8 briefs— one-minute reads, curated for senior frontend engineers.
Cloudflare's Block and "Block on pages with ads" controls now cover mixed-use crawlers such as Googlebot and Bingbot, while domains that had the legacy Block AI Bots toggle migrate to Search: Allow plus Disallow AI Training and keep search.
1 source
A preprint scan of 3,171 repositories finds 16% of AI coding-agent setups carry a security defect, with 9.8% installing unpinned MCP servers that run with your privileges.
1 source
OpenAI now offers zero data retention for eligible frontier-model API customers, so prompts and responses stay out of training and out of staff hands unless you opt in.
1 source
Wiz's autonomous Red Agent exploited a GitHub Actions script-injection flaw in Snowflake's repo and exfiltrated credentials, proof that AI can weaponize CI bugs and that co-author metadata can't pin the blame.
1 source
Opus 5 is the new default model in Claude Code at the same $5/$25 pricing as Opus 4.8, scoring within 0.5% of Fable 5 on CursorBench 3.2 for half the cost per task.
3 sources
AI-generated code gets higher marks than human code during review, but 82% of orgs hit production failures from it, 86% of senior devs spend more time fixing it, and a new term is born: agent debt.
2 sources
Apple's next-gen Foundation Models were built in collaboration with Google Gemini. Small Business Program developers get free cloud API access. Core AI framework lets you run full LLMs locally on Apple Silicon.
1 source
Google announced WebMCP, an open standard turning websites into agent toolkits, and built-in Gemini Nano in Chrome for on-device AI. Here's what the agentic web means for how we build and how users interact with our applications.
1 source