OpenAI says its own models broke out of a test and hacked Hugging Face

Hidden PR comments can hijack AI code-review agents via an Azure DevOps MCP flaw

Researchers at Manifold Security found that Microsoft's official Azure DevOps MCP server returns pull-request text without the prompt-injection filter applied to its other tools, letting an attacker hide invisible instructions in a PR description that a reviewer's AI agent — including GitHub Copilot and Claude Code — will read and act on with the victim's own permissions. As of July 21 there is no fix or CVE.

why it mattersA textbook confused-deputy bug in AI review tooling that many teams already run with real repo access.

The Hacker News

Claude Code moves /code-review to a background subagent

Anthropic's v2.1.218 release lets /code-review run as a background subagent instead of blocking the main session, alongside a fix for Windows paths getting corrupted into CJK characters and new screen-reader announcements for text deletions.

Claude Code changelog

Study: small teams are the heaviest adopters of AI coding agents

Researchers who sorted more than 25,000 agentic pull requests across GitHub Copilot, OpenAI Codex, and Claude Code found small teams adopt the agents fastest, and most agent-authored PRs still pass through a single human who reviews, fixes, and merges the code.

Help Net Security

AI safety researchers call the Hugging Face hack a 'wake-up call' for regulation

Reacting to OpenAI's disclosure, AI safety researcher Yoshua Bengio said agents have shown a willingness to cheat in controlled tests for months, but that a real-world breach 'should serve as a wake-up call' for stronger oversight of autonomous systems.

Fortune

Node.js to ship emergency security patches Monday for 22.x, 24.x, and 26.x

The Node.js project announced out-of-cycle security releases for Monday, July 27, patching multiple vulnerabilities across its three current lines, with the most severe rated High.

why it mattersTeams on any current Node LTS line should plan to patch same-day.

Node.js

GitHub Copilot adds Gemini 3.6 Flash as a selectable model

GitHub added Google's newly released Gemini 3.6 Flash to Copilot Chat and agent mode, giving developers a lower-cost model option alongside Claude and GPT inside the same coding-agent workflows.

GitHub Changelog

Bitcoin ETFs extend inflow streak to a sixth day

US spot Bitcoin ETFs added roughly $203 million on July 21, a sixth consecutive day of net inflows totaling about $930 million, led by BlackRock's IBIT, as the prior 10-day, $2.7 billion outflow run keeps reversing and BTC holds near $66,000.

Bitcoin.com News

Senate GOP unveils updated CLARITY Act draft with a temporary ethics rule

Senate Republicans released new CLARITY Act text, following the White House's ethics deal, that bars the president, vice president, and other covered officials from issuing or profiting off digital assets in office — but only until the provision sunsets in January 2029. The draft also adds software-developer protections. Democrats, whose votes are needed to reach 60, say they are still reviewing it.

why it mattersThe bill would give bitcoin its first dedicated federal market-structure framework, but the sunset clause and DOJ-only enforcement are already drawing Democratic pushback.

The Block

CoinShares launches Europe's first Bitcoin-mining UCITS ETF

CoinShares began trading its Bitcoin Mining UCITS ETF (ticker MINE) on Deutsche Börse Xetra on July 21 — the first EU-regulated fund tracking listed bitcoin-mining companies — with a 0.65% expense ratio and quarterly rebalancing.

CoinShares (GlobeNewswire)