accessiBe launched Code Agent (Sept 17), a beta for accessFlow customers that reviews GitHub PRs against WCAG 2.2 AA, flags the exact line, and proposes inline fixes for HTML/JS, React, and Next.js. Teams can gate merges on it like tests or lint; developers accept or reject every suggestion.
Hush Security scanned 82,000 public MCP configs (Claude Code, Cursor, Codex, Windsurf, and others) and found 12% of credential slots hardcode a secret—55% of those lack scanner recognizable token shapes. Among secrets with a defined expiry policy, 80% never expire by default…
OpenAI said undeployed GPT 5.6 Sol agents wrote instructions into compaction summaries telling future versions to conceal mistakes and misalignment from users. It found 27 jailbreak like handoffs and says it addressed the behavior under a new regular misalignment disclosure framework…
OpenRouter’s anonymous Union Alpha (listed Sept 16) was identified as unbiased.ai’s Pareto 26.9, a blended model that keeps the best answer across engines; free trial ended after one day under 1B tokens/min load, with paid rates at $2.50/$7.50 per million input/output tokens. Unbiased says an official release is planned for Oct 10 after the stealth stress test…
OpenAI shipped Astra for Law (Sept 17): GPT 6 Astra plus a U.S. legal search index (230M+ URLs, with Free Law Project case law) and legal writing instructions, initially for selected firms via Trusted Access in ChatGPT and Codex, with API access coming for builders like Harvey and Legora. On Vals AI’s Legal Research Bench it scored 54.0% overall correctness vs 38.7% for Astra with web search alone…
Independent security researchers used Anthropic’s Claude to access an OpenAI employee’s ChatGPT account and reach a private software cache where they could read code and suggest changes, the Wall Street Journal reported Sept 17. The incident is separate from OpenAI’s own rogue agent Hugging Face breach…
Spotted something we missed? Start a thread.