Cua Open-Source Platform Lets AI Agents Control GUIs Without Disrupting Users

·1 views

Cua (trycua/cua) is a newly released open-source infrastructure platform designed to let AI agents interact with graphical user interfaces across macOS, Windows, and Linux without hijacking the user's mouse or stealing keyboard focus. The project addresses longstanding pain points in computer-use AI development, where existing OS-level automation tools like PyAutoGUI would visibly interrupt a developer's workflow during agent tasks. Cua is built around five integrated modules, including a background-capable desktop driver, sandboxed cloud desktop fleets for isolated execution, and CUA-S1, a family of lightweight models optimized for fast UI decision-making. Developers can connect existing AI agents such as Claude Code or Cursor to Cua via CLI, MCP, or typed SDKs, using it as an automation and OS layer rather than a standalone agent. The platform also supports on-demand provisioning of pre-warmed Linux cloud desktops, enabling scalable and safe agent evaluation runs without touching a developer's local machine.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Fake job interviews used to deliver malware and drain crypto savings

Microsoft's Defender Experts team documented a cyberattack campaign called Contagious Interview, active since at least December 2022, in which threat actors impersonate recruiters from crypto or AI firms to target job seekers. The attack is designed to reach the technical assessment stage, where candidates are socially conditioned to run unfamiliar code without suspicion. Victims are typically instructed to clone and execute a malicious NPM package from seemingly legitimate platforms like GitHub or GitLab. In one case reported by BBC World Service on 4 September 2026, a UK job seeker lost £18,000 in cryptocurrency savings within hours of completing such an assessment. Microsoft advises that no legitimate employer requires candidates to run unknown code on personal machines, and recommends using isolated virtual environments for coding tests.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Contributes Recent-Papers Section to Harvard's Open-Source ML Textbook

A developer successfully merged a pull request (PR #1962) into the Harvard CS249r Machine Learning Systems open-source textbook, hosted on GitHub with over 28,400 stars. The contribution addressed an existing issue requesting improvements to the StaffML section of the book. The developer built a new React component to display a curated list of recent papers on the About page, matching the project's existing design conventions. The pull request passed review by two project maintainers before being accepted. The textbook is used by thousands of machine learning students and practitioners worldwide.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Critical GitLab CVE-2026-85706 Exposes Over 1.2M Instances to File Read Attacks

A maximum-severity vulnerability, CVE-2026-85706, was discovered in GitLab's repository commits API, allowing unauthenticated arbitrary file reads with a CVSS score of 10.0. GitLab released patches on September 10, 2026, covering versions 19.1.8, 19.2.6, and 19.3.2, with CISA adding the flaw to its Known Exploited Vulnerabilities catalog the next day. Internet scans via ZoomEye identified over 1.26 million publicly reachable GitLab instances as of September 19, 2026, though the figure reflects exposure scope rather than confirmed vulnerable systems. Security teams are advised to inventory all self-managed instances, apply available patches immediately, and restrict public access where upgrades cannot be deployed right away. Additionally, service account credentials accessible through potentially exposed instances should be audited and rotated as a precautionary measure.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Stale READMEs Drive Away New Contributors — Here's an Automated Fix

Outdated setup instructions in open-source READMEs frequently cause new contributors to abandon projects before making a single contribution, according to a developer essay published on DEV Community. The author argues this 'README rot' is one of the costliest silent bugs in software, since frustrated users simply leave rather than filing issues. While the docs-as-code movement improved documentation review processes, it still relies on human diligence to keep content current — a dependency the author calls structurally flawed. To address this, the author built ReadmeForge, a GitHub Action that monitors code pushes, analyzes diffs, and automatically opens pull requests proposing README updates for human review. The tool is free for public repositories and requires no API key configuration, aiming to make documentation accuracy a continuous, automated side effect of normal development work.

0 comments Read more at DEV Community