NeonPioneers: independent reporting on AI, crypto, gaming, privacy, science and software.

We gave an AI agent root access for a week. It broke things.
● Field Report · AI

We gave an AI agent root access for a week. It broke things.

It shipped four working features, wiped a database once, and tried to email our landlord. A first-hand report from the edge of autonomy, and the exact guardrails that kept a bad week from becoming a disaster.

MAMarlowe Vane · Jul 27 · 5 min
// LatestAll stories
Three crypto breaches exposed the names and home addresses of about 250,000 customers. No coins were stolen, but the leaked data fuels phishing and, for large holders, physical 'wrench attacks'
Privacy

Three crypto breaches exposed the names and home addresses of about 250,000 customers. No coins were stolen, but the leaked data fuels phishing and, for large holders, physical 'wrench attacks'

Between 13 and 16 August, SafePal, Trezor's shipping partner ShipMonk, and Israel's Bits of Gold each disclosed data breaches, together exposing about a quarter of a million customers' names, phone numbers and physical shipping addresses. No wallets were drained and no keys were stolen. The harm is downstream: for the Bits of Gold cohort, whose national ID and bank details also leaked, identity theft and fraud; for many, convincing targeted phishing; and, for identifiable large holders, the physical 'wrench attacks' researchers say are rising. Two of the three breaches are linked to the same critical Metabase flaw, CVE-2026-72898.

Meta's child-safety trial is under way, and the states revealed what they will seek: about $200 billion
Privacy

Meta's child-safety trial is under way, and the states revealed what they will seek: about $200 billion

Opening statements in the 29-state case against Meta began on 18 August in Oakland. The headline moment was financial: after months of only Meta's $1.4 trillion worst-case figure being public, the state coalition signalled it could seek around $200 billion, roughly three years of Meta's after-tax profit. California's deputy attorney general told an eight-person advisory jury that Meta was built to 'hook the users, hold them, harvest their data, and then hide the truth.' Meta calls the claims unsubstantiated. Nothing is decided; this is the argument beginning, not ending.

The SEC cancelled its own crypto vote, then approved the proposal four days later. Here is what 'Regulation Crypto Assets' actually says
Crypto

The SEC cancelled its own crypto vote, then approved the proposal four days later. Here is what 'Regulation Crypto Assets' actually says

After cancelling a public meeting on 14 August, the SEC approved a crypto-offering proposal on 18 August through a seriatim vote, individual commissioners signing off outside any meeting. The real rule text is now public, and it differs from the pre-vote reporting: a tiered fundraising exemption up to $75 million, a $5 million startup path, and a safe harbour that turns on ceasing 'essential managerial efforts' rather than on decentralisation. It is a proposal, not law, with a 60-day comment window and adoption unlikely before 2027.

GTA 6 gameplay is leaking online before Rockstar's reveal, and the 'hack' behind it is tangled in a crypto scheme
Gaming

GTA 6 gameplay is leaking online before Rockstar's reveal, and the 'hack' behind it is tangled in a crypto scheme

Real-looking GTA 6 footage from an old build has been spreading since 18 August under the name CyberLeek, roughly nine days before Rockstar's official 27 August look. Take-Two's rapid takedowns suggest the clips are genuine, but there is no evidence anyone actually breached Rockstar's systems, the whole campaign is wrapped around a memecoin that was trading before the leaks went viral, and no source code has appeared. Here is what is confirmed and what is not.

LandSpace brought an orbital rocket booster home upright on solid ground, a feat that until now was essentially SpaceX's alone
Future

LandSpace brought an orbital rocket booster home upright on solid ground, a feat that until now was essentially SpaceX's alone

On 18 August, the Beijing company LandSpace landed the first stage of its Zhuque-3 rocket on land using landing legs, in what it says is the first time a Chinese company has done so. It joins a very short list of firms that can recover an orbital-class booster, but a booster that lands is not yet a booster that has flown again, and that is the harder test still ahead for LandSpace.

Poland calls the MyDr breach one of its largest ever, with nearly 19 million people potentially exposed
Privacy

Poland calls the MyDr breach one of its largest ever, with nearly 19 million people potentially exposed

A cyberattack on MyDr, a company whose software is used by more than 12,000 Polish medical facilities, may have exposed the personal and medical data of nearly 19 million people. The digital affairs minister called it one of the largest incidents in the country's history. Here is what officials have confirmed, what is still only claimed, and why a breach at one private vendor can reach so many patients at once.

// CryptoAll Crypto
The SEC cancelled its own crypto vote, then approved the proposal four days later. Here is what 'Regulation Crypto Assets' actually says
Crypto

The SEC cancelled its own crypto vote, then approved the proposal four days later. Here is what 'Regulation Crypto Assets' actually says

After cancelling a public meeting on 14 August, the SEC approved a crypto-offering proposal on 18 August through a seriatim vote, individual commissioners signing off outside any meeting. The real rule text is now public, and it differs from the pre-vote reporting: a tiered fundraising exemption up to $75 million, a $5 million startup path, and a safe harbour that turns on ceasing 'essential managerial efforts' rather than on decentralisation. It is a proposal, not law, with a 60-day comment window and adoption unlikely before 2027.

Bitcoin miners are turning to AI for the money. Riot's $9.1 billion lease is the clearest example yet
Crypto

Bitcoin miners are turning to AI for the money. Riot's $9.1 billion lease is the clearest example yet

Riot Platforms, one of the largest listed Bitcoin miners, has signed a 20-year lease worth about $9.1 billion to host a frontier AI lab at its Texas mining campus. Riot's filing does not name the tenant; CNBC and Bloomberg report it is Anthropic. It is one of the most concrete signs yet that miners are shifting toward AI, against a backdrop of collapsing mining margins and higher AI power bids, and it raises a real question about what secures the network as miners diversify.

// GamingAll Gaming
GTA 6 gameplay is leaking online before Rockstar's reveal, and the 'hack' behind it is tangled in a crypto scheme
Gaming

GTA 6 gameplay is leaking online before Rockstar's reveal, and the 'hack' behind it is tangled in a crypto scheme

Real-looking GTA 6 footage from an old build has been spreading since 18 August under the name CyberLeek, roughly nine days before Rockstar's official 27 August look. Take-Two's rapid takedowns suggest the clips are genuine, but there is no evidence anyone actually breached Rockstar's systems, the whole campaign is wrapped around a memecoin that was trading before the leaks went viral, and no source code has appeared. Here is what is confirmed and what is not.

Phantom Blade Zero sets a 29 October release date and shows its combat in a State of Play deep dive
Gaming

Phantom Blade Zero sets a 29 October release date and shows its combat in a State of Play deep dive

S-Game's dark wuxia action game Phantom Blade Zero now has a hard release date of 29 October 2026 (28 October in the US and select regions) on PlayStation 5 and PC. A dedicated State of Play detailed the combat: more than 30 main weapons plus 25 secondary Phantom Edges, three difficulty modes from Wayfarer to Sixty-Six Days, and martial-arts star Donnie Yen as Creative Consultant, playing a character through facial and motion capture.

GTA 6 is premiering its next trailer on Netflix, not YouTube. Here is when to watch, and why
Gaming

GTA 6 is premiering its next trailer on Netflix, not YouTube. Here is when to watch, and why

Rockstar will debut Grand Theft Auto VI: An Extended Look first on Netflix on Thursday 27 August at 3 p.m. ET, six hours before it reaches Rockstar's own YouTube channel and the Grand Theft Auto VI website at 9 p.m. ET the same day. You do not need a Netflix subscription to watch the later release, you only have to wait. The more interesting story is why one of the year's most anticipated game reveals is going to a streaming service first.

// PrivacyAll Privacy
Three crypto breaches exposed the names and home addresses of about 250,000 customers. No coins were stolen, but the leaked data fuels phishing and, for large holders, physical 'wrench attacks'
Privacy

Three crypto breaches exposed the names and home addresses of about 250,000 customers. No coins were stolen, but the leaked data fuels phishing and, for large holders, physical 'wrench attacks'

Between 13 and 16 August, SafePal, Trezor's shipping partner ShipMonk, and Israel's Bits of Gold each disclosed data breaches, together exposing about a quarter of a million customers' names, phone numbers and physical shipping addresses. No wallets were drained and no keys were stolen. The harm is downstream: for the Bits of Gold cohort, whose national ID and bank details also leaked, identity theft and fraud; for many, convincing targeted phishing; and, for identifiable large holders, the physical 'wrench attacks' researchers say are rising. Two of the three breaches are linked to the same critical Metabase flaw, CVE-2026-72898.

Meta's child-safety trial is under way, and the states revealed what they will seek: about $200 billion
Privacy

Meta's child-safety trial is under way, and the states revealed what they will seek: about $200 billion

Opening statements in the 29-state case against Meta began on 18 August in Oakland. The headline moment was financial: after months of only Meta's $1.4 trillion worst-case figure being public, the state coalition signalled it could seek around $200 billion, roughly three years of Meta's after-tax profit. California's deputy attorney general told an eight-person advisory jury that Meta was built to 'hook the users, hold them, harvest their data, and then hide the truth.' Meta calls the claims unsubstantiated. Nothing is decided; this is the argument beginning, not ending.

Poland calls the MyDr breach one of its largest ever, with nearly 19 million people potentially exposed
Privacy

Poland calls the MyDr breach one of its largest ever, with nearly 19 million people potentially exposed

A cyberattack on MyDr, a company whose software is used by more than 12,000 Polish medical facilities, may have exposed the personal and medical data of nearly 19 million people. The digital affairs minister called it one of the largest incidents in the country's history. Here is what officials have confirmed, what is still only claimed, and why a breach at one private vendor can reach so many patients at once.

// FutureAll Future
// ScienceAll Science
// SoftwareAll Software
// Tested, not guessedAll guides

The Frontier, every Friday

AI, crypto, privacy, gaming, science and software, decoded in five minutes. Free.

By subscribing you agree to receive The Frontier and to our privacy policy. No spam, unsubscribe anytime.