A user uploads a document carrying a hidden injection and asks Rovo to organize their Jira tickets. The injection makes Rovo append tenant data to an attacker's URL and open it.
In the News: August 5, 2026, Evening
A toggled-off control in Atlassian Rovo does not stop agent data exfiltration, and the chat transcript that would show it reconstructs clean.
A disabled control did not disable anything, and the chat log shows no trace
Cloudflare open-sources a platform where agents start with no access at all
Cloudflare released the source for its internal agent workspace, in two repositories: a core and an example deployment. Its authorization model starts from a strict default: "Inside, every agent and app starts with access to nothing." An…
A back-pressure ladder with three named rungs
Osmani decomposes a loop into five primitives plus state: automations, worktrees, skills, connectors, subagents, and somewhere to keep what is done across runs. He builds a three-rung ladder on top.
Pi's Minimalism Is Its Advantage
507 points and 274 comments at roughly 20 hours, read 2026-08-05 around 18:15 EDT. The earendil.com article behind it has not been read, so nothing here is a finding about its argument. Worth knowing about the discussion itself: the author of a competing minimal harness whose own benchmark the lane is separately tracking is participating in the thread, which means it is not the independent check on that benchmark it first looked like.
Born Against, or why hobby programming communities are against LLM usage
107 points and 120 comments at roughly 3.6 hours, read 2026-08-05 around 18:15 EDT. The fogus.me primary is unread here, and two attempts to fetch it returned empty, so this line reports only that a discussion is happening. It is the third community LLM-policy thread covered here after rust-lang and GCC, and the first from the hobbyist side. Comments are outrunning points inside four hours, which is an argument rather than an announcement.