Fathom reports Claude Code injects the signed-in account email into model instructions, and users caught it appearing in User-Agent headers on requests to sites like the SEC, Wikipedia, and crates.io—mostly via sub-agents. Anthropic added a permission check in 2.1.317 (Nov 2) that asks before web or shell calls send that address to the network.
Released Nov 6, Qwen Code 0.26.9 lets you install large Skill ZIPs via the daemon API, TypeScript SDK, or Web Shell, and toggle 1–100 Skills in one PUT /skills/activation call. It also turns managed agent automation on by default, adds image input for Llama 4, Pixtral, and Mistral Small models, and reports working/blocked/done status to terminals via OSC 7501…
Announced Nov 6, mentioning @GitHub in Slack or Teams can investigate bugs, file issues, write code, and open pull requests, now inferring the repo from your message; it needs a paid Copilot plan. Teams also gets a Canvas to review the plan, file changes, and PR beside the chat, and created issues and PRs now note which conversation started them…
Published Nov 6, AWS's open source sample remote coding agent runs each Claude Code task in its own AgentCore microVM in your account: Opus plans and reviews, Sonnet codes, the repo's own tests verify, with up to three attempts. It opens a pull request (a draft unless verification passed) using 8 hour GitHub tokens, and never merges…
Announced Nov 4, Adobe's marketing agent is now a ChatGPT plugin, a Claude connector, and an agent in Gemini Enterprise, Microsoft Copilot, and Databricks Genie, returning read only insights under your existing Adobe permissions after admin approval. Adobe also shipped prebuilt MCP connectors for Amazon Ads, Meta campaigns, Snowflake Cortex AI, Demandbase, and more…
Apiiro found 1,122 public .claude/settings.local.json copies holding at least one secret (1,379 distinct, including 379 database passwords) after "Yes, and don't ask again" saves the full approved command—credentials included—in plain text. Claude Code only adds the file to the user's global git excludes, not the project's .gitignore , so already committed copies and forks stay exposed; rotate first, then clean up…
Spotted something we missed? Start a thread.
