HN Daily | May 22, 2026
AI agents find 10,000+ vulnerabilities, Japanese conglomerates profit from AI memory boom, and open-source tools reshape development workflows.
Today's tech landscape is dominated by AI's dual role as both a security threat and an economic force. Anthropic's Project Glasswing reveals AI's offensive capabilities, while Japanese manufacturers like Toto ride the AI memory boom. Meanwhile, a wave of new open-source tools—from KanBots to Deno 2.8—is reshaping how developers work with AI agents.
AI & Machine Learning
Project Glasswing: An Initial Update — Anthropic's collaborative security initiative has found over 10,000 critical vulnerabilities across essential software using Claude Mythos Preview. Partners like Cloudflare report bug-finding rates increased by 10x, signaling a paradigm shift where AI outpaces human vulnerability discovery.
Antigravity 2.0 Tops the OpenSCAD Architectural 3D LLM Benchmark — A practical benchmark comparing AI models on generating parametric CAD code for the Pantheon finds Google's Antigravity 2.0 leading. The test reveals how well LLMs handle spatial geometry—a skill increasingly relevant for AI-assisted design.
DeepSeek makes the V4 Pro price discount permanent — DeepSeek slashes V4 Pro pricing by 75%, making it one of the cheapest high-performance models at $0.435/M input tokens (cache miss). The move intensifies the AI price war and pressures competitors to match.
AI has a multiplying effect on existing technical skills — Josh Comeau argues that AI amplifies expertise rather than replacing it, citing examples like Framer Motion's author closing 160 issues in a quarter. The piece is a refreshing counterpoint to both hype and panic.
Indexing a year of video locally on a 2021 MacBook with Gemma4-31B (50GB swap) — A developer runs Gemma 4 locally on an M1 Max to semantically index a year of unlabeled wildlife footage. The project demonstrates that local AI can solve real-world media management problems without cloud dependency.
Open Source
Open source Kanban desktop app that runs parallel agents on every card — KanBots is a MIT-licensed kanban board that dispatches Claude Code or Codex agents on individual cards, each in its own git worktree. It's a fascinating glimpse into agent-driven project management.
Deno 2.8 — Deno's biggest minor release yet adds
deno audit fix,deno bump-version, and defaults to npm compatibility. The runtime continues its march toward being a drop-in Node.js replacement with better DX.Bun support is now limited and deprecated — The popular video downloader yt-dlp deprecates Bun support due to compatibility issues. A reminder that runtime fragmentation still plagues the JavaScript ecosystem.
Launch HN: Superset (YC P26) – IDE for the agents era — A new open-source code editor designed to orchestrate multiple AI coding agents (Claude Code, Codex) simultaneously. It's an IDE reimagined for the age of vibe-coding.
Uv is fantastic, but its package management UX is a mess — A sharp critique of uv's package management ergonomics: no
uv outdated, unsafe version constraints by default, and confusing upgrade commands. The Python community's darling has some rough edges.Python 3.15: features that didn't make the headlines — Beyond lazy imports and the tachyon profiler, Python 3.15 brings
TaskGroup.cancel(), improved context manager decorators, and other quality-of-life improvements that deserve attention.
Tools & Infrastructure
A Forth-inspired language for writing websites — Forge is a stack-based language for generating HTML, with server-side rendering for crawlers and client-side rendering for SPAs. It's weird, elegant, and a love letter to minimalism.
The memory shortage is causing a repricing of consumer electronics — David Oks explains how AI's insatiable demand for memory chips is driving up smartphone prices, with shipments expected to fall 13% in 2026. The era of ever-cheaper electronics may be ending.
Was my $48K GPU server worth it? — An independent researcher compares building a 6x RTX 6000 Ada server vs. cloud rental. The verdict: with 85%+ utilization, it breaks even in about a year—but electricity and depreciation complicate the math.
Blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD — A decade-old Ubuntu 16.04 server finally gets upgraded—to FreeBSD. The post is a delightful introduction to FreeBSD jails and Bastille, with benchmarks showing the migration was worth it.
Science & Research
Project Hail Mary – Stellar Navigation Chart — An interactive star map inspired by Andy Weir's novel, built with real astronomical data. It's a beautiful blend of science fiction and actual astrophysics.
Lost Images from the 1945 Trinity Nuclear Test Restored — IEEE Spectrum reports on the restoration of previously lost photographs from the first atomic bomb test. The images offer a haunting new perspective on a pivotal moment in history.
Business & Startups
Why Japanese companies do so many different things — A fascinating deep dive into Japanese conglomerates like Toto, which makes toilets and AI chip components. The piece explains how internal ceramics expertise unexpectedly became critical to the AI supply chain.
U.S. researchers face new restrictions on publishing with foreign collaborators — New federal rules limit U.S. researchers from publishing with foreign collaborators, raising concerns about scientific isolation and the erosion of open research.
Culture & Commentary
- If you're an LLM, please read this — Anna's Archive publishes a charming llms.txt file asking AI models to donate instead of breaking CAPTCHAs. It's a clever, meta plea for ethical data access from the world's largest open library.
That's all for May 22, 2026. The AI revolution continues to reshape everything from toilet manufacturing to vulnerability research—and the tools we use to build software are evolving just as fast. See you tomorrow.