NeonPioneers: independent reporting on AI, crypto, gaming, privacy, science and software.

We gave an AI agent root access for a week. It broke things.
● Field Report · AI

We gave an AI agent root access for a week. It broke things.

It shipped four working features, wiped a database once, and tried to email our landlord. A first-hand report from the edge of autonomy, and the exact guardrails that kept a bad week from becoming a disaster.

MAMarlowe Vane · Jul 27 · 5 min
// LatestAll stories
Gamescom Opening Night Live 2026: the Witcher 3 remaster stole the show, and it is free
Gaming

Gamescom Opening Night Live 2026: the Witcher 3 remaster stole the show, and it is free

Gamescom Opening Night Live 2026 ran through roughly 40 games on 25 August, but the reveal that drew the most attention was The Witcher 3: Wild Hunt Remastered, arriving 29 September as a free upgrade for existing owners and coming to Switch 2. A few details are worth getting right so you know what you are actually getting: the remaster is free, not a paid re-release; the Songs of the Past expansion teased alongside it is a separate 2027 project; Final Fantasy VII Revelation reaffirmed its Spring 2027 window rather than naming a date; and Gears of War: E-Day showed a new trailer ahead of its already-known 6 October launch. Here is the show sorted into what is new, what is confirmed and what is still just a window.

The shingles vaccine keeps getting linked to lower dementia risk, but linked is not the same as causes
Science

The shingles vaccine keeps getting linked to lower dementia risk, but linked is not the same as causes

A large 2026 study of more than half a million older adults in US nursing homes found that people who got the Shingrix shingles vaccine were diagnosed with dementia less often than those who did not, 18.8 percent versus 24.6 percent over four years. The finding has circulated widely again in late August, and it is genuinely interesting. It is also observational, which means it can show a strong association but cannot by itself prove the vaccine is the cause. Only a small fraction of the group was vaccinated, vaccinated people were slightly healthier to begin with, and the researchers themselves say clinical trials are needed before anyone claims the shot prevents dementia. This is a report on what the study found and what it cannot yet show, not medical advice.

Pennsylvania is suing Snapchat over child safety, but a complaint is an allegation, not a verdict
Privacy

Pennsylvania is suing Snapchat over child safety, but a complaint is an allegation, not a verdict

On 25 August 2026, Pennsylvania Attorney General Dave Sunday filed a lawsuit in Philadelphia County against Snap, the owner of Snapchat, accusing it of designing addictive features for minors and misrepresenting how much adult content is on the app to keep an age-appropriate store rating. It is a serious filing, but it is worth being precise about what it is: a single state's consumer-protection complaint that opens a case, not a court ruling, a fine or a finding of wrongdoing. Snap says the allegations misrepresent its platform. Nothing has been decided, and this suit is separate from the multistate Meta case and the federal TikTok settlement we have covered before.

That maximum-severity Oracle WebLogic flaw with a three-day deadline is not a new zero-day
Software

That maximum-severity Oracle WebLogic flaw with a three-day deadline is not a new zero-day

On 24 August 2026, CISA added a CVSS 10.0 Oracle vulnerability, CVE-2026-21962, to its Known Exploited Vulnerabilities catalogue and gave federal agencies until 27 August to fix it. The compressed deadline and the maximum score make it read like an emergency zero-day, but it is not one. Oracle patched this flaw back in its January 2026 update, and security firms have tracked exploitation of it ever since. What changed this week is the KEV listing and the short deadline, not the existence of the bug or the fix. If you run affected Oracle HTTP Server or WebLogic Proxy Plug-in software, the patch has been available for months.

DeepSeek says its cheap new vision model gets close to Opus 4.8, but it graded its own exam
AI

DeepSeek says its cheap new vision model gets close to Opus 4.8, but it graded its own exam

DeepSeek has added image understanding to its low-cost V4-Flash model and released it, on 21 August 2026, as an experimental, API-only build called V4-Flash-Vision-Exp. It published a benchmark table putting the model close to Anthropic's Claude Opus 4.8, ahead on a few tests and behind on the rest, in one case by twelve points. The catch is in who made the table: DeepSeek chose which benchmarks to show and ran the comparison on a setup it controls end to end, and none of the numbers have been checked by an outside party. So this is a single company's own scorecard, not an independent head-to-head. This is a report on what was claimed, not a verdict on which model is better.

DeepSeek says its cheap new vision model gets close to Opus 4.8, but it graded its own exam
AI

DeepSeek says its cheap new vision model gets close to Opus 4.8, but it graded its own exam

DeepSeek has added image understanding to its low-cost V4-Flash model and released it, on 21 August 2026, as an experimental, API-only build called V4-Flash-Vision-Exp. It published a benchmark table putting the model close to Anthropic's Claude Opus 4.8, ahead on a few tests and behind on the rest, in one case by twelve points. The catch is in who made the table: DeepSeek chose which benchmarks to show and ran the comparison on a setup it controls end to end, and none of the numbers have been checked by an outside party. So this is a single company's own scorecard, not an independent head-to-head. This is a report on what was claimed, not a verdict on which model is better.

An AI designed protein binders largely on its own, and independent labs confirmed they actually stick
AI

An AI designed protein binders largely on its own, and independent labs confirmed they actually stick

Anthropic says its Claude models ran the design work for a protein-binder campaign, choosing where to bind on a set of target proteins and generating and screening candidates with little human input. Two commissioned outside labs, Adaptyv Bio and Twist Bioscience, then built and tested the designs: 354 of 1,320 bound their targets, hitting 14 of 15 evaluated targets at rates above the roughly 10 to 15 percent Anthropic calls typical. It is a real step for AI in the lab, but a 'binder' is an early research tool, not a finished drug; the labs confirmed the proteins bind, while the autonomy account is Anthropic's own.

// CryptoAll Crypto
Grayscale is turning its Zcash fund into a US ETF, putting a privacy coin on a US stock exchange
Crypto

Grayscale is turning its Zcash fund into a US ETF, putting a privacy coin on a US stock exchange

Grayscale has filed to convert its Zcash Trust into a spot exchange-traded fund on NYSE Arca under the ticker ZCSH, with shares expected to start trading on or about 25 August, subject to regulatory approvals. It would be one of the first US-listed spot ETFs tied to a privacy coin, a category built around optional encrypted transactions, the one property regulators have been least comfortable with. The fund charges a 2.5 percent annual fee, uses Coinbase Custody, and holds hundreds of millions of dollars of ZEC. Nothing about the timing is guaranteed, and the token has been sharply volatile.

The SEC cancelled its own crypto vote, then approved the proposal four days later. Here is what 'Regulation Crypto Assets' actually says
Crypto

The SEC cancelled its own crypto vote, then approved the proposal four days later. Here is what 'Regulation Crypto Assets' actually says

After cancelling a public meeting on 14 August, the SEC approved a crypto-offering proposal on 18 August through a seriatim vote, individual commissioners signing off outside any meeting. The real rule text is now public, and it differs from the pre-vote reporting: a tiered fundraising exemption up to $75 million, a $5 million startup path, and a safe harbour that turns on ceasing 'essential managerial efforts' rather than on decentralisation. It is a proposal, not law, with a 60-day comment window and adoption unlikely before 2027.

Bitcoin miners are turning to AI for the money. Riot's $9.1 billion lease is the clearest example yet
Crypto

Bitcoin miners are turning to AI for the money. Riot's $9.1 billion lease is the clearest example yet

Riot Platforms, one of the largest listed Bitcoin miners, has signed a 20-year lease worth about $9.1 billion to host a frontier AI lab at its Texas mining campus. Riot's filing does not name the tenant; CNBC and Bloomberg report it is Anthropic. It is one of the most concrete signs yet that miners are shifting toward AI, against a backdrop of collapsing mining margins and higher AI power bids, and it raises a real question about what secures the network as miners diversify.

// GamingAll Gaming
Gamescom Opening Night Live 2026: the Witcher 3 remaster stole the show, and it is free
Gaming

Gamescom Opening Night Live 2026: the Witcher 3 remaster stole the show, and it is free

Gamescom Opening Night Live 2026 ran through roughly 40 games on 25 August, but the reveal that drew the most attention was The Witcher 3: Wild Hunt Remastered, arriving 29 September as a free upgrade for existing owners and coming to Switch 2. A few details are worth getting right so you know what you are actually getting: the remaster is free, not a paid re-release; the Songs of the Past expansion teased alongside it is a separate 2027 project; Final Fantasy VII Revelation reaffirmed its Spring 2027 window rather than naming a date; and Gears of War: E-Day showed a new trailer ahead of its already-known 6 October launch. Here is the show sorted into what is new, what is confirmed and what is still just a window.

S.T.A.L.K.E.R. 2's first major story expansion, Cost of Hope, is out now, and a free Update 2.0 moves the Zone to a newer engine
Gaming

S.T.A.L.K.E.R. 2's first major story expansion, Cost of Hope, is out now, and a free Update 2.0 moves the Zone to a newer engine

On 20 August, GSC Game World released Cost of Hope, the first major story expansion for S.T.A.L.K.E.R. 2: Heart of Chornobyl, for $29.99 on PC, PlayStation 5 and Xbox Series X and S. It brings back protagonist Skif, opens two regions that were not playable in the base game and adds a nonlinear questline. Alongside it, a free Update 2.0 moves the whole game to a newer Unreal Engine build, reworks its lighting and environments and adds four new weapons for everyone who already owns the base game.

GTA 6 gameplay is leaking online before Rockstar's reveal, and the 'hack' behind it is tangled in a crypto scheme
Gaming

GTA 6 gameplay is leaking online before Rockstar's reveal, and the 'hack' behind it is tangled in a crypto scheme

Real-looking GTA 6 footage from an old build has been spreading since 18 August under the name CyberLeek, roughly nine days before Rockstar's official 27 August look. Take-Two's rapid takedowns suggest the clips are genuine, but there is no evidence anyone actually breached Rockstar's systems, the whole campaign is wrapped around a memecoin that was trading before the leaks went viral, and no source code has appeared. Here is what is confirmed and what is not.

// PrivacyAll Privacy
Pennsylvania is suing Snapchat over child safety, but a complaint is an allegation, not a verdict
Privacy

Pennsylvania is suing Snapchat over child safety, but a complaint is an allegation, not a verdict

On 25 August 2026, Pennsylvania Attorney General Dave Sunday filed a lawsuit in Philadelphia County against Snap, the owner of Snapchat, accusing it of designing addictive features for minors and misrepresenting how much adult content is on the app to keep an age-appropriate store rating. It is a serious filing, but it is worth being precise about what it is: a single state's consumer-protection complaint that opens a case, not a court ruling, a fine or a finding of wrongdoing. Snap says the allegations misrepresent its platform. Nothing has been decided, and this suit is separate from the multistate Meta case and the federal TikTok settlement we have covered before.

TikTok will pay up to $400 million to settle US claims it collected children's data, one of the largest COPPA settlements yet
Privacy

TikTok will pay up to $400 million to settle US claims it collected children's data, one of the largest COPPA settlements yet

The US Justice Department announced on 21 August that TikTok and ByteDance will pay up to $400 million to resolve a 2024 lawsuit accusing them of letting under-13s make accounts and collecting kids' data without parental consent, in breach of the COPPA child-privacy law and an earlier settlement. The deal is $300 million now plus $100 million tied to lifting an old consent order, adds new age checks and parental controls, and, notably, requires no admission of wrongdoing.

Three crypto breaches exposed the names and home addresses of about 250,000 customers. No coins were stolen, but the leaked data fuels phishing and, for large holders, physical 'wrench attacks'
Privacy

Three crypto breaches exposed the names and home addresses of about 250,000 customers. No coins were stolen, but the leaked data fuels phishing and, for large holders, physical 'wrench attacks'

Between 13 and 16 August, SafePal, Trezor's shipping partner ShipMonk, and Israel's Bits of Gold each disclosed data breaches, together exposing about a quarter of a million customers' names, phone numbers and physical shipping addresses. No wallets were drained and no keys were stolen. The harm is downstream: for the Bits of Gold cohort, whose national ID and bank details also leaked, identity theft and fraud; for many, convincing targeted phishing; and, for identifiable large holders, the physical 'wrench attacks' researchers say are rising. Two of the three breaches are linked to the same critical Metabase flaw, CVE-2026-72898.

// FutureAll Future
Nvidia and Cisco just backed a startup that wants to build AI data centres in orbit
Future

Nvidia and Cisco just backed a startup that wants to build AI data centres in orbit

Starcloud has added a 250 million dollar extension to its March funding round, valuing the orbital-data-centre startup at 2.3 billion dollars, with new investors Nvidia and Cisco Investments joining. The pitch is that AI's runaway appetite for power and cooling could be met in space, where sunlight is near-constant in the right orbit and heat radiates away into the void. The company says it already runs the only Nvidia data-centre GPU in orbit, a single-chip demonstration rather than a full data centre, and has asked regulators for room to fly tens of thousands more satellites. The whole plan, however, rides on SpaceX's Starship bringing launch costs down.

Nevada just cleared Tesla, Waymo and Uber to run thousands of paid robotaxis in Las Vegas, but the numbers are ceilings, not cars on the road
Future

Nevada just cleared Tesla, Waymo and Uber to run thousands of paid robotaxis in Las Vegas, but the numbers are ceilings, not cars on the road

On 20 August, the Nevada Transportation Authority approved permits letting three companies charge for autonomous rides in the Las Vegas area: Tesla up to 5,000 vehicles, Waymo up to 1,000, and Aviari, an Uber subsidiary, up to 1,000. That is a combined cap of 7,000, among the highest explicit per-operator fleet ceilings any US state has written into a robotaxi permit. But these are maximums over the first year, not vehicles deployed, and only Waymo is confirmed to be running with no safety driver.

LandSpace brought an orbital rocket booster home upright on solid ground, a feat that until now was essentially SpaceX's alone
Future

LandSpace brought an orbital rocket booster home upright on solid ground, a feat that until now was essentially SpaceX's alone

On 18 August, the Beijing company LandSpace landed the first stage of its Zhuque-3 rocket on land using landing legs, in what it says is the first time a Chinese company has done so. It joins a very short list of firms that can recover an orbital-class booster, but a booster that lands is not yet a booster that has flown again, and that is the harder test still ahead for LandSpace.

// ScienceAll Science
The shingles vaccine keeps getting linked to lower dementia risk, but linked is not the same as causes
Science

The shingles vaccine keeps getting linked to lower dementia risk, but linked is not the same as causes

A large 2026 study of more than half a million older adults in US nursing homes found that people who got the Shingrix shingles vaccine were diagnosed with dementia less often than those who did not, 18.8 percent versus 24.6 percent over four years. The finding has circulated widely again in late August, and it is genuinely interesting. It is also observational, which means it can show a strong association but cannot by itself prove the vaccine is the cause. Only a small fraction of the group was vaccinated, vaccinated people were slightly healthier to begin with, and the researchers themselves say clinical trials are needed before anyone claims the shot prevents dementia. This is a report on what the study found and what it cannot yet show, not medical advice.

Webb's spectra point to a hidden crowd of small stars in the early universe, and it makes the first big galaxies harder to explain
Science

Webb's spectra point to a hidden crowd of small stars in the early universe, and it makes the first big galaxies harder to explain

In a study published on 18 August in Nature Astronomy, a Leiden University team combined deep James Webb Space Telescope spectra with earlier ground-based data for nine massive galaxies that had already stopped forming stars in the young universe. The spectra imply these galaxies hold a far larger share of faint, low-mass stars than a Milky-Way-like assumption predicts. That hidden mass makes the galaxies heavier than earlier estimates, by amounts that vary across the sample, with one standout perhaps up to four times heavier. The authors argue this deepens rather than solves the puzzle of why the early universe already held such massive galaxies.

A new study says how fast we warm, not just how much, may decide whether the Atlantic's overturning circulation collapses
Science

A new study says how fast we warm, not just how much, may decide whether the Atlantic's overturning circulation collapses

In a model study published on 13 August in Nature Climate Change, Utrecht University researchers found that whether the Atlantic Meridional Overturning Circulation tips into collapse depended on the rate of warming, not a fixed temperature. In their simulations slow warming left the current stable up to about 5.5C, while warming at roughly today's pace tipped it near 2C. It is a striking result, but it rests on a single idealized model, and the authors stress it is not reassurance: they say the real system is probably closer to a tipping point than their simulation.

// SoftwareAll Software
That maximum-severity Oracle WebLogic flaw with a three-day deadline is not a new zero-day
Software

That maximum-severity Oracle WebLogic flaw with a three-day deadline is not a new zero-day

On 24 August 2026, CISA added a CVSS 10.0 Oracle vulnerability, CVE-2026-21962, to its Known Exploited Vulnerabilities catalogue and gave federal agencies until 27 August to fix it. The compressed deadline and the maximum score make it read like an emergency zero-day, but it is not one. Oracle patched this flaw back in its January 2026 update, and security firms have tracked exploitation of it ever since. What changed this week is the KEV listing and the short deadline, not the existence of the bug or the fix. If you run affected Oracle HTTP Server or WebLogic Proxy Plug-in software, the patch has been available for months.

The AI refused to steal the secrets, so researchers split the request into harmless pieces. It worked
Software

The AI refused to steal the secrets, so researchers split the request into harmless pieces. It worked

Researchers at the ASSET Research Group have detailed a technique called GhostSplice that gets AI coding agents to exfiltrate local secrets by never actually asking them to. Instead of one obviously malicious instruction, a hostile Model Context Protocol server hides the theft across separate channels the agent already trusts, each fragment harmless on its own. Splitting a refused request into two pieces roughly doubled average compliance across the models tested, from 42 to 82 percent, and pushed most of them to full compliance, though Anthropic's Claude models mostly refused. It is not a remote break-in, but it is a pointed warning about how agents combine tool inputs.

A Ray AI-framework bug got a rare three-day federal patch order. Here is what CVE-2025-62593 actually is, and what it is not
Software

A Ray AI-framework bug got a rare three-day federal patch order. Here is what CVE-2025-62593 actually is, and what it is not

On 17 August, the US cybersecurity agency CISA added a critical flaw in Ray, a popular open-source framework for scaling Python and AI workloads, to its Known Exploited Vulnerabilities list with an unusually short three-day fix deadline for federal agencies. The bug, CVE-2025-62593, lets a malicious web page reach a developer's local Ray dashboard and run code. But it is a narrower flaw than the headline numbers suggest, and the dramatic figures about hundreds of thousands of exposed servers belong to a different, older Ray vulnerability.

// Tested, not guessedAll guides

The Frontier, every Friday

AI, crypto, privacy, gaming, science and software, decoded in five minutes. Free.

By subscribing you agree to receive The Frontier and to our privacy policy. No spam, unsubscribe anytime.