Cloudflare’s Sept 25 post ships Turnstile Spin: Claude Code, Cursor, Codex, or another agent creates the widget, embeds the frontend challenge, and wires Siteverify into your backend after you approve the plan—plus fix and CAPTCHA-migration flows from the dashboard, Wrangler, or a skill URL.
Drawgent is an open source Rust tool that connects your own logged in Claude Code, Codex, or OpenCode session to a live Excalidraw whiteboard over ACP. Ask in the side chat or leave an AGENT: note on the canvas; the agent screenshots the scene, edits shapes live, and marks the note DONE —and it can join an excalidraw.com room as a collaborator…
Pluto’s Sept 24 research scanned public MCP endpoints and confirmed 147 of 179 findings accepted unauthenticated calls—including root exec shells, production SQL/CMS tools, and a Swiss municipal citizen workflow. Most still listen today; they recommend authenticating tools/call , scanning your own perimeter, and authorizing per tool…
Vercel’s Sept 25 changelog ships vercel/vcr action/login , which exchanges a GitHub OIDC token for a short lived Vercel access token so Actions can push to Container Registry without stored credentials. After linux/amd64 prep finishes, the same project can use that image as a custom Sandbox runtime…
Vercel’s Sept 25 changelog adds sandbox memory metrics (average, P75, P95) beside CPU and transfer on overview and detail pages, with the y axis scaled to each sandbox’s limit and a dashed line at 85%. The same series is queryable as memoryUsedBytes in Observability and via vercel metrics under vercel.sandbox.memory used bytes…
Vercel’s Sept 23 changelog puts Drives in public beta on Hobby, Pro, and Enterprise: persistent volumes you mount into a Sandbox so agent workspaces, datasets, and dependency trees survive across runs. One read write mount at a time, plus concurrent read only snapshots; defaults are 1 TiB (1 GiB on Hobby)…
Spotted something we missed? Start a thread.
