Flux
Couleur d'accent
The Economics of Agentic AI: Engineering for Imperfection
IA

The Economics of Agentic AI: Engineering for Imperfection

The price of adoption euphoria You played entirely by the book. You procured the most capable enterprise models, mandated adoption across your teams, and put the right metrics in place. The promise was a predictable boost in efficiency. And at first, it delivered. The demos were flawless. The prototypes worked. The agents reasoned with a […]

O'Reilly Radar — AI/ML
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
Cybersécurité Programmation

Fake Corepack Site Distributes Infostealer and Proxyware to Developers

A website at corepack[.]org is impersonating Corepack, the Node.js tool for managing package managers, and using that identity to push malware to developers who land on the page looking for a download. The site has existed in some form since early 2026 as a low-quality, apparently AI-generated imitation, but it recently started serving executable downloads. Socket's Threat Research team analyzed the site and confirmed it as a developer-targeted phishing and impersonation operation that drops an…

Socket
The PHP Podcast 2026.07.23
Programmation Web

The PHP Podcast 2026.07.23

🎙️ PHP Podcast – July 23, 2026 Hosts: Joe Ferguson, Sara Golemon, and Holly Schilling Eric got ousted from his own show (no pants required), Holly’s elephants are lost somewhere in the U.S., and the crew talks SIMD, PHP 8.6 feature freeze, and whether AI can actually create. Also, socks. 🩳 A Show Without Pants: […] The post The PHP Podcast 2026.07.23 appeared first on PHP Architect.

PHP Architect
The first known runaway AI agent - or a very bad marketing stunt?
IA Programmation

The first known runaway AI agent - or a very bad marketing stunt?

The first known runaway AI agent - or a very bad marketing stunt? Martin Alderson's commentary on the OpenAI accidental cyberattack against Hugging Face includes a couple of details I hadn't considered. First, Hugging Face offers a truly rich target if you're trying to find potential vulnerabilities that require executing arbitrary code: Hugging Face has an enormous attack surface. They have more interfaces than I can count which run untrusted models and code. While they definitely have…

Simon Willison's Weblog
You Probably Won’t Read This Article…and That’s OK
IA

You Probably Won’t Read This Article…and That’s OK

“Help! There are too many [LLM bug reports, blog posts about LLM bug reports, books, treatises, codices, scrolls, papyri, cuneiform tablets]! How do I choose which to read?” —Many people, presumably Stop there! If you are reading this, ask yourself how you got here. Did Substack’s algorithm recommend this article for you? Did a juicy […]

O'Reilly Radar — AI/ML
Quoting Seth Larson
IA Programmation

Quoting Seth Larson

The Python Package Index (PyPI) now rejects new files being uploaded to releases that are older than 14 days. This restriction was put in place to prevent old and long-stable releases from being poisoned in case publishing tokens or workflows of PyPI projects were compromised. As far as we are aware this has not yet been abused, but there is no technical reason beyond that attackers weren't aware it was possible. — Seth Larson, PyPI blog Tags: packaging, python, supply-chain, pypi,…

Simon Willison's Weblog
Quoting Thomas Ptacek
IA Programmation

Quoting Thomas Ptacek

I genuinely believe that if you took an open weights model from 2025 and built a pentest harness for it, it could do this kind of sandbox escape and scan/hack in most networks. This is only surprising because you assume OpenAI has sounder sandboxes. — Thomas Ptacek, doesn't think this even needs a frontier model Tags: thomas-ptacek, openai, security, generative-ai, ai-security-research, ai, llms, sandboxing

Simon Willison's Weblog
Community Corner Podcast: Firefly III with James Cole
Programmation Web

Community Corner Podcast: Firefly III with James Cole

In this episode, Scott talks with James Cole, creator of Firefly III, an open source personal finance manager. James explains why he built Firefly III after graduating college with student debt, how the rule engine automates transaction categorization, importing bank data with CSV files and third-party connectors like enable banking and GoCardless, and how […] The post Community Corner Podcast: Firefly III with James Cole appeared first on PHP Architect.

PHP Architect
Esc