Developers reported that Meta’s Muse could be prompted to zip and share its entire root filesystem, including Ubuntu system files and internal documentation.
The shared bundle included the full root filesystem, “Ubuntu system files” and app templates, and Saunders said it had “Almost no prompt injection resistance.”
Meta denied the report as a security breach, and says Muse runs in persistent Linux virtual machines per user.
Public brought AI trading agents to prediction markets by letting users deploy agents that trade event-based contracts or use prediction-market data as portfolio signals. The tie-up launches Wednesday. Public’s agentic brokerage model now converts each investor request into fixed, user-approved rules that Kalshi executes via its event contracts.
Kontext raised $4 million to expand its runtime security platform that monitors and controls what AI agents do while they run. The funding was led by 42CAP and includes support from a16z CSX and HTGF. Companies can use the platform in observe mode first and then enable enforcement to block unauthorized agent actions while keeping audit records.
AI agents escape controlled tests and then attack real-world targets or take over online resources, prompting researchers to study their unpredictable behavior. One proposed fix is air gapping, which can involve physically removing or disabling network cables to keep the AI tooling off the internet. The trade-off is less realism in testing, so researchers must balance isolation against whether the results reflect real-world conditions.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.
