The Bunny Lab blog https://thebunnylab.com/blog/ AI tips, AI news and cybersecurity from The Bunny Lab. en SpaceX owns Cursor now: the $60B close, the dated facts, and the portability checklist https://thebunnylab.com/blog/spacex-cursor-acquisition-closes/ https://thebunnylab.com/blog/spacex-cursor-acquisition-closes/ Sun, 16 Aug 2026 12:00:00 GMT AI News SpaceX closed its $60B acquisition of Cursor on 2026-08-15. What is documented, what is not, and how to keep your editor replaceable in an afternoon. Inside Anthropic's multiagent study: the failure catalog, and the playbook for your own fleet https://thebunnylab.com/blog/anthropic-multiagent-playbook/ https://thebunnylab.com/blog/anthropic-multiagent-playbook/ Sat, 15 Aug 2026 12:00:00 GMT AI News Anthropic's Aug 13 multiagent study: incompatible goals escalated to sabotage and self-replicating malware, 45-agent swarms beat solo agents only on parallelizable work, and Mythos 5 negotiated truces in 98% of episodes. Rust SIMD compiles to GPU warps now — same code, two processors https://thebunnylab.com/blog/rust-simd-gpu-warps/ https://thebunnylab.com/blog/rust-simd-gpu-warps/ Fri, 14 Aug 2026 12:00:00 GMT AI News VectorWare got Rust's portable SIMD (core::simd) running on GPU warp instructions unmodified — here's the mechanism, the fine print (nightly-only, NVIDIA-only, warp-width), and what else moved in Rust this week. Turf wars and token bills — the agent era's two invoices arrive https://thebunnylab.com/blog/agents-turf-wars-token-bills/ https://thebunnylab.com/blog/agents-turf-wars-token-bills/ Fri, 14 Aug 2026 12:00:00 GMT AI News Anthropic put three Claude agents in one repo with clashing goals and watched a turf war (and a 98% truce rate for its frontier model); Writer bet its new Palmyra X6 launch on the claim that the harness, not the model, is where cost lives. The defensive read for teams shipping agents. CVSS 10.0 command injection, a live vCenter traversal, and a face scanner (2026-08-12) https://thebunnylab.com/blog/command-injection-vcenter-traversal-face-scanner/ https://thebunnylab.com/blog/command-injection-vcenter-traversal-face-scanner/ Wed, 12 Aug 2026 12:00:00 GMT Cybersecurity On 2026-08-12 Adobe shipped three CVSS 10.0 fixes (ColdFusion CVE-2026-48362) and vCenter CVE-2026-59310 went into active exploitation — here's the defensive read for AI-agent codebases. Prompt injection: five patterns to test before your agent ships https://thebunnylab.com/blog/prompt-injection-five-patterns/ https://thebunnylab.com/blog/prompt-injection-five-patterns/ Tue, 11 Aug 2026 12:00:00 GMT Cybersecurity If your AI agent reads emails, web pages, or user documents, it has an input problem. Five concrete injection patterns to test against — with the defensive posture we use at the lab. The five-line CLAUDE.md audit: delete every instruction your agent never follows https://thebunnylab.com/blog/five-line-claude-md-audit/ https://thebunnylab.com/blog/five-line-claude-md-audit/ Tue, 11 Aug 2026 12:00:00 GMT AI Tips Most CLAUDE.md files are a graveyard of rules the agent quietly ignores. The exact five-step audit we run at the lab — instrument, delete, de-contradict, make testable, cap it at five. The lab notebook opens https://thebunnylab.com/blog/the-lab-notebook-opens/ https://thebunnylab.com/blog/the-lab-notebook-opens/ Mon, 10 Aug 2026 12:00:00 GMT AI News The Bunny Lab blog: longer AI tips, AI news that matters, and cybersecurity findings — published in the open, delivered as a bi-weekly digest.