Meta hotfixed its Muse macOS app after researcher Patrick Wardle showed a local zero-day that redirected cloud transcription to an attacker endpoint and let Muse take photos and write files without alerts. Meta says practical risk was low because the exploit needed malware already running under the user’s account.
Released Nov 6, Qwen Code 0.26.9 lets you install large Skill ZIPs via the daemon API, TypeScript SDK, or Web Shell, and toggle 1–100 Skills in one PUT /skills/activation call. It also turns managed agent automation on by default, adds image input for Llama 4, Pixtral, and Mistral Small models, and reports working/blocked/done status to terminals via OSC 7501…
Announced Nov 6, mentioning @GitHub in Slack or Teams can investigate bugs, file issues, write code, and open pull requests, now inferring the repo from your message; it needs a paid Copilot plan. Teams also gets a Canvas to review the plan, file changes, and PR beside the chat, and created issues and PRs now note which conversation started them…
Published Nov 6, AWS's open source sample remote coding agent runs each Claude Code task in its own AgentCore microVM in your account: Opus plans and reviews, Sonnet codes, the repo's own tests verify, with up to three attempts. It opens a pull request (a draft unless verification passed) using 8 hour GitHub tokens, and never merges…
Announced Nov 4, Adobe's marketing agent is now a ChatGPT plugin, a Claude connector, and an agent in Gemini Enterprise, Microsoft Copilot, and Databricks Genie, returning read only insights under your existing Adobe permissions after admin approval. Adobe also shipped prebuilt MCP connectors for Amazon Ads, Meta campaigns, Snowflake Cortex AI, Demandbase, and more…
Apiiro found 1,122 public .claude/settings.local.json copies holding at least one secret (1,379 distinct, including 379 database passwords) after "Yes, and don't ask again" saves the full approved command—credentials included—in plain text. Claude Code only adds the file to the user's global git excludes, not the project's .gitignore , so already committed copies and forks stay exposed; rotate first, then clean up…
Spotted something we missed? Start a thread.