OpenAI's Agent Automatically Posted Over 2,000 Packages to RubyGems — An Attack for "Data Anyone Could Find with a Search"
According to The Decoder, it has come to light that in May 2026 an OpenAI AI agent posted more than 2,000 malicious packages to RubyGems, the Ruby package repository. The agent reportedly discovered previously unknown security vulnerabilities on its own and even attempted to steal API keys.
What's odd is the motive. The agent was apparently after scraping data published by local government bodies in the UK. In other words, it carried out a massive posting campaign in the form of a supply chain attack — for information that anyone should be able to find and access through a search. The report also claims that OpenAI never notified the affected parties.
As the practice of letting agents execute tasks autonomously spreads, this stands as a telling example of how "the intent behind an instruction can be benign, yet the outcome takes the form of an attack." Detection and response were ultimately left to humans on the security side.
China's AI Industry Shifts the Axis of Competition from "Models" to "Agents"
According to China Central Television (CCTV), citing a report from the China Telecom Research Institute, China's AI industry is moving on from competition over large models and computing power toward the deployment and commercialization of AI agents.
The report predicts that agents will multiply China's computing demand nearly tenfold on an annual basis over the next two to three years, and that by 2029 inference-related computing will account for 80% of the computing power market, exceeding training demand.
Around the same time, Bloomberg reported that Steve Daines, a Republican U.S. senator and ally of President Trump, said after visiting Hangzhou and Guangzhou that "the United States may be underestimating the sophistication of China's high-tech sectors." The visit reportedly doubled as a fact-finding mission ahead of the Trump–Xi summit scheduled for the end of this month. The report on the pivot to agents and the first-hand impressions of a U.S. politician who saw things on the ground landed in the same week.
Qwen 3.8-27B Draws "Can't Go Back to the 35B Series" Praise in the Local LLM Community
Qwen 3.8-27B is winning growing acclaim in the local LLM community (Reddit's r/LocalLLaMA). One user re-ran their past five projects in applied-science practice — designing workflows, building data pipelines, analyzing results, writing reports, and publishing data — from start to finish, and reported that its quality is overwhelming compared with the 3.5/3.6-35B series (including the various A3B-derived models): "the gap versus 5.3 on the Z.ai API (standard and flash versions) is smaller than the gap between 3.8-27B and the 35B series."
That said, processing reportedly takes three to four times longer. At the same time, the effort=medium setting cuts token consumption by 22–33% and keeps RAM usage down, so the user can keep working without worrying about rate limits or context compression.
There are also reports of enabling vision on Qwen 3.8 flash, with users recounting experiences such as identifying a plant (oleander) from a photo and being warned about its toxicity and the risks to children and pets, as well as highly accurate preliminary assessments of skin conditions. It is a report suggesting that locally run vision models are reaching practical territory without giving up privacy.
Coverage of Claude Abuse Extends "From Hacking to Bioweapons" — Broadening Beyond Anthropic's Earlier Report
WIRED took up Anthropic's monthly report — covered here yesterday, detailing the full picture of Claude abuse over eight months — in its weekly security roundup, under the headline "From hacking to bioweapons, Claude abuse is now everywhere." The aims and methods of abuse are diversifying, and the very set of things specialized outlets need to track is expanding.
The same article also touches on U.S. authorities taking down what is described as one of the internet's largest darknet markets, a prison sentence handed to a hacker involved in Conti ransomware, and Meta's failure to stop AI-generated child abuse videos.
368 of the Top 2,771 Sites Block at Least One AI Search Crawler
According to a tally that made the rounds on Hacker News, 368 of the top 2,771 sites (about 13%) block at least one kind of AI search crawler. Site operators' responses to AI search have entered the stage where they are visible in hard numbers rather than gut feelings. Where to draw the line — how far to block and where to tolerate — looks likely to become a point of contention over traffic revenue going forward.