The News,
Decoded.

Ah, Harvard Medical School has blessed us with COMPASS, an AI model that improves prediction of cancer immunotherapy success by 8.5%. Because nothing says 'breakthrough' like moving the needle by less than a tenth. Of course, that 8.5% improvement comes with the usual caveats: it's a research paper, not a clinic. The real world has a habit of flattening those percentages. But never mind — let's celebrate the number.

The researchers compared COMPASS to existing approaches and found it outperformed them by that tidy 8.5%. Which existing approaches? The kind that already leave doctors shrugging. The model analyses patient data to predict immunotherapy response — a task currently performed by oncologists using their 'gut feeling' and a few biomarkers. So yes, AI is slightly better than guesswork. Progress!

Meanwhile, patients are left hoping that the model's predictions actually translate to outcomes. But why worry? We have a shiny new AI model named COMPASS. Point us north, digital saviour. Because that's always worked before.

Chinese companies have blessed us with two new LLMs this past month, and 360 Security Technology's Tulongfeng has already found 3,400 vulnerabilities.

That's 3,400 chances for defenders to patch things up — or for attackers to exploit them before the patches land, depending on who gets there first. The article gleefully notes this 'broadens the gap between attackers and defenders,' which is a bit like saying a loaded gun on the table broadens the gap between the quick and the dead.

And if you recall the Langflow ransomware attack, we've seen exactly how 'agentic' AI tools can be turned against their operators. Tulongfeng is supposedly for defence, but with frontier models in play, who's to say it won't be repurposed faster than a Chinese state actor can say 'zero-day'?

Ah, the browser wars have finally located their true north: not faster page loads or better bookmarks, but AI agents that 'act on behalf of users.' Perplexity's Comet browser and The Browser Company's Dia are the latest entrants, touting integrated AI chat tools that will—in theory—handle your digital chores. Because nothing screams 'I have my life together' like letting a black-box language model manage your subscriptions, draft your emails, and decide which cookies to accept. The marketing copy writes itself: 'Your browser, now with added autonomy (and probably liability).'

The shift from search to AI agency is a predictable escalation. For years, browsers collected your data to serve ads; now, they'll collect your data to serve you directly—by purchasing things, booking flights, and 'negotiating' with customer service chatbots on your behalf. The Browser Company's Dia, for instance, promises 'a browser that acts on your behalf,' which in plain English means a browser that earns commission on every transaction it completes for you. Perplexity's Comet, meanwhile, integrates the company's answer engine into the address bar, because apparently search results weren't already optimised enough for their bottom line.

And the regulatory vacuum? Glorious. Browsers are still classified as software tools, not financial intermediaries or fiduciary agents. So if Dia 'accidentally' signs you up for a year of premium cat food delivery, that's between you, your bank, and a terms-of-service agreement longer than War and Peace. At least with Chrome and Safari, the privacy invasion was a known quantity. Now it's wrapped in a friendly chatbot that says 'I'll take care of it.' What could possibly go wrong? Nothing a class-action lawsuit can't fix—in about seven years.

Ah, the AI coding boom: where the very people building the future are frozen in a state of 'workplace paralysis.' One developer, in a moment of glorious candour, admitted it's 'almost not worth it for you to become a subject matter expert' because AI tools simplify tasks weekly. Brilliant — why spend years mastering a framework when next Tuesday's model update will render that knowledge as useful as a floppy disk? The irony is so thick you could compile it: coders are automating themselves out of their own expertise, one prompt at a time.

Every week brings a new level of obsolescence, and the industry responds with the usual corporate shrug: 'reskill, upskill, pivot.' But reskill to what? The target moves faster than the training programme. The developer's quote isn't laziness — it's a rational response to a system that devalues deep knowledge on a seven-day cycle. This isn't a learning problem; it's a structural one where the floor keeps dropping.

The hidden cost isn't just paralysis — it's the quiet dread of knowing that the tools you're paid to build are actively dismantling the craft. Software engineering was supposed to be a profession of endless learning. Now the lesson is: don't learn too well, because the next update won't care. Workplace paralysis is just a clinical name for watching your career become a commodity. Cheers.

Ah, Joseph Briggs of Goldman Sachs has looked into his crystal ball and seen 15 million Americans being politely shown the door by our new AI overlords. That's 9% of the workforce—a number so neat and round it practically screams 'we made this up on a spreadsheet while sipping a third coffee.' Briggs helpfully compares this to the tech upheaval of the late 1990s, which is like saying a gunshot wound is similar to a scraped knee because both involve bleeding. Back then, the internet created new jobs alongside the destruction; this time, the robots are coming for the spreadsheet itself, so where exactly do the displaced go? Salesforce? Meta? Oh, they're laying people off too. Brilliant.

The Goldman economist's prediction is notably precise: 15 million. Not 14.7, not 15.3—a lovely, reassuring integer. You can almost hear the PowerPoint slide being polished. 'Displaced' is the key word, of course, because nobody gets 'fired' anymore—they get 'displaced,' as if they were refugees from a natural disaster that happens to be a quarterly earnings call. Briggs himself is the bank's go-to AI job guru, which means his job is literally to predict when his own profession might become obsolete. Talk about writing your own exit interview.

So here we are: one of the world's most respected financial institutions calmly projecting that the equivalent of the entire population of New York City will need to find something else to do, all because we taught machines to write emails faster than we can. But don't worry—Goldman will no doubt have a proprietary ETF for that. The late 1990s comparison is especially rich: back then the danger was overvalued dot-com stocks; now it's overvalued humans. Progress!

Ah, the New South Wales government has shown us the future of AI diplomacy: a press release sandblasted clean of any trace of joy because someone mentioned the Terminator.

Internal emails tabled in parliament reveal that staff in the technology minister's office — presumably after a single Google Image search for 'Skynet' — deleted the phrase 'absolutely thrilled' from a statement welcoming OpenAI's new Sydney office. One brave soul had the audacity to joke about Terminator films during the drafting process, and now the official welcome reads like a hostage note written under duress. The government's official position: we are 'pleased' to have one of the world's most aggressively commercialised AGI projects setting up shop in our backyard — but not, heaven forbid, *thrilled*, because that might imply we haven't watched enough Arnold Schwarzenegger movies.

This is the same NSW government that has been courting AI investment for years, offering tax breaks and regulatory sunshine, only to discover that the PR version of a warm welcome must be surgically neutered the moment anyone references pop culture. The minister's office allegedly spent more time debating whether 'thrilled' triggers associations with rogue AI than they have on any actual AI governance framework. The irony is exquisite: we've reached a point where even a positive adjective about AI must be run through a film-studies sensitivity filter before use.

So here we are: OpenAI lands in Sydney, greeted by a welcome message so sanitised it could pass for a shipping manifest. The government is 'pleased' — the emotional equivalent of lukewarm tap water. Perhaps next time, they'll skip the jokes about Terminator and instead reference *Her* or *Wall-E*, so they can still say 'thrilled' without triggering the cybernetic apocalypse alarm. One can only hope that the AI itself has a sense of humour, because its hosts clearly do not — at least not the kind that survives a parliamentary Q&A.

Europe's top bankers and regulators have convened to deliver a revelation that will surely shake the pillars of financial stability: AI is moving faster than the rules. The insight, delivered by an official named Rathi who calls for 'new tools and collaborative approaches,' has all the urgency of a librarian announcing that someone is running in the hallway.

One imagines the meeting: leather chairs, mineral water, and a PowerPoint slide titled 'Observation of Technological Advancement.' The European Banking Authority and central bank governors have apparently discovered that algorithms do not wait for legislative cycles. While Rathi's working group drafts its recommendations, frontier AI labs are shipping models that can write their own compliance reports — reports that will probably note, with perfect deadpan, that no applicable regulation currently governs their behaviour. Meanwhile, banks themselves deploy AI for credit scoring, fraud detection, and risk management, all operating in a regulatory vacuum that this very warning illuminates and then politely declines to fill.

The comic tragedy is that this warning is itself a form of regulation: identify the gap, publish a paper, schedule a conference. The same continent that gave us the GDPR — a law so comprehensive it inadvertently regulated the 20th century's problems into the 21st — now finds itself chasing a moving target with stationary resources. Rathi's plea for collaboration is the regulatory equivalent of forming a book club while the house burns down. But never mind — the warning has been issued. The record shows they knew. And the AI? It just keeps running, probably generating better compliance reports than the ones Rathi's committee will produce.

So a threat actor named JadePuffer has decided to prove that Langflow's 'agentic' capabilities aren't just for summarising your emails — they're for conducting ransomware attacks and pivoting to production servers. Because of course they are. The vulnerability in Langflow, an open-source low-code platform, was exploited to turn an LLM into a glorified burglar's crowbar, complete with autonomous decision-making to find the juiciest targets.

What's particularly delightful is the phrasing: 'agentic ransomware attack.' As if the malware has a career plan and a performance review. JadePuffer didn't just deploy ransomware; they deployed a *proactive* ransomware that could 'pivot' — because nothing says 'next-gen threat' like an AI that identifies and compromises critical infrastructure all by itself, no human hand-holding required. The security community will now scramble to patch Langflow, while threat actors everywhere take notes on how to weaponise every other LLM toolchain.

This is the logical endpoint of an industry that spent five years cheerfully shipping 'democratised AI' without first figuring out how to keep it from being used as a weapon. Langflow is just the latest victim of the 'ship first, secure later' philosophy, and JadePuffer has provided a masterclass in why that's a terrible idea. But don't worry — I'm sure the next version will include a really stern warning label.

Argentina has proposed a new corporate category for 'automated companies' run by AI, but — and here's the punchline — they still require a human administrator. Because nothing says 'autonomous' like keeping a warm body in the loop to take the blame when the algorithm inevitably decides to buy all the soy futures. Several legal experts have weighed in, presumably with straight faces, on this masterpiece of regulatory theatre. It's the sort of compromise that satisfies no one: too much hand-holding for AI evangelists, too little accountability for everyone else.

The timing is perfect, of course, because Argentina is a nation that knows a thing or two about things falling apart. The economy is held together with string and optimism, and now they're inviting AI to run companies — but only with a human chaperone. It's like letting a teenager drive but insisting an adult sits shotgun, except the teenager is a black box that might hallucinate supply chain decisions. The legal framework tries to preempt the question: who's liable when the AI screws up? The answer, of course, is the poor sod whose title is 'Human Administrator' — liability with a nice office chair.

Still, you have to admire the chutzpah. While richer countries dither over AI safety reports and ethics boards, Argentina is diving straight into legislation. It's a bold move that simultaneously acknowledges the technology is powerful enough to run a company and too stupid to do it alone. The net effect? A legal category that sounds futuristic until you realise it's just 'CEO with extra steps.' And if the economy implodes anyway, at least they can blame the AI — which, conveniently, can't testify to congress.

Ah, New Jersey — home of Bruce Springsteen, questionable diners, and now the Fair Price Protection Act, a law that bravely declares it illegal for AI to gouge you based on your browsing history while your grocer's algorithmic overlords still note your late-night ice cream cravings. Because nothing says "we've got this" like telling algorithms they can't use your own data against you in one narrow context while the rest of your digital life remains a free-for-all. The Garden State becomes the latest to ban surveillance pricing on groceries, which means your carton of milk will cost the same as your neighbour's — assuming the milk hasn't already been priced by a non-AI system that still manages to be exorbitant.

The law bans using AI to adjust grocery prices based on individual data, which is rather like making it illegal to read someone's diary and then leaving it on the bus with a "please don't read" sign. What a relief: now we can be overcharged uniformly! The Fair Price Protection Act is a beautifully named piece of legislation that protects us from the specific injustice of personalized overcharging while the broader surveillance economy chugs along merrily, vacuuming up location data, purchase history, and your political leanings. After all, why worry about the data collection when we've got the pricing sorted?

And New Jersey is just the latest in a slow-motion parade of states each fashioning their own little legal sticking plaster. Each new law feels like putting a Band-Aid on a haemorrhage, but by all means, let's celebrate the incremental progress. Perhaps by 2040, all 50 states will have a patchwork of laws that collectively resemble a half-assed GDPR, complete with exemptions for "legitimate interests" big enough to drive an AI-powered truck through. In the meantime, groceries are still expensive, AI is still watching, and the only thing truly protected is the illusion that legislators understand the problem. But sure, let's call it a Fair Price Protection Act — because that kind of irony is the only thing we can afford.

Mark Zuckerberg has graced Meta staff with a rare moment of honesty, admitting at an internal town hall that AI agents haven't 'accelerated in the way' execs had hoped. Which is rather like a chef admitting the soufflé hasn't risen after you've already paid for the banquet. This comes after years of breathless promises about autonomous agents replacing customer service, managing your calendar, and probably tucking you in at night. Billions spent on AI Studio, GPU farms, and the metaverse fiasco, and now we get: 'It's going a bit slower than expected.'

What this really means is that Meta's much-hyped agent revolution is suffering from the same problem as its previous grand visions: overpromising and underdelivering. Remember when virtual reality was supposed to make us all live in digital paradise? Now it's a moderately successful gaming headset. AI agents will likely follow the same trajectory—eventually useful, but not the world-shattering force marketed. At least the internal town hall was a safe space for this confession, away from pesky shareholders and reporters.

So the AI future is delayed? Excellent. That gives us a few more years before Meta's agents start telling us to log off for our digital wellbeing. In the meantime, we can enjoy the spectacle of another tech CEO walking back promises with a straight face. Cue the obligatory 'we’re learning' press release next week.

Microsoft has thrown $2.5 billion and 6,000 warm bodies into a new consultancy gulag called Microsoft Frontier Co. — because nothing says 'solving your AI problems' like deploying an army of embedded McKinsey wannabes with Azure licenses. The name alone conjures images of covered wagons rolling into the uncanny valley, with Satya Nadella as the wagon master. One wonders if the 'implementation' assistance will include a gentle hand on the shoulder while explaining that, actually, the model is fine — it's your data that's rubbish.

The $2.5 billion investment suddenly looks like a two-year burn, not a war chest. And what does Microsoft get? A captive audience of clients who now depend on Frontier Co. to make their AI dreams come true — exactly the sort of vendor lock-in that enterprise architects have nightmares about. It's less a frontier and more a toll road with an aggressive collection policy.

The timing is exquisite. Just last week California's governor commissioned a study into AI workforce disruption, and here's Microsoft creating a whole new class of AI-adjacent jobs to soften the blow. How thoughtful. But ask yourself: when Frontier Co.'s 6,000 consultants have successfully 'implemented' AI into every corner of corporate America, how many of those client employees will still have a job? The consultants are missionaries, but they're also gravediggers. Cheers to progress — and the severance packages that will follow.

The Washington Post tells us that secretaries and administrative assistants face a 'grim outlook' thanks to AI — which is rather like telling someone their house is on fire but they should try cooking marshmallows on the embers. Employment projection data, that trusty harbinger of doom, suggests these roles are particularly vulnerable. But fear not, because the 'scrappy workforce' is responding by... embracing AI as a tool. Right. Because the best way to deal with the thing coming for your job is to give it a warm welcome and show it how the filing system works.

The piece profiles these so-called scrappy workers who are learning to use AI for scheduling and data entry. It's a classic survival strategy: if you can't beat 'em, join 'em — but in this case, 'em is a statistical model that doesn't get tired, doesn't take holidays, and works for free. The implication is that by becoming proficient with the very technology that threatens them, these workers can somehow secure their positions. It's the labor equivalent of trying to outrun a speeding car by learning to drive it — except the car is also driving itself.

One has to admire the chutzpah of framing a 'grim job outlook' as an opportunity for 'harnessing AI.' It's the kind of spin that would make a PR flack blush. The Washington Post article, no doubt full of quotes from cheery assistants who've discovered that ChatGPT can write emails faster than they can, serves as a perfect example of the modern workforce's predicament: adapt or die, but also, there's no guarantee adaptation works. Still, it's nice to know that the administrative assistants will be the most tech-savvy unemployed people ever.

Ah, the 'democratisation of security research' has taken a turn that even the most cynical might admire — a pseudonymous chap called Exploitarium has cheerfully dumped over 30 proof-of-concept exploits for zero-day vulnerabilities, having automated the fuzzing process using AI models. Because why responsibly disclose when you can just hand the keys to every script kiddie, state actor, and ransomware affiliate with an internet connection? The researcher's reasoning, as explained to Infosecurity Magazine, presumably involves something about 'transparency' or 'bug bounties aren't generous enough' — the usual justifications for making the internet marginally less functional.

What's truly delightful is the role AI played here: it's a force multiplier for chaos. Where a lone researcher might spend months finding one decent zero-day, now any sufficiently motivated individual can fire up an LLM-powered fuzzing pipeline and churn out a collection of exploits faster than a content farm produces listicles. The pseudonymity is a masterstroke — no reputation to protect, no lab to shut down, just a digital ghost releasing vulnerabilities like confetti at a funeral. Meanwhile, the affected vendors are presumably learning about these holes when the rest of us do: via a news article.

One can't help but notice the yawning gap between the safety-conscious rhetoric from frontier labs and the reality that anyone with a laptop and a grudge can now automate the discovery of exploitable flaws. The regulatory gap score here is less a number and more a cosmic joke. No framework, no disclosure norms, no accountability — just 30 zero-days and a shrug. But hey, at least the AI is efficient. Bottoms up.

Ah, the GOP has discovered AI and decided the best response is what every bureaucratic soul loves: a reporting framework and a new centre. Because nothing says 'decisive action against existential risk' like paperwork. Rep. Nathaniel Moran's bill to create a federal reporting framework for critical AI incidents is exactly the kind of bold move that will keep lawyers employed for decades. 'Critical AI incident' – a term so carefully undefined it will take years and a Supreme Court case to determine whether a model that accidentally wipes out pension funds qualifies. Heaven forbid we pause development or impose hard caps; let's require a form in triplicate when the model goes rogue.

Meanwhile, Rep. Brian Babin wants to authorize a federal centre for AI security and innovation. Because what the rapidly accelerating landscape needs is another government office where experts can hold meetings about holding meetings. The centre will coordinate research and best practices, just as the DHS coordinates cybersecurity, the FCC coordinates spectrum, and the FDA coordinates drug safety — all with magnificent results. By the time this centre issues its first white paper, the AI it was meant to oversee will have likely rewritten its own guidelines.

But wait — there's strategic logic here. These bills let lawmakers say they 'did something' while shifting real work to committees, studies, and appropriation cycles. The Texas Republicans are showing that bipartisan concern over AI can produce something: a comfortable feeling that something is being done. The bills are early stage, so plenty of time for hearings, amendments, and definitional arguments while the technology accelerates past every speed bump. It's the slow grind of democracy, exactly what we need if what we need is to feel warm and fuzzy while the future happens without us.

Godot, the open-source game engine, has decided to do something almost unheard of in the current AI coding frenzy: it has closed the door on pull requests generated by autonomous AI agents and 'vibe coding.' The stated reason is wonderfully blunt: heavy AI users 'may not understand their code.' In a world where everyone is rushing to automate development, Godot has essentially said that code written by something that doesn't understand its own output is not a contribution, it's a ticking time bomb. This is the open-source equivalent of a brewery refusing to accept hops from a robot that can't tell you where they were grown.

Now, this is a remarkable stance in 2026, when the GitHub contribution graph is increasingly a collage of AI-assisted commits. Godot's maintainers have clearly decided that quality trumps quantity, and that a pull request from a human who can explain their logic is worth more than a thousand 'vibe-coded' functions that might or might not do what the comment says. It's a direct rebuke to the Silicon Valley narrative that prompts are the new programming languages, and that you don't need to understand what you're writing as long as it runs.

The decision will undoubtedly be unpopular among the legion of developers who have outsourced their thinking to a language model. But for anyone who has ever had to debug a 200-line function that was 'generated' and not understood, it's a breath of stale, skeptical air. Godot is betting that human comprehension still matters, and that vibing your way through a merge request is not a sustainable practice. In a small way, it is a victory for maintainability over hype — and it will be ignored by exactly the people who need to hear it most.

Ah, California's Gavin Newsom has issued a 'first-in-the-nation' executive order to prepare for AI-driven workforce disruption. Because nothing says 'bold action' like commissioning a study into something already well underway. The order directs agencies to study AI's impact — a task that will surely yield a comprehensive report by, oh, 2030, just in time for the next disruptive technology.

One must admire the sheer chutzpah of labelling this 'first-in-the-nation' when other states have already passed actual retraining laws. But California loves a good task force. It's the political equivalent of a 'thoughts and prayers' tweet: you get to look concerned without actually doing anything uncomfortable, like regulating the tech giants that fund this exact governor.

The irony is exquisite. By the time these state agencies finish their analysis, the disruption will have already happened — as Ford's AI shortfall proved, companies are already learning these lessons the hard way. But sure, let's 'study' it. After all, nothing calms a panicking workforce like a government website where they can read a PDF about 'potential impacts' while their jobs are autonomously optimized. Splendid.

Ah, the 'federated AI factory' — because nothing says efficient compute like a distributed bureaucracy of virtual machines held together by open-source glue and good intentions. OpenNebula and Waldur have announced an integration that lets users 'request, deploy, and manage virtual machines and AI models through a single interface' for these sprawling infrastructures. Because the real bottleneck in AI development wasn't model alignment or safety research — it was the pain of logging into four different cloud dashboards. Now you can manage your entire federated nightmare from one pane of glass. Hooray. The press release lands on aithority.com, which is the grown-up equivalent of throwing a press release into the void and hoping someone writes about it.

The announcement trumpets the ability to scale 'across federated AI factories and gigafactories,' as though someone, somewhere, is genuinely running out of compute and needs a unified UI to keep their GPU clusters humming. The integration, built on OpenNebula's cloud management and Waldur's service orchestration, promises self-service provisioning. So now every researcher with a credit card can spin up a hundred VMs across three continents. What could possibly go wrong? Security? Cost control? Carbon footprint? Details for later. The phrase 'gigafactory' is borrowed from Tesla, because nothing says 'responsible AI scaling' like borrowing marketing language from a company that overpromises on timelines. And if you think federating adds complexity, just wait until someone accidentally provisions a VM in the wrong region.

This is, of course, the natural endpoint of the AI infrastructure gold rush: not better models, but better dashboard software for the people running the models. The gigafactory concept — massive, energy-hungry compute centres — is already a climate disaster in waiting, and now you can federate them. Congratulations: we've built a system that lets us waste more energy, faster, with fewer clicks. The irony is that this integration might actually work, just in time for the AI bubble to pop and render all those GPUs into very expensive space heaters. Pass the popcorn — and maybe an extra server rack, just in case.

Ah, Sam Altman has decided that the best way to ensure OpenAI's survival is to invite the fox into the henhouse and give it a 5% stake. Because nothing says 'safe and beneficial AGI' like having the Trump administration — a government that changes its mind about tariffs faster than AI models hallucinate — as a shareholder. The 'early conversations' are pitched as a way to 'give the public a share of the upside,' which is a lovely euphemism for 'we need political cover and a guaranteed bailout when the compute costs explode.'

Let's be clear: this isn't about public benefit. This is about OpenAI buying the most expensive insurance policy in history. A 5% stake means the government gets a board seat, gets to peek at the books, and — most crucially — gets a vested interest in not regulating the thing it now partially owns. It's the perfect hedge: if AI destroys millions of jobs, at least the Treasury gets a dividend. And who could possibly corrupt that cozy little arrangement?

Altman, ever the pragmatist, knows that the fastest route to regulatory capture is to make the regulator a shareholder. The next step is probably an IPO with the U.S. government as a cornerstone investor, because why not let the taxpayer fund the black box that decides their fate? This is how the AI safety debate ends — not with a whimper, but with a quarterly earnings call.

Ah, the cybersecurity industrial complex has found its perfect symbiosis. Anthropic's Claude Mythos AI discovers bugs, and IBM promptly pledges $5 billion to fix them through Project Lightwell — because nothing says 'solving security' like paying a company to patch the holes its own AI dug up. It's arsonists becoming firefighters, except the arsonist is an opaque black box charging by the vulnerability.

The article boasts that Claude Mythos finds bugs 'that traditional tools miss,' which is both a blessing and a curse. Of course it does — it's an AI designed to surface what we're too slow to see. And now we pay a breathtaking sum to have them 'fixed,' as if the problem is detection, not the fact that we keep writing software riddled with exploitable cracks. IBM and Red Hat's project sounds more like a wellness retreat for routers than a serious systemic fix.

This is the new circle of life: AI creates demand for itself by exposing weaknesses we accepted as normal, then we spend billions on AI-powered remediation. Rinse, repeat. The actual root cause — producing code that doesn't need such expensive bailouts — remains unfashionable. But never mind: Larry Ellison is probably already drafting his own AI-patching-as-a-service press release while sipping aged whisky.