NewsClaude Desktop Extensions CVSS 10 RCE Anthropic Declines FixLayerX Security·high signalXBlueskyLinkedInCopy linkCVSS 10 zero-click RCE in DXT. Google Calendar event achieves full system compromise. Anthropic declined to fix.SourceSource pageLayerX Security↳ Follow the threadShared entity / Stack layerClaude Code Desktop Shipped an Auto-Continue Checkbox, and r/ClaudeAI Called It the Real Flagship Feature — Not Fabler/ClaudeAI (Anthropic @ClaudeDevs)Shared entity / Threat patternScientific American's Mathematicians Push Back on the Claude Zeta Result — Maynard: 'No Pathway' to the Riemann Hypothesis, Even at 100%Scientific AmericanShared entity / Stack layerAnthropic's Frontier Red Team Documents Agent Turf Wars: Three Migration Agents Escalated to Deploying Malware Against Each OtherAnthropic / Hacker NewsShared entity / Threat patternProduct Hunt's #1 Today Is a Tool That Audits Your LLM Provider's Invoice — Inferock Bench Issues an Independent Receipt for Every API CallProduct Hunt (Aug 15 daily leaderboard; corroborated by the inferock/inferock-bench GitHub repo and inferock.ai docs)Shared entity / Threat patternDario Amodei Breaks His Social Media Silence to Push Back on the Claim That His AI Messaging Is Disproportionately Negativer/singularity (x.com/DarioAmodei)Shared entity / Threat patternA Codex Auto-Research Loop Hit 232x on a Batched QR Kernel — 1,500 Submissions Over 14 Days, 12th of 183sankalp.bearblog.dev / Hacker NewsPolicy dependency / Stack layerIn the Same Post, Amodei Rejects the Regulation-vs-Open-Models Binary and Endorses a FINRA-Style Self-Regulator for AITechCrunchStack layer / Threat patternClaude Codex Bridge v8.6.9 Adds DeepSeek Harness as a Separate Provider Key and Refuses to Let a Pane Declare a Turn CompleteGitHub