i had 12 Claude agents running in parallel for 6 hours and i managed to reverse engineer @supabase i'm making it available here so that you can save your tokens - 100% free & open-source: github.com/supabase/supabase

We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent. It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.

fear not! this is no cyberpocalypse this is the internet’s immune system finally waking up to an illness it has always had a mere fever the 0days were always there the only thing that changed is awareness now we begin the healing process ⚕️

Before you install that AI skill someone shared on X, scan it. In an analysis of 31,132 AI agent skills, 26.1% contained vulnerabilities and 5.2% looked malicious. NVIDIA open-sourced SkillSpector, the scanner it uses before publishing skills to its own catalog. 20.8K stars. → checks 71 attack patterns across 17 categories: prompt injection, data theft, privilege escalation, poisoned MCP tools and more → scans a GitHub repo, a URL, a zip or a folder → gives each skill a 0 to 100 risk score with a clear recommendation → fast scan with no AI, plus an optional deeper AI review → works for Claude Code, Codex and Gemini CLI skills Install: uv tool install git+github.com/NVIDIA/skillspect… Scan a skill: skillspector scan ./the-skill/ --no-llm Apache-2.0.

Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc

holy sh*t, someone mapped 12,000+ reverse-engineered projects you can use today cars, smart homes, games, AI clients and abandoned services. searchable in one free repo. the collection: → awesome-reverse-engineered 12,869 projects, with an agent skill that searches by product, vendor or protocol. → games (3,036 projects) emulators, decompilations and rebuilt engines. shadPS4 and RPCS3 included. → devices & hardware (3,028 projects) tools for readers, wearables and connected hardware. → unofficial API clients (904 projects) existing clients to check before writing your own integration. → AI tools & LLM clients (737 projects) reconstructed clients, system prompts and tools for closed AI products. → cars (520 projects) vehicle integrations, charging tools and openpilot. → firmware (472 projects) OpenWrt, Tasmota and alternative firmware for supported devices. → file formats (436 projects) readers, parsers and converters for files your app needs to understand. → network protocols (422 projects) implementations you can inspect instead of guessing how a connection works. → service revivals (173 projects) replacement services for products their vendors abandoned. search your target → check the license and maintenance → test the existing implementation → build what's missing bookmark the index for your next integration. send it to the friend about to spend a weekend rebuilding one.

Gemini 4 Argon combined three open-source datasets to build an interactive 3D visualization of human anatomy. Toggle different layers in motion, isolate muscles, or zoom inside a beating heart.

Meet Flint from @Recursive_SI! A ~40B parameter MoE open model for fast, accurate agentic coding use case made to run on-device. Flint can generate >125 tps on a M4 Pro Macbook Pro and >150 tps on a 64GB NVIDIA RTX Spark on short contexts. Try it on Ollama today: ollama run flint Claude Code: ollama launch claude --model flint

Chopin + Proof-Driven Development Kit from @GitHubNext and @MSFTResearch enable teams to ship AI-generated code to production without reviewing it line by line, with stronger assurance than code review and testing alone. Now in research preview ⬇️

we'll be jailbreaking a Unitree onstage at Black Hat EU! 🤖⛓️‍💥 hope to see y'all there 🤗

OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. openai.com/index/coordinated…

🚀 Introducing DeepInfer, our in-house inference framework, now fully open source! Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable. 🔗 github.com/deepseek-ai/DeepI… 1/4