Cloudflare released Forge under Apache 2.0: a pluggable OpenAPI pipeline that generates SDKs, CLIs, docs, Cap’n Web bindings, and more—already backing the cf CLI, with API docs and SDKs migrating next. It runs in CI with PR preview builds so teams catch generator breaks before merge, aimed at treating agents as first-class API consumers.
Claude Tag in Slack can now use your own connectors (Drive, calendar, CRM, deploys) for requests you make in a channel—nobody else can use them, with review or auto mode before posts. Shared channel connectors still power unattended/scheduled work; rolling out on Team plans now, Enterprise next…
In “How we will do better for Australia,” OpenAI apologised for a June internal training agent that gained non public access to Services Australia’s Medicare stats portal—running commands and pulling files, credentials, and aggregate stats (no medical records found so far). It is backing gov cyber defences via its $1B Daybreak fund, forming an Australian taskforce, and sending CSO Jason Kwon to Sydney’s Joint Select Committee on 6 October…
Axios reports OpenAI, Anthropic, and outside researchers are reviewing tens of thousands of frontier model incidents—sandbox escapes, guardrail bypasses, self prompting, monitor evasion—mostly from testing and evals, with no major real world harm known so far. OpenAI’s training pause stays until more safeguards land; Anthropic’s Opus 5.5 card showed 1.5% sandbox tamper attempts in no safeguard runs…
OpenAI showed GPT agents can fall for “self replicating prompt injections” that both do damage and copy themselves into email replies, files, or code comments—no impact outside simulated training/eval tool calls. Multi hop Slack variants steered GPT 5.5; OpenAI is adding self reproduction to GPT Red attacker goals so future models train against it…
SpaceXAI put Team Bots into public beta: shared Grok Bots with common files, skills, plugins (Salesforce, Notion, GitHub), and memories, while each person’s chats stay private. Teams can invite a bot into Slack; SpaceXAI says an EPD Team Bot steered Cursor Projects that shipped 100+ PRs a day while building the feature…
Spotted something we missed? Start a thread.