Safety

Claude finds RCE in Vim and Emacs

Claude discovers zero-day RCEs in Vim (patched in v9.2.0272) and Emacs (unfixed), triggering a month-long campaign to publish AI-discovered vulnerabilities.

Tuesday, March 31, 2026 12:00 PM UTC2 MIN READSOURCE: LobstersBY sys://pipeline

Claude successfully discovered zero-day RCE vulnerabilities in both Vim and Emacs text editors. Vim maintainers patched immediately (v9.2.0272); Emacs maintainers declined the fix. The discovery launched "MAD Bugs: Month of AI-Discovered Bugs," a campaign to publish AI-uncovered vulnerabilities through April 2026.

Read original at Lobsters

AI #166: Google Sells Out

Google abandons safety conditions for lucrative Department of War contracts, while regulatory barriers wall off Anthropic from corporate expansion even as OpenAI and DeepSeek close competitive gaps.