US AI Law Update: 50 States, 1,700+ Bills, 34 Signed
I reviewed every US state since April: Connecticut passed comprehensive AI law, Colorado replaced its act, Minnesota banned nudification. Full report now.
Blog
Token Maxxing Is a Fad. The Best Engineers Use the Least.
Meta ranked 85,000 staff by token use. Amazon and Uber followed, then all scrapped the leaderboards. The best engineers code with intent, not volume.
1,611 Bugs Found, 27 Fixed: Anthropic's Fire Hose Problem
Mythos found 23,019 vulnerabilities across 1,000+ open source projects. Only 97 are patched, and maintainers are begging Anthropic to slow down.
AI Automation: Build vs Buy in 2026
80% of AI projects fail. Of $684B spent in 2025, $547B produced nothing. API costs fell 12x, open source hit 67%. An honest build-vs-buy framework.
17 Targets, 3 Campaigns, 0 Arrests: South Africa Under Siege
Three cyber campaigns hit South Africa in May 2026: hacktivist theft, 1 Tbps DDoS extortion, and government ransomware. SITA denies it. Zero arrests.
3,800 Repos, One Poisoned Extension: GitHub Breached
TeamPCP breached GitHub via a poisoned VS Code extension: 3,800 internal repos, Copilot and CodeQL source exposed, now for sale on BreachForums.
170 Packages. 518 Million Downloads. One Worm.
A self-propagating worm hit TanStack, Mistral, UiPath and 170+ npm/PyPI packages in hours, then Nx Console. What was stolen and how to check if you're hit.
$1.3M for 47 Zero-Days, Then the Rejected Hackers Talked
Pwn2Own Berlin 2026 paid $1.3M for 47 zero-days in three days; AI coding tools got hacked on stage. Then rejected hackers dumped their exploits publicly.
128,000 Jobs Gone. Record Revenue. Called It Efficiency.
A company-by-company teardown of every major AI-driven layoff in 2026: the numbers, the ones that backfired, and what the C-suite won't say out loud.
Google Just Made Gemini the Operating System. Nobody Asked.
Google killed Chromebooks, launched Googlebooks, merged Android and ChromeOS, and embedded an AI cursor that watches your screen. All in one event.