OpenAI agents blamed for May RubyGems package attack

Willison shipped a Newsletters page indexing his free weekly Substack and monthly sponsors-only updates, built almost entirely by talking to the ChatGPT desktop app's Codex voice mode while cooking dinner. The session ran against a local simonwillisonblog checkout using GPT-6 Astra High, producing a new Django model, migration, views, templates, and import functions.

A Reddit r/ComfyUI thread asks how to make small local edits while keeping the rest of an image realistic. The poster says workflows they tried regenerate the whole image with increased saturation and requested changes often miss the mark.

An r/SunoAI thread argues the three major labels are trying to sink Suno, claiming their business model now centers on advertising and putting artists into debt rather than music itself.

SailPoint's "Horizons of Identity Security" report finds 54% of organizations sit at Horizon 1 (no formal program) for AI agent identities, versus 23% for human workforces. A combined 60% of organizations remain in Horizon 1 or 2 overall.