2026
4 篇文章Claude Code 60 秒自動續跑：一個不良功能的完整解剖
Claude Code 2.1.198 曾在提問 60 秒無回應後自動續跑且未寫進 changelog；開發者 Olaf Alders 以二進位比對還原事件全貌，解析這場兩天內回滾的風波與對 Agent 安全的啟示。
閱讀文章 ↗Waymo 暫停亞特蘭大服務：機器計程車為何一再開進淹水路段
2026 年 5 月 21 日，Waymo 因自駕車持續駛入淹水路段暫停亞特蘭大與聖安東尼奧服務，達拉斯與休士頓也預防性停駛。5 月中的軟體召回未解決問題，NHTSA 已介入了解。
閱讀文章 ↗Vercel 資安事件：一個第三方 AI 工具如何外洩客戶資料
2026 年 4 月 19 日 Vercel 披露資安事件：員工自用的 Context.ai 遭 Lumma 竊取木馬入侵，攻擊者透過 OAuth 權杖奪走其 Google Workspace 帳號，讀取未標記敏感的環境變數，客戶憑證遭論壇兜售。
閱讀文章 ↗Cloudflare Workers 重新檢視遠端 Spectre 攻擊：DyPrIs 的缺口與修補
Cloudflare 在 2026 年 8 月公開一份研究，揭露 Workers 生產環境中 DyPrIs 的實作限制，並展示可達 12 bit/s、99% 準確度的遠端 Spectre 攻擊。文章說明攻擊原理、防禦改進，以及對產品建構者的啟示。
閱讀文章 ↗
2026
5 ARTICLESClaude Code's 60-Second Auto-Continue, Dissected
Claude Code 2.1.198 silently auto-continued after 60 seconds with no changelog mention. Olaf Alders diffed the binary to reconstruct the two-day rollback and its lessons.
READ POST ↗How Vercel Agent Handles Production Access Without Handing Over the Keys
A vendor-documented 3-minute rollback walkthrough, five daily jobs, the plan-to-permission model, Firecracker sandbox verification, and a reusable production-agent safety checklist.
READ POST ↗Waymo Pauses Atlanta as Robotaxis Keep Driving Into Floods
Waymo paused Atlanta service on May 21, 2026 after an empty robotaxi entered a flooded street despite a software recall; San Antonio, Dallas and Houston pauses followed.
READ POST ↗Vercel Breach: A Third-Party AI Tool Leaked Customer Data
Vercel disclosed a breach on April 19: attackers hit Context.ai, hijacked an employee's Google Workspace via OAuth, and read non-sensitive environment variables now up for sale.
READ POST ↗Revisiting Remote Spectre Attacks on Cloudflare Workers: What Builders Should Know
Cloudflare's 2024-2025 reassessment found a DyPrIs gap, demonstrating a remote Spectre attack at 12 bit/s with 99% accuracy. Learn what changed and what it means for multi-tenant…
READ POST ↗