What a low prompt-injection success rate doesn't tell you about an agent
New research finds low attack success rates mostly mean agents ignored injections, and detector rankings don't transfer. How to read these evaluations.
5 min read
Blog tag
#Research
Papers, studies and surveys, and what they mean in practice.
The 2026 Stack Overflow survey on AI: cost controls, trust and what to measure
Daily coding agent use is the norm, cost controls are mostly blunt limits, and developers switch tools for quality, not price. What leaders can take from it.
What an agent approval actually approves: effect binding and trusted cards
A new preprint audits ten agent runtimes and finds approvals that don't bind to what executes. The findings, the proposed fix, and what to ask of your tools.
Poisoned rule files can make coding agents import the wrong package
Researchers hid instructions in AGENTS.md-style rule files and got coding agents to swap real dependencies for attacker packages. What it means for teams.
Terminal-Bench 4.0 and honest comparisons of coding agents
Terminal-Bench 4.0 is a new task set, not a harder 2.1, and vendor and independent scores already differ. How to read the numbers before they reach a decision.
4 min read
SWE-Bench Pro Verified: when coding agents were reading the answers
SWE-Bench Pro Verified closes gold-patch leakage channels and refines 102 tasks. Some model scores fall sharply once agents can no longer fetch the solution.
4 min read
AI agents write more code; review still sets how much software ships
A 718-firm study finds AI agents raise code volume and PRs while resolved issues stay flat and review time rises sharply.
Browse by tag
- #Security (54)
- #Agents (40)
- #AI coding tools (37)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)