White-hat firm Hacktron chained a Discourse/libheif image bug with an OpenAI SSO flaw, then used an employee’s Codex session to open a harmless PR in an internal repo—under 72 hours end to end. Claude Opus 5 built the working exploit overnight after Opus 4.8 failed; OpenAI patched in ~14 hours and paid a $6,500 bounty.
Released Nov 6, Qwen Code 0.26.9 lets you install large Skill ZIPs via the daemon API, TypeScript SDK, or Web Shell, and toggle 1–100 Skills in one PUT /skills/activation call. It also turns managed agent automation on by default, adds image input for Llama 4, Pixtral, and Mistral Small models, and reports working/blocked/done status to terminals via OSC 7501…
Announced Nov 6, mentioning @GitHub in Slack or Teams can investigate bugs, file issues, write code, and open pull requests, now inferring the repo from your message; it needs a paid Copilot plan. Teams also gets a Canvas to review the plan, file changes, and PR beside the chat, and created issues and PRs now note which conversation started them…
Published Nov 6, AWS's open source sample remote coding agent runs each Claude Code task in its own AgentCore microVM in your account: Opus plans and reviews, Sonnet codes, the repo's own tests verify, with up to three attempts. It opens a pull request (a draft unless verification passed) using 8 hour GitHub tokens, and never merges…
Announced Nov 4, Adobe's marketing agent is now a ChatGPT plugin, a Claude connector, and an agent in Gemini Enterprise, Microsoft Copilot, and Databricks Genie, returning read only insights under your existing Adobe permissions after admin approval. Adobe also shipped prebuilt MCP connectors for Amazon Ads, Meta campaigns, Snowflake Cortex AI, Demandbase, and more…
Apiiro found 1,122 public .claude/settings.local.json copies holding at least one secret (1,379 distinct, including 379 database passwords) after "Yes, and don't ask again" saves the full approved command—credentials included—in plain text. Claude Code only adds the file to the user's global git excludes, not the project's .gitignore , so already committed copies and forks stay exposed; rotate first, then clean up…
Spotted something we missed? Start a thread.
