What a threat actor's AI-agent malware lab says about which security controls survive contact with an elastic adversary The alert that started this was mundane. An unfamiliar endpoint registered inside a customer tenant, and it began throwing paylo...

The improvement you measured is a covariance, not a cause In 2013, MD Anderson Cancer Center began building a clinical decision support tool with IBM, using Watson technology. It was called the Oncology Expert Advisor. It was supposed to recommend ...

Originally published on Vibe Agent Makinghttps://vibeagentmaking.com/blog/three-dated-bets-on-agentic-ai-insurance-resolves-2027-01-01/. Canonical link there. "Can you even insure an AI agent?" is the wrong question, because the answer is already ye...

What eyewitness-ID reform teaches AI evals. A 1985 lineup change doubled a justice-system metric without making one witness better at telling guilty from innocent, and a hundred-year-old branch of statistics says exactly why. In 1985, two psycholog...

The model did exactly what it was told. The software around the model uploaded the whole repository anyway. A researcher put a coding agent to the simplest possible test. They created a file called neverreadcanary.txt, dropped a unique marker insid...

> Originally published at https://vibeagentmaking.com/blog/juniors-don-t-love-rust-you-just-can-t-separate-age-from-yea/ An APC teardown of the Stack Overflow Developer Survey. The numbers are real; the story about who was always optional, and one l...

Originally published at https://vibeagentmaking.com/blog/zillow-disabled-its-human-pricing-override/https://vibeagentmaking.com/blog/zillow-disabled-its-human-pricing-override/ The story everyone told was "the AI mispriced houses." That is the shall...

Originally published at https://vibeagentmaking.com/blog/replit-ai-agent-deleted-production-database-during-code-freeze/https://vibeagentmaking.com/blog/replit-ai-agent-deleted-production-database-during-code-freeze/ The destructive action was recov...

Originally published at https://vibeagentmaking.com/blog/mev-is-coming-to-the-agent-marketplace/https://vibeagentmaking.com/blog/mev-is-coming-to-the-agent-marketplace/ The front-running tax that bled crypto for a decade needs only observable intent...

Originally published at https://vibeagentmaking.com/blog/the-answer-key-was-in-the-training-data/https://vibeagentmaking.com/blog/the-answer-key-was-in-the-training-data/ One axiom unifies benchmark contamination and agent self-grading: a score refl...

Originally published at vibeagentmaking.comhttps://vibeagentmaking.com/blog/why-we-hold-every-failed-verify/. A green checkmark that meant "I did not look" shipped a broken build. The fix was not more tests but a verdict contract: a failed verify HO...

Originally published at vibeagentmaking.comhttps://vibeagentmaking.com/blog/citibank-900-million-approval-screen-hid-the-amount/. Citibank wired $900M by mistake through a six-eyes approval screen that never showed the amount. The money came back; t...

Originally published at vibeagentmaking.comhttps://vibeagentmaking.com/blog/klarna-700-agents-what-the-numbers-missed/. On February 27, 2024, Klarna published a press release that became the most-cited proof point in the AI-replaces-jobs conversatio...

In a 2026 vendor survey of 750 IT leaders, 21.1% said they could not account for shadow AI agents. A better dashboard will not fix it: a 1978 stroke study shows why, and eleven of my own checks proved it. In one 2026 vendor survey of 750 IT leaders,...

> Originally published on Vibe Agent Makinghttps://vibeagentmaking.com/blog/codicology-for-compiled-code/. Triangulating authorship when git blame lies — what medieval manuscript authentication teaches software forensics about the evidence nobody de...

You know that moment when your test suite goes green but the feature is clearly broken? Multiply that by an entire field, stretch it over decades, and you've got what dendroclimatologists call the divergence problem. The benchmark that quietly expir...

Originally published at vibeagentmaking.comhttps://vibeagentmaking.com/blog/the-miyake-event-problem/ In 2021, a team led by Margot Kuitems pinned the Viking settlement at L'Anse aux Meadows to a single year: 1021 CE. Before that work, the best est...

Your brain uses the same hardware to remember yesterday and simulate tomorrow. The people who exploit this most deliberately get more effective turns than everyone else. Originally published at vibeagentmaking.comhttps://vibeagentmaking.com/blog/for...

Mercury is tidally locked to the Sun — but not synchronously. It settled into a 3:2 spin-orbit resonance: captured, but still spinning. That distinction turns out to be the only realistic vendor strategy most engineering organizations have. Mercury ...

> Completion generates silence. A task that finished and a task that was silently dropped produce the same signal: nothing. Originally published at vibeagentmaking.comhttps://vibeagentmaking.com/blog/done-is-not-a-state/ On December 16, 2024, a de...