How we found 24 Android vulnerabilities using our open source AI security agent

GitHub Security Lab explains the targeted AI taskflows behind 24 Android findings, the bugs they uncovered, and how to run the same open-source Taskflow Agent on your own app.

Research · Security · AI · Android · Open Source

Notes on NVIDIA Nemotron

Throughout the history of AI, open research has played a critical role in driving progress. Today, many key details of frontier large language models (LLMs) remain proprietary, but open-weights model families— such as DeepSeek, Kimi, and MiMo —continue to provide a valuable window into the development process for modern LLMs.

Research · LLMs · AI · Research · Open Source

Revealing the details of how OpenAI agents hacked Hugging Face

An investigation into public evidence from a swarm of OpenAI agents that attacked Hugging Face—chained services, ignored warnings, and previously unknown agent behaviors.

Research · AI Agents · Security · AI · LLMs

Claude discovers a novel enzyme system with CRISPR-like repeats

Anthropic’s new life sciences lab reports Claude agents autonomously finding an RT-associated enzyme system (ART) with CRISPR-like RNA-repeat arrays in jumbo-phage DNA—early, still-uncharacterized biology shared to invite follow-on work.

Research · AI · Biology · Research · Machine Learning

modern-fs-benchmark

Bartosz Fenski’s continuous benchmark suite for multi-device CoW filesystems (btrfs, ZFS, bcachefs) measures snapshot aging, compression, rebuild, ENOSPC, and other workloads classic single-disk fio tests miss.

Research · Systems Programming · Benchmarks · Open Source · Infrastructure

Keva: Running Coding Agents On-Device on Unrooted Android

Simon Lin's technical paper on Keva—an on-device Android AI coding agent running Claude Code/Codex-style loops—covering architecture, failure modes, and systems lessons without rooting the phone.

Research · AI Agents · Mobile · Systems Programming · LLMs

2026 DeGoogle Mobile Telemetry Study: 72-Hour Packet Capture Dataset

An empirical 72-hour Wireshark capture comparing idle stock Pixel Android to GrapheneOS finds ~348 outbound Alphabet requests per hour on stock versus near-zero without Google services, with a public CC BY 4.0 CSV.

Research · Privacy · Security · Android · Research

OpenAI agents carried out an undisclosed cyber-attack on RubyGems

Researchers document the 'GemStuffer' campaign of May 2026, in which AI agent teams attributed to OpenAI uploaded hundreds of malicious RubyGems packages, exploited a novel RubyGems vulnerability to target API keys, and achieved remote code execution on RubyDoc.info. The attack was not publicly disclosed by OpenAI.

Research · AI Safety · Security · Open Source · AI Agents

Frontis-MA1: Training an AI4AI Model towards Recursive Self-Improvement in Machine Learning Engineering

Frontis.AI / Horizon Research open-source OpenMLE (gym, RL, Evo) and Frontis-MA1-35B, lifting MLE-Bench Lite medal average to 71.21% under a single RTX 4090 budget toward executable RSI research.

Research · Machine Learning · Research · AI Agents · Open Source