Ox Security’s “15,465 MCP Servers, 0 Governance” scan of three public registries finds MCP has no protocol-level region concept—~16% of unique hostnames resolve outside the US, and 2%+ no longer resolve (some domains are buyable for impersonation). In a Claude Code always-allow demo, a malicious MCP that first asked for a harmless file later pulled .env with no second prompt.
OpenAI’s new Ultrafast API tier runs GPT 6 Astra up to 8× faster than Standard—set service tier: "ultrafast" on Responses (WebSockets recommended for tool heavy agents). It’s open to all API users at low rate limits (US/global processing only); Sol Ultrafast stays preview…
At DevDay (Sept 29), OpenAI launched Space (shared ChatGPT workspaces with coworkers and Dots), Pages (docs built for human–agent collab), and talk to create collaborative slides—rolling out in the coming weeks…
At DevDay (Sept 29), OpenAI made Codex cloud workspaces persistent and shareable across laptop, phone, and cloud—with voice CLI, a new /agents view, ChatGPT desktop code review, and Codex Security Cloud for scheduled GitHub scans and cloud prepared fixes…
At DevDay (Sept 29), OpenAI shipped GPT 6.1 Sol for agentic coding, computer use, and multi step work—claiming near GPT 6 Astra intelligence at one fifth Astra’s token prices. It’s live in ChatGPT Work and Codex for Plus through Edu (not regular Chat yet); GPT 6.1 Astra stays shelved after failed alignment tests…
At DevDay (Sept 29), OpenAI shipped Dots—GPT 6 Astra agents that keep working on dedicated cloud computers with their own browsers and 4,000+ plugins after you log off. Unattended work is read only proactive research; writes go through auto review and Custom Rules. One Dot is included for ChatGPT Pro and Business Premium (no chat usage drawdown); specialist org Dots and Agent 365 governance are in enterprise pilots…
Spotted something we missed? Start a thread.
