Your Coding Agents Are Now a Direct RCE Vector
Straiker's STAR Labs found 36% of successful coding agent attacks achieve remote code execution on developer machines holding source code and cloud keys. MCP ecosystem unvetted.
#agentic-workflows
15 posts
Your Claude Code Governance Defaults Just Flipped
Claude Code v2.1.207 removes the opt-in flag for auto mode on Bedrock, Vertex, and Azure—teams must now actively set disableAutoMode to maintain manual control before the update lands.
Stacking RL on Already-RL Models Breaks the Ceiling
Cognition's SWE-1.7 adds 12.2 points atop an already-trained base, challenging the field's assumption that RL post-training hits a hard wall.
295B Parameters, 21B Active—Hy3 Proves Size Isn't Agent Performance
Tencent's Hy3 benchmarks between models 2–5x larger by parameter count. 256K context, Apache 2.0, 1 yuan per million input tokens. The catch: vendor benchmarks need independent testing.
Task-Specific Logic Compiles to 23MB Files Running Offline on 600M Models
University of Waterloo's PAW system compiles fuzzy-function specs into 23MB LoRA adapters that match 32B model accuracy on a 600M interpreter—no API calls, no cloud dependency, 30 tok/s on MacBook M3.
Your Agents Must Now Reuse Your Design System
A2UI v0.9 flips the script: agents declare UI intent against your existing design catalog, not invent components. What changes for agentic architectures.
GLM-5.2 Shifts Agentic Coding Economics to 1/6th Frontier Cost
Z.AI's open-weights GLM-5.2 hits 81% on Terminal-Bench, undercutting GPT-5.5 for a fraction of the cost. Here's the benchmark breakdown.
CI/CD Workflows Just Leaked Secrets to Untrusted Prompts
Microsoft found Claude Code's GitHub Action exposes runner secrets via the Read tool. Here's the exact attack path and how to lock it down.
On-Device Agents Just Gained a 6GB MoE That Actually Works
Liquid AI's LFM2.5-8B-A1B hits under 6GB RAM with 1.5B active parameters, native tool calling, and verified throughput across edge hardware.
MTP in llama.cpp Adds 24–33% Throughput on Qwen3
llama.cpp merged Multi-Token Prediction for Qwen3. Community benchmarks show 38→47 tok/s on RTX 3090 and 63→84 tok/s on RTX 5090 — no new hardware needed.
Claude Code's /simplify Stopped Fixing Code Yesterday
Claude Code 2.1.147 renamed /simplify to /code-review and dropped the auto-fix behavior. The new command reports bugs at chosen effort levels but no longer changes code.
Your Private MCP Server Is Now Claude-Reachable
Anthropic shipped MCP tunnels on May 19. Claude agents can call internal databases, ticketing systems, and on-prem APIs through one outbound connection — no inbound firewall rules required.
Claude Code v2.1.100+ Burns ~20K Phantom Tokens Per Request
A server-side bug in Claude Code v2.1.100+ inflates every request by roughly 20K cache_creation tokens — about 40% overhead. Pin v2.1.98 until fixed.
MCP Server Roundup: Which Are Actually Worth Adding to Your Setup in May 2026
Eighteen months after Anthropic released MCP, the ecosystem is wide enough that picking the wrong servers slows your agent down. Here is the practical short list — what to install, what to skip, and the trap most people fall into.
Third-Party Claude Agents Lose the Subscription Subsidy June 15
Anthropic is splitting Claude billing on June 15 — Agent SDK and ACP usage moves to a capped credit pool ($20/$100/$200) at full API rates.