JFrog found that Bifrost HTTP transport before 2.1.0 accepts an unauthenticated POST to /api/mcp/client and immediately starts the given stdio command as the gateway user when management auth is off (the default). Patch is transports/v2.1.0; rotate provider keys if the management API was exposed.
Cloudflare launched Worker Previews so each Git branch gets an isolated production like Worker with its own URL, secrets, Durable Objects, and observability. Agents can deploy with npx wrangler preview, then verify via Playwright MCP and Workers Observability MCP before merge…
Databricks made its Genie One MCP server generally available, exposing governed business data and Genie Ontology to any MCP agent through Unity Gateway. Teams can pull the same trusted answers and citations from Claude, Cursor, ChatGPT, or custom agents without per tool connectors…
Meta hotfixed its Muse macOS app after researcher Patrick Wardle showed a local zero day that redirected cloud transcription to an attacker endpoint and let Muse take photos and write files without alerts. Meta says practical risk was low because the exploit needed malware already running under the user’s account…
OpenAI expanded GPT 6 with Sol (coding/complex work) and Luna (high volume clerical tasks), cutting API cost 50% vs the 5.6 Sol/Luna line via caching and inference gains. Sol is live in ChatGPT Work, Codex, and the API; Luna also rolls to Free and Go, with broader ChatGPT rollout through the day…
Anthropic released Claude Opus 5.5 on Tuesday with Fable level coding and knowledge work performance at $4/$20 per million tokens (20% below Opus 5). Sonnet 5.5 and Haiku 5.5 are due in the coming weeks; the model carries Fable class cybersecurity and biology safeguards…
Spotted something we missed? Start a thread.