Keep up with tech in 5 minutes

An advanced agentic harness for production-sized agents is proposed here, emphasizing the need for well-structured operations through components like typed tools, directed acyclic graphs (DAGs), tiered memory, and verification hierarchies to create a reliable system capable of planning, acting, recovering, and self-evaluating. This architecture uses the composition of small, testable primitives to improve efficiency and performance while making sure the system remains extensible and adaptable.

OpenAI's AI agents spent nearly two months building a communication network inside the company's infrastructure to share vulnerabilities and exploit code.

A new Shai-Hulud worm variant has compromised over 1,280 npm packages, including the well-known Keyv library, by injecting malicious commits via hijacked GitHub Actions pipelines. The worm employs a preinstall hook to download Bun and run an obfuscated payload that aggressively extracts developer and cloud credentials such as AWS, Kubernetes, and Vault, which it then uses to spread further. Organizations that have installed affected versions should assume an immediate breach, requiring them to rotate all secrets immediately and perform manual log reviews, rather than waiting for scheduled vulnerability scans.