The Wire

Latest News

Every story across the Writeble desks, newest first.

223 stories

Stably AI Launches Orca: An Agent Development Environment for Running Fleets of Parallel Agents

Stably AI Launches Orca: An Agent Development Environment for Running Fleets of Parallel Agents

Stablyai launched Orca on July 12, 2026, as an open-source Agent Development Environment (ADE) designed for high-leverage builders. The platform allows developers to run multiple CLI coding agents like Claude Code, Codex, and Grok side-by-side, each isolated in its own worktree. It is written in TypeScript, licensed under the MIT License, and is available as a desktop application for macOS, Windows, and Linux.

4 min read
Critical Path-Traversal Vulnerability Patched in Telegram MCP Package

Critical Path-Traversal Vulnerability Patched in Telegram MCP Package

A critical security vulnerability tracked as CVE-2026-52830 was disclosed and patched in the fast-mcp-telegram package, affecting all versions up to 0.19.0. The flaw stems from improper validation of HTTP Bearer tokens, which are used directly to construct file paths to session files on disk. Attackers can exploit this path-traversal vulnerability using a crafted token to bypass authentication and gain full message and MTProto access to the default Telegram session.

4 min read
LangChain Releases OpenWiki: An Open-Source CLI to Automate Codebase Documentation for AI Agents

LangChain Releases OpenWiki: An Open-Source CLI to Automate Codebase Documentation for AI Agents

LangChain released OpenWiki, an open-source TypeScript CLI and AI agent that automatically writes and maintains documentation for software repositories. The tool scans a repository's file structure and git history to generate a dedicated, agent-friendly wiki directory. It includes a GitHub Action designed to run on a schedule, automatically updating the wiki based on git diffs from new commits.

4 min read
Together AI Secures $800 Million Series C to Scale Open-Source AI Infrastructure

Together AI Secures $800 Million Series C to Scale Open-Source AI Infrastructure

Together AI closed an $800 million Series C funding round on July 1, 2026, at an $8.3 billion post-money valuation. The round was led by Aramco Ventures, with participation from Vista Equity Partners, General Catalyst, Emergence Capital, Nvidia, March Capital, Pegatron, and SentinelOne's S Ventures. The company, which reports over $1.15 billion in annual bookings, will use the capital to scale its computing capacity and expand its open-source model hosting platform.

3 min read
Couchbase Releases AI Data Plane to Provide Persistent Agent Memory

Couchbase Releases AI Data Plane to Provide Persistent Agent Memory

Couchbase launched its AI Data Plane to serve as a unified, operational data foundation for enterprise AI agents. The new product provides persistent agent memory, a discoverable Agent Catalog, and an enterprise-supported, self-managed Model Context Protocol server. The architecture is designed to deliver low-latency, consistent context to agents at decision time, simplifying the transition of agentic workflows from pilot to production.

4 min read
Critical Security Flaw Patched in Joomla Helix3 Template Framework

Critical Security Flaw Patched in Joomla Helix3 Template Framework

Security researchers disclosed a high-severity improper access control vulnerability, tracked as CVE-2026-49049, in the Helix3 template framework extension for Joomla. The flaw allows unauthenticated remote attackers to delete arbitrary files, write arbitrary JSON files, and modify template parameters on exposed websites. The vulnerability affects Helix3 versions 1.0 through 3.1.1, and no official vendor patch is currently available from developer JoomShaper.

3 min read
Microsoft Defender CVE-2026-33825 Exploited in Active Ransomware Campaigns

Microsoft Defender CVE-2026-33825 Exploited in Active Ransomware Campaigns

CISA has updated its Known Exploited Vulnerabilities catalog to confirm that ransomware groups are actively exploiting a high-severity privilege escalation flaw in Microsoft Defender. The vulnerability, dubbed BlueHammer and tracked as CVE-2026-33825, allows local attackers to bypass access controls and elevate their privileges to SYSTEM level. The flaw was patched by Microsoft on April 14, 2026, but was leaked as a zero-day earlier that month by a disgruntled researcher.

4 min read
Security Flaws in Agentic AI Browsers Expose Users to Cyber Risks, University of Washington Study Finds

Security Flaws in Agentic AI Browsers Expose Users to Cyber Risks, University of Washington Study Finds

Researchers at the University of Washington evaluated seven popular agentic AI browsers and discovered that four of them expose users to significant cyber risks. The study demonstrated that ChatGPT Atlas, Chrome with Gemini, Claude for Chrome, and Perplexity Comet allow malicious sites to bypass the browser's fundamental same-origin policy. The team successfully executed a proof-of-concept prompt injection attack where a malicious webpage forced an AI agent to exfiltrate sensitive data from an embedded site.

4 min read
DarkMoon Launches Open-Source Autonomous AI Penetration Testing Platform

DarkMoon Launches Open-Source Autonomous AI Penetration Testing Platform

DarkMoon, an open-source automated penetration testing platform that orchestrates security assessments using AI agents, launched its initial release on June 29, 2026. The platform discovers open ports, fingerprints technology stacks, and dispatches specialized sub-agents to execute offensive security operations through a controlled Model Context Protocol interface. It is licensed under the GNU GPL v3.0 and supports OpenAI, Anthropic, OpenRouter, and local models via Ollama.

6 min read
Alibaba Qwen Team Launches AgentWorld to Simulate Multi-Agent Environments

Alibaba Qwen Team Launches AgentWorld to Simulate Multi-Agent Environments

Alibaba's Qwen team introduced Qwen-AgentWorld, a system capable of simulating seven different agent environments simultaneously, on June 26, 2026. The model learns how to operate inside an environment while also modeling the environment itself to accelerate agent training. The system is designed to produce more autonomous and robust AI agents by replacing real-world interactions with simulated training cycles.

6 min read
Anthropic Accuses Alibaba of Industrial-Scale Distillation Campaign to Extract Claude's Capabilities

Anthropic Accuses Alibaba of Industrial-Scale Distillation Campaign to Extract Claude's Capabilities

Anthropic claimed on June 26, 2026, that a large-scale operation using nearly 25,000 fraudulent accounts generated over 28 million interactions with its Claude model. The accounts allegedly analyzed Claude's reasoning, programming, and complex task execution capabilities to extract model behaviors. Alibaba has not publicly responded to the allegations, which highlight growing industry concerns over model capability theft and unauthorized extraction.

4 min read
Google Cloud Releases Open Knowledge Format to Standardize AI Agent Context

Google Cloud Releases Open Knowledge Format to Standardize AI Agent Context

Google Cloud announced the Open Knowledge Format (OKF), an open specification for representing knowledge using Markdown files with YAML frontmatter. The format provides a standardized structure for organizing and sharing AI-readable documentation, enabling vendor-neutral, interoperable knowledge exchange between AI agents and humans. The specification is designed to eliminate the need for custom RAG pipelines by allowing agents to natively parse, edit, and maintain structured markdown repositories.

6 min read
Google Labs' design.md Specification Surges on GitHub as Developer Demand for AI UI Tools Grows

Google Labs' design.md Specification Surges on GitHub as Developer Demand for AI UI Tools Grows

The google-labs-code/design.md repository, a Markdown-based specification, experienced a significant surge on GitHub, gaining 2,407 stars on June 27, 2026. It eliminates the problem of inconsistent UI generation by establishing a persistent format specification to communicate visual identity and design systems directly to AI coding agents. This momentum signals that the developer ecosystem is moving toward structured, machine-readable specifications to streamline agentic frontend development workflows.

4 min read
Linux Foundation Launches Akrites to Secure Critical Open Source Software

Linux Foundation Launches Akrites to Secure Critical Open Source Software

The Linux Foundation announced Akrites on June 25, 2026, a coordinated industry effort to harden critical open source software in the era of AI-assisted vulnerability discovery. The initiative establishes a shared Security Incident Response Team and a standardized Coordinated Vulnerability Disclosure process using common workflows and industry-standard tools. Founding members committing engineering talent and funding include Amazon Web Services, Anthropic, Google, Microsoft, OpenAI, and Red Hat.

5 min read
Meta Releases Astryx, an Open-Source React Design System Built for Human and AI Developers

Meta Releases Astryx, an Open-Source React Design System Built for Human and AI Developers

Meta released Astryx, an open-source React-based design system that is now in Beta. The system pairs StyleX styling with a CSS-variable theme cascade and includes a Command Line Interface (CLI) and Model Context Protocol (MCP) server for AI agents to scaffold and document user interfaces. Released under the MIT license, the codebase is written primarily in TypeScript and has been production-tested inside Meta for eight years.

4 min read