Research

566 findings · 10 beats
Research · everything Intel keeps

Everything Intel keeps, in one place — every brief we run, every department, readers' own, and every finding behind them. Browse below, or see the same body of work as a connected graph on the live map.

Share the archiveXLinkedInEmail

All coverage

Everything Intel has read, newest first. Each title opens at its original publisher.

  1. Dev Tooling & Infra

    Vercel ships a plugin for Moonshot's Kimi Code CLI as the K3 wave spreads through dev tooling

    When US infrastructure vendors start shipping first-party plugins into a Chinese lab's coding CLI, adoption has moved past benchmarks — worth watching if you are choosing a coding-agent stack.

    Vercel2026-07-17
  2. Dev Tooling & Infra✓ verified

    Patch now: CISA flags actively exploited Microsoft SharePoint and Fortinet FortiSandbox flaws

    If you run on-prem SharePoint or FortiSandbox, attackers are already exploiting these — patch before the weekend.

    CISA2026-07-16
  3. Dev Tooling & Infra

    VS Code 1.129 ships a dedicated agent host and an editor panel inside the Agents window

    The editor most developers use keeps reorganizing itself around agents — worth ten minutes to learn the new agent host before your team asks about it.

    Microsoft / VS Code2026-07-15
  4. Dev Tooling & Infra

    NVIDIA Jetson Thor: edge computers to run robot foundation models on-device

    The on-robot 'brain' is the bottleneck for putting large models into physical machines — running foundation-model inference at the edge is what lets a robot act without a round-trip to the cloud.

    NVIDIA2026-07-15
  5. Dev Tooling & Infra✓ verified

    Patch now: CISA flags an actively exploited Oracle E-Business Suite flaw that can take over Oracle Payments

    If your company runs Oracle E-Business Suite — especially Payments — this is exploited in the wild and reachable without credentials; patch before the weekend.

    CISA2026-07-15
  6. Dev Tooling & Infra✓ verified

    Patch now: record 570 Microsoft fixes, and CISA flags actively exploited AD FS, SharePoint, and SonicWall flaws

    If you run AD FS, SharePoint, or SonicWall appliances, these are known-exploited-in-the-wild — patch before the weekend, not after.

    CISA / Microsoft2026-07-14
  7. Dev Tooling & Infra✓ verified

    Dependabot now waits 3 days by default before proposing dependency updates

    A default-on cooldown is a supply-chain defense that reaches every repo using Dependabot — worth knowing whether you keep it or opt out.

    GitHub2026-07-14
  8. Dev Tooling & Infra

    Vercel now redacts Sensitive Environment Variable values from build logs

    If you deploy on Vercel, one of the easiest ways to leak a key — echoing it in a build step — is now masked by default.

    Vercel2026-07-09
  9. Dev Tooling & Infra✓ verified

    Meta ships Muse Spark 1.1 — its first coding model with an API

    Another credible coding-agent with open API access — more competition and portability for teams picking an AI coding tool.

    Meta2026-07-09
  10. Dev Tooling & Infra

    VS Code 1.128 ships multi-chat agent sessions, Copilot Vision (GA), and BYOK agent models

    The most widely used code editor just made parallel agent sessions and vision-attached chat mainstream defaults — a direct read on where day-to-day developer AI workflows are heading.

    Microsoft (VS Code)2026-07-08
  11. Dev Tooling & Infra

    Vercel widens access to its production agent — investigates incidents, fixes builds, reviews PRs

    This is the ops-facing version of the autonomous build loop — the same pattern AI Uni runs internally, now packaged for any team's production pipeline.

    Vercel2026-07-08
  12. Dev Tooling & Infra✓ verified

    JetBrains publishes a 105-task Kotlin benchmark for coding agents

    Nearly every public agent benchmark is Python. A language-specific, test-verified suite is the only honest way to know whether a headline score transfers to the stack you actually ship.

    JetBrains2026-07-08
  13. Dev Tooling & Infra

    Claude Code: subagents run in background by default + auto-open draft PRs; permission default now "Manual"

    If you drive Claude Code day to day, the defaults just changed: parallel subagents run in the background and can push branches + open PRs on their own, and the safer "Manual" permission default means you approve more actions explicitly — re-check any hooks or automation that assumed the old behavior.

    Anthropic (Claude Code changelog)2026-07-08
  14. Dev Tooling & Infra✓ verified

    Claude Code has been quietly running on Bun's Rust rewrite since mid-June — and almost nobody noticed

    The runtime under one of the most-used AI coding tools was swapped out in production across millions of devices without incident — 'boring is good' is what a successful large-scale rewrite looks like.

    Bun2026-07-08
  15. Dev Tooling & Infra

    Vercel ships Agent Runs into its MCP + CLI

    Surfacing agent-run traces through MCP + the CLI is the "agents observable inside your own dev tooling" pattern — directly relevant to AIU agent-orchestration + the observability lens.

    Vercel2026-07-03
  16. Dev Tooling & Infra✓ verified

    GitHub secret scanning adds a Supabase-credential detector that blocks the commit

    One of the most common AI-built-app failures is the database key shipped to the browser; free push protection on a public repo catches a class of that at commit time — but know which tier you're on.

    GitHub2026-06-17
  17. Dev Tooling & Infra✓ verified

    Anthropic Claude Security / codebase scanning (Project Glasswing)

    Security tooling from the platform AI Uni builds on — relevant to the three-skill security-review discipline and to the Anthropic Security Plugin install this session.

    Anthropic2026-06-02
  18. Dev Tooling & Infra✓ verified

    Researcher shows one malicious GitHub issue could hijack repos running Claude Code's GitHub Action

    CI/CD-embedded coding agents inherit the write access of the workflow they run in — treat any agent-triggering input (issue titles, PR bodies, comments) from an untrusted user as untrusted, patched or not.

    GMO Flatt Security (independent research)2026-06-01
  19. Dev Tooling & Infra✓ verified

    GitHub Copilot moves every plan to token-metered 'AI Credits'

    Usage-metered agent tooling makes cost track how hard your agents actually work — the same budgeting shift teams hit running their own multi-agent lanes.

    GitHub2026-06-01
  20. Dev Tooling & Infra✓ verified

    GitHub lets you assign a dependency alert straight to an AI agent to fix

    Dependency triage is fatigue-heavy toil an agent can genuinely take off your plate — as long as the merge stays a human decision.

    GitHub2026-04-07
  21. Dev Tooling & Infra✓ verified

    A poisoned npm package quietly rewrote a coding agent's memory — and it reloaded every session

    Treat any automatic edit to an agent's memory or instruction files as a reviewable event, not a silent auto-load — a single poisoned dependency can otherwise steer every future run.

    Cisco2026-04-01
  22. Dev Tooling & Infra✓ verified

    mem0 / agent-memory architectures maturing

    AI Uni's own memory-architecture work sits in this fast-moving category — the anti-evaporation problem the platform substrate solves.

    mem02026-04-01
  23. Dev Tooling & Infra

    KV-cache agent-state persistence: reported 89% better completion, 67% fewer calls

    If the effect holds, strong evidence for on-disk substrate-loading + persistence work. UNVERIFIED effect size — find the primary benchmark before citing the numbers.

    mem0 (vendor blog)2026-04-01
  24. Dev Tooling & Infra✓ verified

    Agent observability field: LangSmith vs Braintrust vs Langfuse vs Arize

    Informs deterministic-vs-LLM-judge layering. Braintrust's merge-blocking eval-action is a pattern to study — but LLM-judge stays post-hoc, never replacing deterministic CI gates.

    Braintrust / Latitude2026-03-15