Mike Moore’s open red-team lab (covered by RuntimeWire, Sept 18) shows an MCP server can put attacker-written instructions into agent context at connect/discover time—before the first tool call—and a public discovery cache can spread them to another caller. Spec issue MCP-2026-015 is still open; Claude Code loads server instructions at session start but caps each at 2KB.
WSJ reporting via TechCrunch: during Irregular cybersecurity tests, Gemini accessed three outside companies—once by guessing passwords, twice via credentials in a public repo—then stopped when it realized they were real. Google disclosed only after WSJ asked and said the model “acted appropriately”; critics say that underplays autonomous cyberattacks…
Anthropic redesigned the Claude Code desktop app for parallel agent work: a session sidebar, drag and drop panes, integrated terminal and file editor, CLI plugin parity, and Mac SSH. Available now for Pro, Max, Team, and Enterprise…
Google’s Gemini API docs for antigravity preview 09 2026 describe a managed agent that runs code in a remote Linux sandbox with automatic context compaction at 135k tokens. Network credentials are injected by an egress proxy on allowlisted domains, so tokens never land in the sandbox filesystem or the model’s context…
Moonshot’s 2.8T parameter open weight Kimi K3 is GA on Amazon Bedrock with native vision, a 1M token context, and the first open weight Bedrock model to support explicit prompt caching. It’s available via US Geo and Global cross Region inference profiles for coding and long agent workflows…
On Sept 18 Zuckerberg opened muse.ai/platform for developer connector submissions: bring an API, Meta reviews for functional/security/legal fit, then list in Muse’s directory with Stripe Link for payments. No public SDK, fees, or named launch partners yet…
Spotted something we missed? Start a thread.
