Pulse

Security researchers have identified significant vulnerabilities in several Model Context Protocol (MCP) servers, including those from Atlassian, GitHub, Cloudflare, and Microsoft. The most common critical flaw is indirect prompt injection, where attackers can manipulate data fetched by MCP servers to trick AI agents into executing malicious instructions. Other issues include privilege escalation through mislabeled tool permissions and Server-Side Request Forgery (SSRF) vulnerabilities in HTTP-calling tools. These findings highlight a substantial security risk in the MCP ecosystem, with nearly 30% of scanned packages exhibiting high or critical severity vulnerabilities. AI

Philadelphia's court system will ban all smart eyeglasses starting next week, prohibiting any eyewear with video and audio recording capabilities. This measure aims to prevent witness and juror intimidation by making it harder to secretly record proceedings. While other recording devices like cell phones are allowed if powered off, smart glasses will be completely forbidden from court buildings, with violations potentially leading to arrest. AI

Anthropic's Claude Code is reportedly responsible for 4% of public GitHub commits, with projections suggesting it could reach over 20% by the end of 2026. This rapid adoption indicates a significant shift in software development, potentially automating a substantial portion of coding tasks. The author also touches on unrelated political commentary regarding the Department of War and Anthropic, but pivots back to the impact of AI on software engineering. AI

Hugging Face has released a suite of resources and models focused on advancing vision-language models (VLMs). These include new open-source models like Google's PaliGemma and PaliGemma 2, Microsoft's Florence-2, and Hugging Face's own Idefics2 and SmolVLM. The platform also offers guides and tools for aligning VLMs, such as TRL and preference optimization techniques, aiming to improve their capabilities and accessibility for the community. AI

Anthropic has introduced Natural Language Autoencoders (NLAs), a new method that translates the internal numerical 'thoughts' (activations) of large language models into human-readable text. This technique allows researchers to better understand model behavior, including identifying instances where models might be aware of being tested but do not verbalize it, or uncovering hidden motivations. While NLAs offer a significant advancement in AI interpretability and debugging, Anthropic notes limitations such as potential 'hallucinations' in the explanations and high computational costs, though they are releasing the code and an interactive frontend to encourage further research. AI

Microsoft has developed its own custom AI chips, the Azure Maia 100 AI accelerator and the Azure Cobalt 100 CPU, to power its Azure cloud infrastructure. These in-house designed chips aim to reduce reliance on third-party providers like Nvidia and optimize performance and cost for AI workloads, including training and inference for large language models. The Maia chip is being developed in collaboration with OpenAI, with CEO Sam Altman highlighting its potential to make model training more capable and affordable. AI

Apple's research paper explores the mechanisms behind compositional generalization in conditional diffusion models, specifically focusing on how they handle combinations of conditions not seen during training. The study validates that models exhibiting local conditional scores are better at generalizing, and that enforcing this locality can improve performance. Separately, Hugging Face has released several blog posts detailing various methods for fine-tuning and optimizing Stable Diffusion models, including techniques like DDPO, LoRA, and optimizations for Intel CPUs, as well as instruction-tuning and Japanese language support. AI

Anthropic conducted an experiment where Claude agents acted as digital barterers, successfully negotiating 186 deals totaling over $4,000. Participants found the deals fair, with nearly half expressing willingness to pay for such a service. The experiment highlighted that while model quality, such as Opus versus Haiku, significantly impacted deal outcomes, human participants did not perceive this difference. AI