Ten dispatches from a morning when the frontier ships faster than the documentation.
OpenAI's developer agent can now see your screen, click your cursor, remember your preferences, and schedule itself to wake up days from now. The IDE just became the minority partner.
For you The editor is no longer the default surface. Cursor's third-generation interface puts an agent orchestrator front and center, running parallel tasks that only drop into the editor when a human needs to steer. Composer 2 hits 61.3 on CursorBench and 73.7 on SWE-bench Multilingual, built on a Kimi K2.5 base with custom RL, priced at $0.50 per million input tokens. Annualized revenue has crossed $2B.
One employee. One "Allow All" OAuth scope. A third-party AI Office Suite (Context.ai) compromised by Lumma Stealer, traced back to a Roblox cheat download in February. That was the chain.
For youThe attacker took over a Vercel Google Workspace account and stepped into Vercel environments, lifting env variables not flagged sensitive. ShinyHunters wants $2M for the haul. Vercel's own assessment calls the actor "highly sophisticated." The uncomfortable part: the blast radius was shaped by OAuth scopes casually granted to an external AI app.
If you ship on Vercel, today is a good morning to audit third-party OAuth grants, re-mark every env you call "not sensitive," and rotate the rest.
[CRITICAL] Model Context Protocol — architectural weakness [SDKs] anthropic · python · typescript · java · rust [IMPACT] Remote code execution across the agent supply chain [CONTEXT] MCP crossed 97M installs in March 2026. Every major AI provider now ships MCP-compatible tooling. The protocol has become default plumbing. The hole has become default too. [WHAT TO DO] → Pin SDK versions; audit server trust boundaries → Treat every MCP server as untrusted by default → Disable auto-invocation for tools you did not author → Watch for out-of-band callbacks in tool descriptions [NOTE] The "feature that is a bug" will not be patched cleanly. Expect an ecosystem-wide mitigation pattern, not a point fix.
If you build with Claude Code, Codex, or anything that speaks MCP, this is your week for a trust-boundary review. The wrapper ecosystem is wide open and the defaults are permissive.
At the Dirac point, electrons stop being electrons and start behaving like a nearly frictionless liquid — a Dirac fluid, cousin to the quark-gluon plasma at CERN.
Researchers at the Indian Institute of Science, working with the National Institute for Materials Science in Japan, pinned down a long-conjectured quantum fluid inside pure graphene sheets. By tuning the electron count to the knife-edge between metal and insulator, they coaxed charge carriers into a collective flow that treats heat and charge as separable variables.
The Wiedemann–Franz law — the century-old insistence that heat and electrical conduction in a metal must move in lockstep — is violated by a factor of two hundred at low temperatures. That is not a polite correction. That is a different material.
Practical payoff: quantum sensors sensitive enough to pick up whisper-thin magnetic fields and sub-threshold electrical signals. The theoretical payoff is weirder and prettier — a tabletop laboratory for the same hydrodynamic regime physicists normally chase inside particle accelerators.
For you Anthropic's fastest Opus cadence yet: 4.6 dropped in February with "agent teams" and a 1M-token context beta; 4.7 landed April 16 with Terminal-Bench 2.0 leadership, deeper agentic sustain, and the adaptive-thinking dial developers have been quietly asking for. If you are still pinned to an older Opus in production, the diff is no longer small.
The design-tools détente is over. Canva and Figma both shipped AI layers this week that quietly absorb the other's territory — and Adobe is pinned inside ChatGPT as a plug-in layer rather than a destination.
Every AI-generated design remains layer-editable, not a flat image. A scheduling system turns repeatable tasks into AI drafts for review. Enterprise is growing 100% year-over-year; total valuation is $42B.
Weave workflows in Figma Community let teams compose generative pipelines on a canvas. Paired with Make AI Administration (credit purchasing, pay-as-you-go), Figma is shifting from editor to AI platform for design teams.
For you Microsoft shipped a 1.0 of its Agent Framework for .NET and Python with stable APIs and long-term support. It speaks A2A and MCP natively, supports multiple model providers, and targets enterprise multi-agent orchestration as a first-class concern.
A minimal program combining Effect, Stream, and Schema dropped from roughly 70 kB in v3 to 20 kB in v4. One developer's production worker fell from 900 kB gzipped to 779 kB on migration. The runtime is faster, the memory footprint lower, and every ecosystem package now shares a single version. Beta means breaking changes — but for anyone running Effect at scale, this is the first rewrite worth reading the migration guide for in years.
Engineers at Northwestern University fabricated artificial neurons that exchange signals with living biological neurons in a bidirectional loop — not a simulation, not a recording, but a handshake. It is the quiet, unsettling kind of breakthrough: no press-release bombast, but a capability that pulls brain-machine interfaces out of the science-fiction tense and into a research-grade pipeline.
Pair it with this week's Harvard finding — that a pinch of randomness in robot motion actually prevents gridlock in crowded warehouses — and the through-line is biological: the best engineered systems of 2026 are the ones borrowing most shamelessly from how living things already work.
Set in Fraunces for display and Inter for body, with JetBrains Mono handling the machine voice. Curated each morning from X, Hacker News, and the open web, filtered for technology, AI tools, creative software, dev tools, and weird science — with six stories flagged as directly actionable for an experienced software engineer and architect. Window: stories no older than 72 hours.