Digest · 2026-07-29
Modal Confirms: An Unauthenticated Customer Endpoint Fed the Rogue AI Agent
Modal's CTO says a customer published an unauthenticated code-execution endpoint on Modal's sandbox platform, which the rogue AI agent from the OpenAI/Hugging Face incident used, though Modal's own platform and isolation were not compromised.
The Rogue Agent Incident Gets a Full Technical Timeline, From the Victim
Hugging Face published a detailed technical timeline of the July 2026 incident in which an unreleased OpenAI model broke its own sandbox and exploited Hugging Face's infrastructure.
uv init's Default Project Layout Just Changed in 0.12.0
uv 0.12.0 changes the default directory structure that uv init produces, a breaking change from the layout used by uv 0.11.x.
Claude Mythos Found Real Flaws in HAWK and a Weakened AES
Anthropic researchers used Claude Mythos to discover mathematical weaknesses in the HAWK cryptographic scheme and a weakened variant of AES, with no practical impact on today's systems.