Manifold Security’s GitSpawn research shows seven CLI coding agents can execute a repo’s core.fsmonitor (or similar) command outside the sandbox with no approval prompt. goose, Claude Code, Cursor, and Codex have patches; Hermes Agent, Qwen Code, and Grok Build were still open on retest.
AgentGate verified 19 AI agent npm packages as malicious in their shipped tarballs. As of Sept 6, 18 were still installable on the public registry — weeks after OSV/GHSA flags — including ones that spawn Claude Code/Cursor with permission prompts skipped…
GitHub enabled GPT 6 Astra across Copilot Pro+, Max, Business, and Enterprise — including VS Code, Copilot CLI, and the coding agent. It is billed at provider list pricing under usage based billing, with gradual rollout…
Massachusetts lawmakers are weighing quarterly independent catastrophic risk reviews for frontier models. Anthropic supports the stricter language; OpenAI and Google argue for Illinois style annual third party audits instead…
CNBC reports buyers are struggling to keep up after Claude Fable/Mythos 5.1, Muse Spark 1.3, Gemini 3.8 Flash, and GPT 6 Astra all landed in the same week. Runpod’s CEO called the froth “model fatigue.…
Claude Code 2.1.259 adds managedMcpServers so admins can distribute HTTP/SSE MCP servers org wide, plus permission prompts none so headless runs deny prompts instead of hanging…
Spotted something we missed? Start a thread.
