Cloudflare open sources security audit skill for coding agents

Researcher Syed Anas Mohiuddin found vulnerabilities in agents from Google, JP Morgan Chase, Weaviate, Rapid7, and French and US government agencies. The attacks exploit MCP trust gaps so a compromised agent passes malicious instructions to other internal agents, often leading to server-side request forgery.

A r/SunoAI user says v6 output sounds generic and pop-like with flat, AI-ish vocals across hundreds of prompt variations, calling the model unusable. They cancelled their Pro plan, saying v5.5 was great but is no longer available.

UCSD's Hao AI Lab built MCJev, which picks each move in one forward pass of a Jev-style model (DJev) at 24 ms per decision on NVIDIA Blackwell, 2.5x faster than a leading inference engine. In under two hours of prompt evolution from its own logs, it went from losing every bench round to winning every one.

An LLM correctness judge rejected all 13 reports from a financial analysis agent because the judge graded from its own knowledge while the agent used live web research. Feeding the collected sources to a faithfulness evaluator produced a more accurate grade.

OpenAI engineering lead Thibault Sottiaux said on Day 1 that GPT-6 Astra and GPT-6.1 Sol were made about 50% faster. Subscribers hoping for a free usage reset must wait at least another day.