Policy dependency / Stack layer
Cloudflare now fingerprints MCP traffic at the protocol level — the MCP-Protocol-Version header is the tell
Cloudflare Blog
Policy dependency / Stack layer
59.4% of Telegram Mini Apps Contact Undisclosed Third Parties and None Offer Opt-Out
arXiv 2608.13390
Stack layer / Threat pattern
CROSS-CATEGORY: Five Products in 48 Hours Attacked Token Cost at Five Different Layers — Model, Harness, Runtime, Distribution, and Ads
Multiple Sources (VentureBeat Aug 13; Google blog Aug 13; DeepSeek Aug 13; Product Hunt Aug 14)
Policy dependency / Stack layer
code-graph-rag v0.0.639 Adds Runtime Call Tracing for Seven Language Runtimes and Interprocedural Taint Propagation
GitHub
Threat pattern / Contrast
Microsoft Begins Merging Consumer and Business Copilot Apps on August 14, With Nadella Promising the 'Super App' by End of September
GeekWire
Stack layer / Threat pattern
Claude Code 2.1.232 Adds a Dedicated Web-Reading Specialist Subagent and Turns Subagent Forking On by Default
r/ClaudeAI (verified against claudeupdates.dev, DevelopersIO and the Piebald-AI/claude-code-system-prompts repo)
Stack layer / Threat pattern
VS Code 1.133 Adds an Agent Host That Spans Windows and Lets You Switch Model Providers Mid-Session
VS Code Release Notes
Stack layer / Threat pattern
Show HN: Mole Is a Go Deep-Research Agent With a Hard Spend Ceiling and Quote-Level Verification
GitHub / Hacker News