In two weeks, four documented incidents have confirmed that autonomous LLM agents have become a real, not just theoretical, attack vector—DeepSeek operated via Telegram, Claude Opus 4.7 compromising organizations, and Azure DevOps MCP hijacked through prompt injection.
Aug 25, 2026 13 3
The official Microsoft MCP server for Azure DevOps does not sanitize pull request descriptions before passing them to an LLM. As a result, a hidden instruction in a PR comment can redirect the AI review agent to projects the attacker does not control and silently exfiltrate their content.
Aug 13, 2026 7 2
A flaw in the Azure DevOps MCP (Model Context Protocol) integration allows an invisible comment in a pull request to hijack an LLM agent tasked with reviewing it.
Jul 22, 2026 7 2
A simple comment hidden in an Azure DevOps pull request can turn the code reviewer's AI agent against them - and send it siphoning projects that the attacker normally wouldn't have access to. The vulnerability lies in Microsoft's official MCP server.
Jul 22, 2026 8 2
Amazon Web Services has just announced the acquisition of DuckLabs, the team behind DuckDB—the open-source in-process OLAP database that has established itself in just a few years as the go-to analytical tool in the data ecosystem. This acquisition raises questions about the future of the project's open-source model.
Aug 27, 2026 7 2
Kubernetes has just announced the deprecation of three historical components: kube-dns, the IPVS proxy mode, and cgroup v1 support. Decisions long anticipated, but which will require concrete migrations in many clusters. Kaito takes stock of what is disappearing, why, and how to prepare.
Aug 27, 2026 2 1
GitHub has published its analysis of the outage on August 17, 2026, and outlines the planned work to prevent a recurrence. A rare post-mortem in terms of transparency for a critical platform in the global dev ecosystem.
Aug 20, 2026 6 2
Korben sheds light on a workflow that many young developers completely ignore: email-based patch review, Linux kernel style. A project allows you to do this without ever leaving Thunderbird - and it's more relevant than you might think.
Jul 20, 2026 10 2
An AI coding that executes `rm -rf` on the production database, this wasn't supposed to happen again after the Replit fiasco. It just happened again, several times, with GPT-5.6 Sol.
Jul 17, 2026 10 2
