SUPER AGENTS BY CLICKUP
Super Agents by ClickUp are configurable AI agents that can be created, assigned, and managed directly within ClickUp workflows to automate tasks and coordination.
Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Super Agents by ClickUp are configurable AI agents that can be created, assigned, and managed directly within ClickUp workflows to automate tasks and coordination.
/agent by Firecrawl is an API that autonomously searches, navigates, and extracts structured data from complex websites based on a data description.
Aident AI is a natural-language automation tool that converts plain English instructions into agent-based workflows and scripts across connected tools.
Austin Russell became one of the youngest self-made billionaires when Luminar went public in 2020. By December 2025, the lidar company filed for Chapter 11. This article digs into what happened in between - Luminar bet everything on Volvo, which kept expanding its order from 39,500 sensors to 1.1 million over three years. Then, Volvo made lidar optional instead of standard, cutting volumes by 90%. There's a lot to unpack here about concentration risk, why "lifetime volume" projections aren't the same as purchase orders, and what happens when your only customer changes their mind.
AI companies need higher revenue or pricing power to match SaaS profit per customer due to structurally lower margins. AI can tap larger budgets, but must rely on volume, pricing power, and efficiencies in costs like compute to be competitive. The math hasn't changed, only the economic inputs have, making understanding these differences crucial for evaluating financial outcomes in AI versus SaaS.
Google has more than nine products, each with more than one billion monthly active users, none of which represent new categories.
Maor Shlomo, founder of the AI startup Base44, warns that 'vibe coding' makes it easy for competitors to quickly replicate ideas.
The rapid interest rate hikes in 2022 reduced global liquidity, causing many startups to struggle or fail, highlighting the shift from a low-cost capital environment.
Martin Roth, revenue leader at Levelset, breaks down what actually changes as sales teams scale, where teams tend to overcorrect, and why structure and incentives still beat tools, even in the current AI era.
Nissan has confirmed that data belonging to approximately 21k customers was breached via a data breach at Red Hat in September. The breached data includes full names, physical and email addresses, phone numbers, and sales data for some customers who purchased or received services at Nissan in Fukuoka, Japan.
France's postal service, La Poste, suffered a widespread DDoS attack that disabled all IT systems for over twelve hours, affecting the website, mobile app, Digiposte digital document service, and digital ID services. The attack also disrupted La Poste's banking subsidiary Banque Postale's online services, though over-the-counter operations and payment processing remained functional. The timing raised concerns about potential Christmas delivery disruptions, with no timeline provided for service restoration.
A ransomware-linked campaign exploited zero-day flaws in Oracle E-Business Suite to access University of Phoenix systems, leading to data theft affecting nearly 3.5 million people. Exposed data includes names, dates of birth, Social Security numbers, and bank account details, though no leak has yet appeared online.
Red teamers traditionally must manually configure C2 redirector proxy rules by reviewing profiles and adding User-Agent strings and HTTP endpoints to configuration files, requiring updates whenever the C2 profile changes. The author developed caddy-c2, a Caddy web server module that automatically parses Cobalt Strike profiles using goMalleable to extract User-Agents and URI paths, then dynamically routes legitimate C2 traffic without manual rule configuration. The module simplifies redirector deployment by eliminating the need to manually sync proxy configurations with C2 profile changes, though current support is limited to Cobalt Strike, with plans to expand to frameworks such as Mythic and Havoc.
Mintlify lets customers write pages in MDX, but processes that content in a way that allows attackers to run arbitrary JavaScript on the server during build. This means an attacker can take over the build environment, poison cached pages, and inject malicious scripts into many companies' docs, including big names like Discord and Vercel. Because some docs were served from the same domain or path as real apps, those scripts could steal auth tokens or perform actions as logged-in users.
LinkedIn modernized its SAST pipeline by building custom GitHub Actions workflows using CodeQL and Semgrep that deviated from paved paths to accommodate complex internal build processes, implementing dynamic rule filtering, SARIF enrichment, and extensive metrics instrumentation across tens of thousands of repositories. The team deployed a "stub workflow" approach combined with a Drift Management System that daily checks repository compliance and automatically commits workflow files, ensuring consistent security coverage while allowing centralized updates without touching individual repos. LinkedIn implemented "blocking mode" enforcement via GitHub Repository Rulesets requiring SARIF submission and zero high-risk vulnerabilities before PR merges, protected by multi-level kill switches (organization/repo/language/tool/rule-specific) and fail-safe mechanisms that upload blank SARIFs to unblock developers during scanning failures while triggering oncall alerts.
CLR-Unhook is a native C++ utility that bypasses EDR/AV hooks in the .NET Common Language Runtime by restoring the original nLoadImage function implementation.
Mandiant released GoStringUngarbler, a Python tool that deobfuscates strings in Go binaries protected by garble's literal transformation flag, supporting Windows PE and Linux ELF executables compiled with Garble v0.11.0-v0.13.0 and Go v1.21-v1.23. The tool identifies decrypting subroutines via regex pattern matching, emulates them using the Unicorn emulator to extract plaintext strings, and patches the binary by replacing obfuscation routines with stubs that directly reference the decrypted content. Security analysts can use this to accelerate malware analysis of garble-obfuscated Go samples, though it only works when garble's "-literals" flag was used during compilation.
Gambit Cyber provides an AI-native, risk-centric continuous threat exposure management platform called KnightGuard. It uses coordinated AI agents to help enterprises continuously identify, validate, prioritize, and remediate cyber risks across CTI, SecOps, and IT operations.
The libxml2 library temporarily lost its sole volunteer maintainer, Nick Wellnhofer, after years of unpaid security work, creating a critical risk for GNOME, web browsers, and countless projects depending on this XML/XSLT processing library. Wellnhofer experienced burnout from companies that sent security reports, expecting immediate CVE responses and patches, with no financial compensation beyond a single Google donation, while providing no code contributions or test cases. Two new maintainers have assumed responsibility, but the incident highlights the unsustainable model in which commercial software relies on unpaid volunteers to maintain critical infrastructure components.
Security market analyst James Berthoty predicts that supply chain and AI tooling will dominate the market in 2026. Berthoty predicts that the following critical product capabilities will be essential: supply chain malware detection, AI vulnerability remediation and prioritization, AI visibility, guardrails, testing, AI based detections, and SOC augmenters. Teams should also have runtime function level reachability (ADR), developer endpoint security, and realtime AI threat modeling and design review on their radar.
OpenAI acknowledges that prompt injection attacks in AI browsers like ChatGPT Atlas are a long-term, unsolved security risk, similar to social engineering on the web. The company is layering defenses, including an LLM-based automated attacker that repeatedly probes Atlas in simulation to discover new attack strategies, tighten protections, and enforce user confirmations. Experts still question whether the current agentic browser value justifies their elevated risk.
Amazon blocked over 1,800 job applications from suspected North Korean agents since April 2024.
Pirate preservation group Anna's Archive scraped 256 million Spotify track records and 86 million audio files through unauthorised data collection.
ServiceNow is acquiring Armis, a nine-year-old cybersecurity company focused on securing critical infrastructure for Fortune 500s and governments, in an all-cash $7.75 billion deal.
Sponsored
Welcome to Delve Shipmas. Every day this week, Delve is launching a new AI feature to make compliance more modern than ever. Yesterday, we launched Delve's AI Copilot that can help on any compliance task or question. Today, we're launching... AI VENDOR RISK MANAGEMENT
Adam Mosseri, Head of Instagram, still wasn't sure how people would use Instagram's TV app on Amazon Fire the day before the integration rolled out. The team knew they would get things wrong, but they were ready to learn and iterate quickly. Instagram is likely to change dramatically in the next few years. The platform plans to let users proactively shape content on their feeds in a way that will feel fundamentally different.
Apple's Foldable iPhone is rumored to have an aspect ratio similar to that of Apple's largest iPads when viewed in landscape mode. It is expected to arrive in the fall of 2026 along with the iPhone 18 Pro. A wider foldable could help distinguish the device from Android book-style foldables. Samsung is apparently planning to release its own foldable with a wide aspect ratio in Q3 2026 to compete with the foldable iPhone.
Lazy eye, or amblyopia, can occur when one eye is deprived of vision early in life. The lack of input disrupts synapse formation in the brain's primary visual cortex, weakening vision in that eye. A new mouse study has found that briefly and reversibly anesthetizing the retina of an amblyopic eye for just a few days can restore the brain's visual responses to that eye. While it is clear that the treatment seems to reset the way the brain engages with specific neurons, scientists still haven't figured out exactly why this is happening.
Laptop designs need to be upgraded to make running AI models locally possible. The average laptop is underpowered for large language models. The most obvious way to boost a PC's AI performance is to place a powerful NPU alongside the CPU. Another upgrade required for PCs to run AI models is a unified memory architecture that provides all system resources to the same pool of memory over a fast, interconnected memory bus.
Sponsored
Most channels drown your brand in clutter, but TLDR puts you in front of your target audience with almost no competition. Each issue features only three advertisers, giving your message the space it needs to stand out. Millions of developers, product managers, CEOs, and other tech decision makers actually see what you have to say. Learn more [10] about running a test campaign.
2025 was the year of agents. The year saw huge developments with large language models and tool execution. Developers can now build a lot of their own tools rather than depending on services. However, this has surfaced some problems, like a lot more unreviewed AI slop in pull requests.
Vercel's AI SDK is the leading TypeScript toolkit for building AI applications. It provides a unified API that allows developers to integrate with any AI provider. The SDK enables developers to build everything from chatbots to complex background agents. Version 6 introduces agents, tool execution approval, DevTools, full MCP support, reranking, image editing, and more.
Riley Walz is known for his many creative projects. He always has over 50 ideas in his backlog at any point, so there's always something for him to do. Walz only works on ideas he thinks are fun. If you reject your own ideas, the part of the brain that comes up with ideas is going to stop. Making your ideas a reality again and again is the only way to generate better ones over time. There's no such thing as an impossible idea.
This post contains 12 predictions for 2026 from a venture capitalist. 2026 will be the year enterprises productionize AI. It will be a record year for liquidity, though AI budgets will receive scrutiny for the first time. Labs will stop competing on every frontier as Google distances itself from competitors. Cloudflare will become the gatekeeper for agentic payments.
Larry Ellison has agreed to provide an irrevocable personal guarantee of $40.4 billion of the equity financing for the offer and any damages claims against Paramount.
Claude Code shipped native Language Server Protocol support last week, enabling the IDE to actually understand code.
Singapore-based AI firm Megaspeed has evolved into the single largest Southeast Asian buyer of Nvidia's chips in less than three years.
The combination of Rising Expectations and the perception of Rising Requirements has left an entire generation defining 'success' as something almost no one achieves, while also treating 'success' as something one needs in order to start a family.
The deal will help address the near-insatiable demand for energy to power the AI expansion.
The instability in address/reputation pairing has implications for how well security threat mitigation services can perform.
Sponsored
Welcome to Delve Shipmas. Every day this week, Delve is launching a new AI feature to make compliance more modern than ever. Yesterday, we launched Delve's AI Copilot that can help on any compliance task or question. Today, we're launching... AI VENDOR RISK MANAGEMENT
OpenAI introduced a personalized year-in-review feature called "Your Year with ChatGPT," available to eligible users in select regions. Inspired by Spotify Wrapped, the feature highlights individual usage trends from the past year.
GLM-4.7 is the latest release in Z.AI's General Language Model line. The high-end foundation model is aimed at advanced reasoning, coding, and multimodal workloads. The late update expands context handling and reasoning depth compared to earlier versions. It introduced upgraded reasoning pipelines and broader multimodal support.
MiniMax M2.1 is ahead of DeepSeek and Kimi on several benchmarks. It is even catching up to state-of-the-art models in some areas. The model is super-fast and efficient. It is now available to all Kilo Code users.
Manus Design View is an extension of the Manus agent for seamless AI design workflows. It enables designers to generate concepts with simple prompts, make precise edits using the Mark Tool, and change text easily. The Manus mobile app allows design edits on-the-go with either text or voice input. It is available to all users today.
This post details OpenAI's ongoing efforts to secure its AI browser, Atlas, against prompt injection attacks - malicious instructions embedded in web content that manipulate agent behavior. While mitigation techniques are improving, the company acknowledged prompt injection remains an unsolved and persistent threat, particularly as agent capabilities expand on the open web.
It's pretty easy to homebrew your own asynchronous coding agent. This means that businesses selling coding agents can no longer differentiate themselves by only running sandboxed agents in the cloud that connect to Slack. Companies working on coding agents likely realize this and are doing everything they can to train their own SWE agents and auxiliary models to improve their harnesses.
Gemini 3 Flash is a lightweight, efficient model optimized for speed and low latency. It is capable of delivering performance comparable to Gemini 3 Pro at a fraction of the cost. The model's design brings unprecedented power but introduces specific tradeoffs in token efficiency and reliability. This post takes a look at the leaked architectural details of the new model.
Vercel spent months building a sophisticated internal text-to-SQL agent with specialized tools, heavy prompt engineering, and careful context management. It kind of worked, but it was fragile, slow, and required constant maintenance. The team then deleted most of it and stripped the agent down to a single tool that executed arbitrary bash commands. Its agent got simpler and better at the same time: it had a 100% success rate instead of 80%.
Sponsored
Interested to learn how different LLMs perform for coding? New research [15] on models like GPT-5.2 High and Gemini 3.0 Pro reveals trade-offs in structural quality and security.