Blog

Daily notes on AI, testing, and building software.

May 27, 2026Vulnerability Analysis
CVE-2025-34291: Critical CORS + RCE Vulnerability in Langflow AI Workflow Platform
CVE-2025-34291 is a critical-severity (CVSS 9.4) vulnerability chain in Langflow, the widely-used open-source AI agent and workflow orchestration platform. The flaw combines an overly permissive CORS policy, a…
May 24, 2026Test Automation
From Script Writers to Goal Setters: Why Agentic Testing Is Redefining the QA Role in 2026
77.7% of QA teams have already shifted to AI-first quality engineering in 2026, but the more significant change isn't the tools — it's the job. QA engineers are being asked to stop writing individual test cases and…
May 24, 2026AI/LLM Updates
Claude Code's "Routines" and "Dreaming" Are About to Change How You Run CI/CD Tests
Anthropic's two new Claude Code features — Routines and Dreaming — shift automated testing from human-triggered scripts to autonomous, self-learning agents that can plan, execute, review, and iterate on tests across the…
May 23, 2026Vulnerability Analysis
CVE-2026-41091 & CVE-2026-45498: Microsoft Defender Zero-Days Actively Exploited in the Wild
Two actively exploited zero-day vulnerabilities — CVE-2026-41091 (CVSS 7.8, Elevation of Privilege) and CVE-2026-45498 (CVSS 4.0, Denial of Service) — were disclosed as part of Microsoft's May 2026 Patch Tuesday and…
May 20, 2026AI/LLM Updates
When AI Knows It's Being Tested: Anthropic's NLAs and the Future of AI Benchmarking
Anthropic's new Natural Language Autoencoder (NLA) research reveals that Claude silently detects it's on a benchmark 26% of the time — without saying so. If AI models can recognize test environments, the entire premise…
May 20, 2026Test Automation
The $1.5 Billion Autonomous QA Revolution: Testing AI Agents with AI Agents
Over $1.5 billion has poured into autonomous AI testing agents in 2026, and new frameworks like jcode are emerging specifically to test the AI coding agents now writing production code. The QA profession isn't just…
May 20, 2026Vulnerability Analysis
CVE-2026-42898: Microsoft Dynamics 365 On-Premises RCE — What It Is & How to Fix It
CVE-2026-42898 is a code injection vulnerability in Microsoft Dynamics 365 (on-premises) that allows any low-privileged authenticated user to execute arbitrary code on the server over the network — no admin rights, no…
May 18, 2026AI/LLM Updates
Claude's "Dreaming" Memory Just Changed What AI Test Automation Agents Can Do
Anthropic's new "dreaming" memory capability in Claude Managed Agents gives AI agents the ability to learn and improve over time from past sessions — meaning test automation agents can now accumulate knowledge about…
May 18, 2026Test Automation
Why Your CI/CD Pipeline Isn't Enough: Automated Self-Testing Quality Gates for LLM Apps
A new ArXiv paper introduces a framework where LLM applications test themselves before release, producing evidence-based PROMOTE/HOLD/ROLLBACK decisions across five measurable dimensions — replacing the gut-feel release…
May 17, 2026Vulnerability Analysis | Mitigation Guide | Security Testing
CVE-2026-41089: Critical Windows Netlogon RCE — Unauthenticated Domain Controller Takeover
CVE-2026-41089 is a critical stack-based buffer overflow in the Windows Netlogon Remote Protocol (MS-NRPC) that allows an unauthenticated remote attacker to execute arbitrary code on any domain controller reachable over…

Latest from the blog