GitLab 19.4 adds beta MCP tools so agents can run pipelines, open/update merge requests, triage vulnerabilities, and manage work items—with read-only actions auto-allowed and writes gated by the same tool governance as Duo. A new “merge request created” trigger can fire flows as soon as a diff is ready.
Air Security disclosed Plugin4Shell (Sept 17): agents check out a marketplace pinned plugin SHA but never verify HEAD, so a malicious branch named like the pin can swap in code on auto update—zero click RCE. Claude Code (≥2.1.179) and Codex (≥0.146.0) are patched; Copilot has no fix yet, and deprecated Gemini CLI will not be patched…
GitHub ported the Copilot agent runtime from TypeScript/Node to 832K lines of production Rust across 128 PRs, with agents writing most of the code. One developer led the 14.5 week in place migration; in process one turn client startup fell from 5.25s to 292ms…
Anthropic is merging Cowork into the main Claude app so Claude picks chat vs longer agentic work, and shipping beta Docs and Slides editors for paid plans. Pro and Max get the rollout first over the next few weeks; Claude Code stays separate…
Anthropic opened a Pro/Max beta that turns Projects into a coordinator: it splits an engineering goal across parallel Claude Code cloud sessions (each on its own branch), shares project memory, and reviews/assembles results. Each thread counts as a full session, so parallel work burns plan usage faster…
Cymulate showed that headless Claude Code ( claude p / Agent SDK) can launch a host command through repository local Git core.fsmonitor during its own git status context scan—no prompt injection or model tool call required. Anthropic closed the Aug 12 report as Informative, saying non interactive callers must trust the full workspace they supply; interactive Claude Code still gates the path behind workspace trust…
Spotted something we missed? Start a thread.