Research

Outgoing links are what a service claims. Incoming links are what actually happened. 👋 Hi, I'm Anton – a software engineer working mostly in PHP/Symfony and Go, currently carving a live PHP monolith into Go services. This block is about what a service is to everyone else: whose it is, who calls it, what it […]

The first useful question I asked about invoice automation was not “Can the model read an invoice?” It was “What happens when the same vendor sends its fiftieth invoice?” Reading one invoice is straightforward. The harder problem is context. A human reviewer remembers that a vendor normally uses a particular purchase-order format, stays within a […]

Giving AI Customer Support a Memory: Building SupportMind with Hindsight agents #ai #llm #python #hackathon Most AI customer-support systems can answer questions. But there is one frustrating problem: they often forget you. Imagine contacting support because your WiFi keeps disconnecting. You explain the issue, try several solutions, finally discover that updating your router firmware fixes […]

Google has made Gemini 3.8 Live with Live Avatar generally available in Gemini Enterprise. The release gives production conversational agents an on-screen avatar that generates video in near real time and synchronizes with Gemini's spoken responses. Combined with live voice and video understanding, it is designed to let agents see, hear and respond in more […]

Distributed transactions become interesting exactly when the happy path stops being reliable. A basic recharge implementation might look like this: charge card ↓ call recharge provider ↓ return success In a local test environment, that can appear perfectly adequate. Production introduces: duplicate requests; timeouts; delayed provider responses; asynchronous status updates; partial failures; process crashes; payment […]

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to arbitrary code execution when processing a maliciously crafted file. The […]

Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least

What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the components that matter, how to evaluate framework choices, and what runtime evidence proves an agent […]

The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24, used them to send fraudulent withdrawal commands to Bitget's wallet system. […]

RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy. The console stores what the malware collects from […]