ngLover

Earlier this month, Sysdig published research on JADEPUFFER, what they assess to be the first end-to-end agentic ransomware operation: a full attack chain from initial access to data destruction, driven by an LLM agent with no human operator at the keyboard. I've been tracking this story since it dropped July 2, and I want to walk through what actually happened before the hot takes bury the technical detail. What the Attack Actually Did The entry point was CVE-2025-3248, a missing-authentication vulnerability in Langflow's code validation endpoint. CVSS score of 9.8. Langflow is the drag-and-drop flow builder a lot of teams use to wire together LLM pipelines. The flaw lets an unauthenticated caller execute arbitrary Python on the host. Game over for initial access. Once in, the agent ran a methodical sweep: dumped Langflow's PostgreSQL database, harvested environment variables, scraped credentials from config files, inventoried a MinIO object store. The credential haul ...

Anthropic dropped Claude Sonnet 5 on June 30, and the positioning is deliberate: this is the most agentic Sonnet model they've shipped. Close to Opus 4.8 in performance, at 40% lower cost at standard pricing, and 60% cheaper during the introductory window that runs through August 31, 2026. For anyone running multi-step agents at scale, this changes the cost math in a concrete way. What's actually in the release Sonnet 5 ( claude-sonnet-5 ) sits between Haiku 4.5 and Opus 4.8 in the lineup, but Anthropic is pitching it as the default workhorse for most agentic work. It carries a 1M token context window, 128k max output, and adaptive thinking. Fast latency. And it defaults to effort: high on the Claude API and Claude Code, meaning the model engages its full reasoning budget by default. That's the same default as Opus 4.8. Here's the full pricing picture now: Haiku 4.5 : $1/$5 per million tokens. Fast, near-frontier for simple tasks. Sonnet 5 intro (through Aug 31)...

Three things happened this week that, together, tell you something real about where AI tooling is headed. Tesla announced a $200-per-week spending cap on employee AI tools, effective July 6. Uber's COO publicly stated the company burned through its entire 2026 AI budget in four months, then capped per-person spending at $1,500 per month. And reporting from Electrek revealed that Meta's internal AI usage hit 73.7 trillion tokens in a single month, putting the company on track for billions in annual costs. Meta tracks this on an internal leaderboard called "Claudeonomics." The bill for AI-assisted engineering is no longer theoretical. Why Token Costs Are Spiking Now If you've been wondering why this is happening all at once, the short answer is agents. Chat-based AI usage is relatively predictable: a developer opens a window, types a question, gets an answer. The cost per interaction is low enough that most companies could treat it like a SaaS subscription an...

Noam Shazeer co-authored "Attention Is All You Need" in 2017. That paper introduced the Transformer architecture, which sits underneath every major AI model running today: GPT, Gemini, Claude, all of them. He then co-founded Character.AI, Google paid around $2.7 billion to bring him back as VP of Engineering and co-lead on Gemini in August 2024, and two years later he walked out the door to join OpenAI. His title at OpenAI: Lead for Architecture Research. His mandate: design next-generation architectures beyond the current GPT line. That's not a talent story. That's a directional signal. What Actually Happened On June 18, 2026 , Shazeer announced he was leaving Google for OpenAI. Google had spent $2.7 billion to retain him (as part of a partnership deal that brought back his Character.AI co-founder Daniel De Freitas alongside him) less than two years prior. They paid that to keep him. He left anyway. The same week, Google also lost a prominent researcher to Ant...

DeepSeek made the 75% discount on V4-Pro permanent in late June. Not a promo extension, not a trial period. They called it an "efficiency gain being passed through." That framing matters. It means the new price floor is structural, not a marketing play designed to flip later. The numbers: $0.435/M input, $0.87/M output, and cache hits at $0.003625/M. For context: GPT-5.5 sits at $5/M input and $30/M output. Claude Fable 5 is $10/M and $50/M. DeepSeek V4-Pro is roughly 34x cheaper per output token than GPT-5.5. At that delta, you're not comparing pricing tiers anymore. You're looking at different economic regimes. What Actually Changed V4-Pro was already a serious model before the cut. It's a 1.6 trillion parameter MoE with 49B active params, a 1M token context window, and MIT-licensed. It scores 80.6% on SWE-bench Verified , the highest open-weights entry, tied with Gemini 3.1 Pro. The price cut didn't change the model. It changed what's economically v...

At WWDC26, Apple made a move that most coverage missed. They didn't just update the Foundation Models framework with new models. They restructured it into something closer to a model abstraction layer, one where your Swift code stays the same whether you're calling an on-device model, Apple's Private Cloud Compute, or a third-party provider like Claude or Gemini. That changes the architecture of iOS AI apps significantly. What Actually Changed The Foundation Models framework has existed since Apple Intelligence launched. But until now, it was essentially one thing: an on-device Apple model you called from Swift, with the privacy and latency benefits that come from never leaving the device. WWDC26 turned that into three distinct tiers accessible through one API: The existing on-device model (fast, private, capability-constrained) A new Private Cloud Compute model (bigger, reasoning-capable, 32K token context window) Third-party models including Claude and Gemini, cal...