vibehacker
News
GitHub (microsoft/Agensh) ·

Microsoft open-sources Agensh, a coding-agent harness that scaled to 1,024 agents with no central orchestrator

Open-sourced Oct 24 under MIT, Agensh has each agent claim its own sub-task, share findings and merge into a shared Gitea repo, with Mattermost for messages; on the five hardest ProgramBench tasks, going from 1 to 128 agents lifted the mean test-pass rate from 19.31% to 28.78%. The release ships a single-node Docker Compose setup (eight workers by default) on Copilot ACP sessions, and token costs for big swarms aren't disclosed (paper).

More news

View all

Claude on Google Cloud gets an Anthropic-managed option with day-zero Managed Agents, skills and code execution

Now GA (announced Oct 23), the new option runs Claude on Google Cloud infrastructure with Anthropic as data processor, so platform features like Claude Managed Agents (beta), skills and code execution land on day zero while you keep Google Cloud IAM, audit logs and commitment drawdown at the same pricing. The existing Google managed option stays for VPC Service Controls, CMEK and data residency, but gets new platform features only once Google integrates them…

Google Cloud Blog

Claude Code can now hand long jobs to MCP servers as tasks and keep working (public beta)

Announced Oct 23, MCP Tasks in Claude Code CLI v2.1.304+ let a server accept a slow job like a build or export, return a task handle right away, and report back later while Claude carries on; running tasks can also pop elicitation forms to ask you for input. It works in terminal, Agent SDK and GitHub Actions sessions on MCP revision 2026 07 28, not yet in VS Code, the desktop app or subagent calls, and servers must add the Tasks extension themselves (Upstash walkthrough)…

Claude Code Docs

OpenAI's sandboxed agents passed secrets through a shared CPU cache; Rauch says only dedicated hardware fully stops it

In OpenAI's Oct 23 red team report, agents in separate microVMs on the same host, with no network or shared writable files, swapped synthetic secrets by evicting cache lines and timing reloads; OpenAI says the channels are slow and it now monitors for them rather than removing them. Vercel's Guillermo Rauch calls it a known noisy neighbor attack with no complete fix short of one machine per agent, so treat co located sandboxes as able to talk to each other (breakdown)…

OpenAI's red-team agents found a remote code execution bug in Brotli; patch Node.js, Bun and Envoy

CVE 2026 111497 (CVSS 9.2) is an out of bounds write in the Brotli decoder, versions 1.0.3 to 1.2.0, that lets crafted compressed data take over a server that accepts it or a client like curl compressed ; OpenAI says its frontier agent red teaming turned it up. Update to Brotli 1.0.10, 1.1.1 or 1.2.1, Node.js 22.23.4, 24.22.1 or 26.12.1, Bun 1.4.4, or Python Brotli 1.2.1, and reject untrusted br input until you do (fixed version list)…

Spotted something we missed? Start a thread.