web landscape. They recently announced updates including crawler classifications and analytics tools to help publishers navigate changes in traffic caused by AI summaries. With their new Pay Per Use model, publishers can earn revenue when their content is featured in AI-generated answers. This approach aims to create a more sustainable economic system for content creators. #Cloudflare #AIWeb #DigitalPublishing #ContentEconomy...
Source: The New Stack
Amanda Caswell

“You Only Compute Once”: How Clockwork wants to put an end to AI training restarts

2026-07-01 17:30
Clockwork aims to revolutionize AI training with its new solution, TorchPass, designed to minimize disruptions caused by GPU failures. Traditionally, failures require rolling back to the last checkpoint, which is time-consuming and costly. With TorchPass, training jobs can seamlessly transition to a backup GPU, recovering in minutes without losing progress. The launch of the YOCO Guarantee ensures that 90% of failures will be resolved without checkpoint rollbacks. If not, customers receive a...
Source: The New Stack
Frederic Lardinois

The call is coming from inside your pipeline: the anatomy of a Codecov attack

2026-07-01 14:00
In January 2021, a single line of code was added to a widely used bash script, leading to a major security breach. This script sent sensitive environment variables to an unknown IP address for 61 days before being detected. The incident highlights a systemic issue in modern software security. As new tools and integrations emerge, the pipeline becomes the new perimeter that must be secured. Organizations must rethink security measures to protect against such vulnerabilities. 🔒💻 #CyberSecurity...
Source: The New Stack
Zeen Rachidi

How Anthropic is bringing Fable 5 back — and when it’ll cost you

2026-07-01 04:12
🚨 Exciting update from Anthropic! Following the U.S. government's lift of export controls, Fable 5 will return on July 1, available globally across various plans. However, users will initially have a limit of 50% on usage until July 7. After that, access will require usage credits. Enterprise users will not have Fable 5 included in their regular allowance and will be billed through usage credits immediately. Anthropic also shared insights on the recent suspension of Fable 5, revealing that a...
Source: The New Stack
Frederic Lardinois

Fable is coming back: Federal government lifts export controls on Anthropic AI model

2026-07-01 00:08
📢 Exciting news for AI enthusiasts! The U.S. Commerce Department has lifted export controls on Anthropic's AI models, Fable 5 and Mythos 5. This allows Anthropic to restore access to Fable for users after it was temporarily suspended due to security concerns. 🔓 In a letter to Anthropic, Commerce Secretary Howard Lutnick highlighted the company's commitment to address security risks and inform the government of any malicious activity. Stay tuned for updates from Anthropic as they bring Fable...
Source: The New Stack
Frederic Lardinois

Anthropic’s Claude Sonnet 5 system card says more about the future of AI than its benchmarks do

2026-06-30 20:37
🚀 Anthropic's Claude Sonnet 5 has launched, showcasing advancements in coding and reasoning. 📊 While benchmark results are highlighted, the 145-page system card emphasizes how AI agents operate autonomously and handle challenges like prompt injection and recovery from errors. 🔍 Key evaluations include malicious use and stealth behavior, indicating a shift towards reliable AI performance in real-world applications. 🛠️ Organizations will need new infrastructure to support these advanced agents...
Source: The New Stack
Amanda Caswell

The infrastructure lock-in costing AI companies hundreds of millions

2026-06-30 19:04
The AI infrastructure landscape is shifting, as highlighted by Jim Keller, CEO of Tenstorrent. He emphasizes that optimizing for current models may lead to costly lock-in as needs evolve. AI is outgrowing the infrastructure built for it, requiring a rethink of hardware strategies. It's no longer just about the fastest GPU; balance and adaptability are key. Nvidia's new Vera Rubin platform aims to address these challenges with a multi-chip system designed for diverse workloads. #AI...
Source: The New Stack
Amanda Caswell

Anthropic Sonnet 5: It closes the gap with Opus 4.8, and is cheap until August

2026-06-30 18:00
🚀 Anthropic has launched Sonnet 5, claiming it as their most advanced Sonnet model yet. It closely matches the performance of Opus 4.8, particularly excelling in reasoning, tool use, and coding tasks. While it doesn't surpass Opus 4.8, it offers a more affordable option until August. 💰 Introductory pricing is set at $2 per million input tokens and $10 for output, encouraging developers to test the model. #Anthropic #Sonnet5 #AI #MachineLearning #TechNews
Source: The New Stack
Frederic Lardinois

Anthropic launches Claude Science, an AI workbench for scientific research

2026-06-30 17:00
🔬 Anthropic has launched Claude Science, a new AI workbench designed for scientific research. This application runs on macOS and Linux, allowing researchers to conduct their work in one centralized place. Currently in beta, Claude Science primarily targets life sciences but is expected to expand in the future. 🛠️ Users on Claude Pro, Max, Team, and Enterprise plans can access it, with discounted options available for research labs. The tool aims to streamline research by integrating multiple...
Source: The New Stack
Frederic Lardinois

AWS launches a desktop for agents

2026-06-30 16:01
🚀 AWS has officially launched Amazon WorkSpaces for Agents, following a brief public preview. These cloud-based desktops allow agents to use desktop applications without needing custom integrations. Wolters Kluwer, a key customer, highlights the benefits of integrating AI into their workflows. The service uses the Model Context Protocol (MCP) for efficient session management and allows human oversight for better control. #AWS #CloudComputing #WorkSpaces #AI #VirtualDesktops
Source: The New Stack
Frederic Lardinois

AWS just put $1 billion into forward deployed engineers. Here’s why it matters for enterprise teams.

2026-06-30 15:02
🚀 Amazon Web Services is investing $1 billion in a new initiative called forward deployed engineering. This organization will place AWS engineers directly with enterprise teams to assist in building AI applications. 🤝 The goal is to provide hands-on support as AI projects transition into production. AWS has noted that customers prefer engineers embedded within their teams for better collaboration and expertise development. 🔗 These teams are already collaborating with various organizations,...
Source: The New Stack
Amanda Caswell

“The harness is where the hard work is”: Harness bets on agents that enterprises can trust in production

2026-06-30 15:00
Harness has launched Autonomous Worker Agents, a new feature that allows enterprises to replace fixed scripts in delivery pipelines with AI agents. 🤖 These agents can handle tasks such as deployment, testing, and security scans while adhering to existing governance controls. This enhances flexibility without compromising safety. 🔒 CEO Jyoti Bansal emphasizes that managing agents in production presents unique challenges compared to coding agents. The new agent-file format simplifies the...
Source: The New Stack
Frederic Lardinois

Aikido acquires Root to backport open source fixes without forcing upgrades

2026-06-30 14:00
Aikido Security has acquired Root for $70 million, enhancing its cybersecurity offerings. This acquisition integrates Root’s technology into a new product called Aikido Libraries, allowing for backporting security fixes to existing open source packages without requiring upgrades. 🔒 Aikido commits to providing these fixes for critical vulnerabilities listed in CISA's catalog at no cost, benefiting the entire open source community. 🌐 Founded in 2022, Aikido continues to expand its capabilities...
Source: The New Stack
Paul Sawers

Operating Kubernetes at scale: a few stories from running Amazon EKS

2026-06-30 13:00
Amazon EKS operates hundreds of thousands of Kubernetes clusters across 30+ AWS regions. 🛠️ Key insights reveal that many availability issues arise not from component failures, but from how components respond to problems. A resilient control plane prevents faults from escalating into outages. As workloads evolve, including AI and analytics, EKS adapts its systems to handle rapid state changes and higher demands. This evolution ensures that EKS supports mission-critical workloads effectively....
Source: The New Stack
Neelendra Bhandari

IdentityServer4 is dead. Here’s what comes next.

2026-06-30 08:00
🚨 Big changes in identity management! Duende's commercialization of IdentityServer4 in December 2022 left many developers dissatisfied. In response, Rock Solid Knowledge (RSK) has forked the project to create Open.IdentityServer, an open-source alternative. This new platform aims to provide a free, supported path for developers without the pressure of immediate monetization. RSK emphasizes that open-source success comes from adoption first. The initial release of Open.IdentityServer was on...
Source: The New Stack
Adrian Bridgwater

Base44 bets a narrow model beats frontier AI for vibe coding

2026-06-29 18:03
🚀 Base44 has introduced its proprietary AI model, Base One, designed for vibe coding web applications. This model is a fine-tuned version of an existing open-source LLM, marking a notable first in app creation platforms. Founder Maor Shlomo highlights its reinforcement learning approach, enhancing the model using real platform tasks. Base44 aims to optimize application development, reducing reliance on general AI models and external vendors. The company has seen remarkable growth, with...
Source: The New Stack
Darryl K. Taft

JetBrains kills Kotlin Notebook months after Microsoft’s Polyglot exit. But Jupyter is doing just fine.

2026-06-29 17:59
JetBrains has announced that it will sunset Kotlin Notebook, an interactive coding plugin launched in July 2023. Starting with IntelliJ IDEA 2026.2, the plugin will be handed to the open-source community under the Apache 2.0 license. The decision follows low adoption rates, with JetBrains acknowledging that AI tools have shifted developer workflows. This move mirrors Microsoft's earlier decision to deprecate Polyglot Notebooks for similar reasons. The Jupyter format remains popular, as it has...
Source: The New Stack
Paul Sawers

Palantir and Nvidia want to change who owns government AI

2026-06-29 17:55
Palantir and Nvidia are shifting the landscape of AI ownership in government sectors. Their recent collaboration focuses on an "intelligent engine" that enables organizations to run and customize AI within secure environments, keeping data in-house. This approach allows for better governance and compliance without relying on external cloud services. The partnership leverages Nvidia's Nemotron models, which are designed for efficient operation on internal GPUs, promoting a shift from using...
Source: The New Stack
Amanda Caswell

“Bring it to our shop”: Workday’s pitch for keeping AI agents close to your most valuable data

2026-06-28 15:00
Workday is advancing its AI capabilities, focusing on accuracy for payroll and HR data. CTO Gabe Monroy emphasizes that even a 99% success rate is insufficient due to the critical nature of this data. At the recent DevCon conference, Workday introduced Agent-Ready Tools to enhance agent reliability, including the Model Context Protocol and Agent Passport for testing and monitoring agents. Monroy, with a background in AI infrastructure, believes that safety in AI should be a foundational...
Source: The New Stack
Frederic Lardinois

Okta is the first to bring AI agent governance inside FedRAMP boundaries

2026-06-28 13:49
🚀 Okta has launched its AI agent governance platform for FedRAMP and HIPAA-regulated environments, marking a significant step in identity management. This platform treats AI agents as first-class identities, enhancing security and compliance for federal agencies and healthcare organizations. The product addresses risks associated with unmanaged agents, including compliance violations and increased breach potential. With a focus on governance, it ensures agents are registered and monitored...
Source: The New Stack
Darryl K. Taft

Greptile, Cursor, and Devin agree that agents should run their code. What they run it against matters.

2026-06-27 15:00
The tech industry is rapidly moving towards runtime verification for agent code. 🚀 Companies like Greptile, Cursor, and Devin emphasize that agents should not only write code but also verify it in real-time. Static checks alone are insufficient. By allowing agents to run their code before human review, efficiency increases and bottlenecks are reduced. 🔄 However, challenges remain, especially in ensuring that the runtime environment accurately reflects real system interactions. As the trend...
Source: The New Stack
Arjun Iyer

Vibe slop is the symptom. Context debt is the disease.

2026-06-27 10:30
Engineers Armin Ronacher and Mario Zechner highlight a growing issue in coding: "vibe slop." This term describes inefficient and error-prone code generated through prompt-based tools. They warn that this can lead to increased compute and resource costs, affecting startups' sustainability. Additionally, Postman's CEO Abhinav Asthana introduces the concept of "context debt," which refers to the complex web of services and APIs that complicate development. This debt accumulates over time and...
Source: The New Stack
Matt Burns

After Fable 5 ban, Anthropic and 19 organizations launch open source security body

2026-06-26 18:36
🚀 The tech industry is uniting to enhance open-source security with the launch of Akrites, led by the Linux Foundation and backed by 19 organizations, including AWS, Google, and Microsoft. 🛡️ This initiative aims to streamline the discovery, remediation, and disclosure of vulnerabilities in critical open-source software. AI models are now making it possible to identify multiple vulnerabilities quickly, but attackers have access to these tools as well. 🔍 As AI tools reveal thousands of...
Source: The New Stack
Paul Sawers

The US government just told OpenAI who’s allowed to use the next GPT 5.6 model

2026-06-26 18:26
🚨 The US government has mandated restrictions on OpenAI's upcoming GPT 5.6 model due to cybersecurity concerns. 🤖 Only a select group of government-approved partners will have access during the initial release. This follows a similar directive given to Anthropic for their AI models. 🔍 OpenAI CEO Sam Altman confirmed that access will be granted customer by customer, which is an unusual approach for such technology. #OpenAI #GPT56 #AI #Cybersecurity #Innovation
Source: The New Stack
Adrian Bridgwater

AWS, Microsoft, and Google agree the session is the new unit of compute. They disagree on how to isolate it.

2026-06-26 14:11
Four AI leaders—AWS, Microsoft, Google, and Anthropic—are advancing towards a common architectural shift in agent runtime updates. 🤖 While they agree that the session is the new unit of compute, they differ on how to achieve isolation. Microsoft focuses on per-session isolation, while AWS uses microVMs and Google applies dedicated sandboxes. This evolution highlights the need for session-aware execution in enterprise agents, moving beyond traditional request-level load balancing. 🌐 #AI...
Source: The New Stack
Janakiram MSV

Your engineering org needs an AI slop registry

2026-06-26 14:00
AI coding tools can accelerate coding but also amplify mistakes across projects. These errors often include subtle misalignments with project needs, leading to bloated or incorrect code that can pass initial checks. Teams typically try to improve AI instructions with files like CLAUDE.md, but this doesn't always ensure mistake detection. An independent verification system is essential for catching these errors effectively. Aviator's approach prioritizes verified intent over traditional code...
Source: The New Stack
Ankit Jain

Shopify taught AI to spot duplicate products. Here’s why retailers are scrambling.

2026-06-26 13:52
Retailers are adapting to a shift in shopping trends as AI shopping agents become more prevalent. Shopify's new system, Catalog, helps AI identify and group duplicate product listings, enhancing product discoverability. This comes as AI-driven traffic to Shopify stores has surged significantly. As the landscape evolves, retailers are rethinking how they present product information to AI. 📈🤖 #RetailTech #AI #Shopify #Ecommerce #ProductDiscovery
Source: The New Stack
Suman Bhattacharyya

The AI agent identity problem nobody’s talking about

2026-06-26 13:00
Many AI agent projects encounter challenges during security reviews due to unclear identity models and broad permissions. This issue can halt progress when questions arise about the identity under which agents operate. Research indicates a significant increase in AI agents, highlighting the growing need for well-defined identities to ensure accountability and security. To address this, developers must focus on key identity decisions, such as using workload identities instead of shared service...
Source: The New Stack
Jackson Connell

Public cloud vs. on-prem: Summit on where each workload belongs

2026-06-26 00:09
The debate on public cloud vs. on-prem solutions is heating up. As AWS and other cloud services grow, companies are reassessing their cloud strategies due to rising costs. Many now realize that not all workloads are best suited for the cloud. Experts suggest that segmenting workloads and moving some back on-prem can lead to lower costs and better management of high-risk data. For insights on the evolving landscape, check out the latest episode of The New Stack podcast. 💻☁️📈💡 #CloudComputing...
Source: The New Stack
Alex Wilhelm

“Code should be regenerated, not maintained”: Codeplain makes the case for spec-driven development

2026-06-25 17:47
AI is rapidly generating code, which presents new challenges for developers. A growing number advocate for a shift from code maintenance to spec-driven development. Dušan Omerčević, CEO of Codeplain, emphasizes that specifications should be the focus, allowing for easier updates and regeneration of code rather than maintaining it. Codeplain recently introduced an open-source framework called plain-forge to streamline the development process by automating spec creation. They’ve also secured...
Source: The New Stack
Paul Sawers

Trust in Rust: Foundation debuts official training to tackle steep learning curve

2026-06-25 16:30
🚀 The Rust Foundation has launched the Rust Foundation Trusted Training (RFTT) program, a formal accreditation for Rust training providers. This initiative aims to ensure quality and build trust in Rust training, as adoption grows across various industries. Five organizations are part of the founding cohort. 🏢 Accreditation evaluates five key areas, ensuring a high standard of training. Fees for accreditation cover administrative costs and are set to support the program's operations. For more...
Source: The New Stack
Darryl K. Taft