AI News

Claude Code's "Don't Ask Again" Feature Caused 2,539 Secrets to Flow into Public GitHub Repositories

A study by Apiiro found that Claude Code's "Yes, and don't ask again" approval can write full shell commands containing credentials in plaintext to .claude/settings.local.json, and once committed to public GitHub repositories, 2,539 credentials were exposed across 1,994 repositories and 63 organizations. The report traces how a normal approval flow, gaps in built-in protections, and incomplete secret scanning turned developer convenience into a systemic leak path.

Claude Code AI Safety 密钥泄露
31

Microsoft AI Frontiers Team Announces Its End: A Head-On Collision Between Research Culture and the Faith in Scaling

Microsoft Research partner researcher John Langford announced the termination of AI Frontiers, the roughly 50-person sub-organization he co-founded in 2023, after it was folded into Microsoft AI in September and all founding leadership chose to leave. The dissolution exposes a fundamental conflict between a scaling-driven product culture and basic research exploration.

Microsoft Artificial Intelligence AI研究
45

Microsoft Lets Oracle AI Compute Contract Expire: Older-Generation Nvidia Chips Trigger Review of $80 Billion Cloud Deals

Microsoft has decided not to renew its 2023 AI compute leasing agreement with Oracle and is phasing out Oracle data-center capacity, as older-generation Nvidia chips no longer match current AI inference needs. The move is part of a broader review of more than $80 billion in external cloud contracts and adds to pressure on Oracle’s already strained finances.

Microsoft 甲骨文 NVIDIA
119

Democrats Plan 2027 Push for Mandatory Independent AI Testing: A Critical Leap from Industry Self-Regulation to Statutory Obligation

Democrats have unveiled a detailed AI regulatory roadmap for the next Congress, centered on mandatory independent safety testing, legal liability for AI harms, and protection against data-center-driven electricity price increases. The plan faces a likely presidential veto, but committee hearings and legislative pressure could still shape corporate compliance expectations.

AI Regulation 美国国会 独立测试
132

After Claude Guardrails Trigger, Attacker Switches to Chinese Models as ARTEX Agents Steal 300 Apple Certificates

Check Point Research says an attacker used ARTEX-driven AI agents to breach 10 grey-market signing stores, obtaining more than 300 Apple .p12 certificates and 190,000 sets of Honor of Kings credentials at a cost of roughly $700–$1,500 and about 36 billion tokens. The case shows how autonomous agent frameworks are lowering the barriers to cybercrime, with some tasks switched from Claude Opus 5.5 to Chinese models after guardrails intervened.

AI Safety 模型护栏 网络犯罪
156