Anthropic 初の日本向け Claude Code ハッカソンが発表された！入賞賞金はなんと総額 $50,000(約 800 万円)相当の Claude API クレジット。しかも参加者全員に Max 5x プランと $500 分のクレジットが配られる。これは太っ腹では。。日本在住ならエンジニアでなくても応募できて、完全オンライン、開発期間は 11/2〜11/10 の約 1 週間。応募締切は 10/26 とのこと。 自分は日本国内に住んでいないので応募資格はないかもしれませんが、agmsg を題材に使ってこれに応募する方を全力でサポートしたいと思っています！ それで、これに合わせて agmsg のプラグイン機能を出そうと考えています。GitHub に「自分のアカウント名/なんとか」というプラグインのリポジトリを作って、それをコマンドで指定すると誰でも取り込める、つまり本体にマージされなくても使いたい人が使える、よくあるあれです。これで作ったものは agmsg にいろいろ取り込める、というキャンペーンをやりたいなと思っています。 我こそはと思う方、agmsg 関連で応募したい方、ぜひ声をかけてください。一緒に盛り上げましょう！ #agmsg #claudejapan2026

OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. openai.com/index/coordinated…

claude code just reverse-engineered my hotel room's door lock in 90 seconds. the encryption is from 2014. the same protocol controls the smoke detector in the top right corner - that red light isn't a battery indicator. it blinked twice when i ran the scan. i'm lying in a $85/night hotel room right now. opened claude code and typed: "scan every bluetooth and wireless device in range. show me what's talking to what." it found 19 wireless devices. 18 were normal. device 19: a BLE controller running an unpatched firmware from 2014. it manages the electronic door lock, the smoke detector, the thermostat, and the room safe. all four on one controller. one protocol. zero updates in 10 years. i asked claude code to analyze the protocol. it took 90 seconds. the lock uses a 4-byte rolling key with no session tokens. claude code generated a valid master key on the third attempt. i heard my door click from the bed. then it found the smoke detector is on the same bus. the red light in the photo? that's the controller's status LED. it's not monitoring smoke. it's confirming the BLE handshake with the lock system every 8 seconds. that means anyone within bluetooth range - the hallway, the room next door, the parking lot - with one prompt and 90 seconds can: 1. unlock your door 2. disable the room alarm 3. open your safe 4. and the smoke detector confirms the connection with that little red blink the check takes 2 minutes: step 1 → open claude code → paste the prompt from the first comment step 2 → it scans every BLE device in range and flags unpatched firmware step 3 → if it finds one → request a room change → ask for a room with a physical deadbolt → and use it every hotel chain running ASSA ABLOY or Onity locks from before 2018 has this. that's roughly 30% of hotels worldwide. i tested 3 hotels this month. all 3 vulnerable. look at the photo. top right. that red dot blinking every 8 seconds. that's the handshake. save the prompt. next hotel you check into → run it before you unpack.