Air Security disclosed Plugin4Shell (Sept 18): Claude Code, Codex, Copilot, and Gemini CLI could install swapped plugin code behind a pinned commit hash when the host allows hash-shaped branch names. Claude Code 2.1.179 and Codex 0.146.0 are patched; Copilot has no fix yet, and Google will not patch Gemini CLI.
Meta shipped Muse for Mac (Sept 17–18): the agent can use files, Messages, Calendar, Notes, and Mail in their native apps, with opt in access and approval prompts before sensitive actions. It follows the earlier mobile/web launch that topped the U.S. App Store…
Google’s Sept 17 Android Bench 2.0 adds multi day long horizon tasks and continuous scoring; full task pass rates top out around 28% (vs 91% on the old incremental set). GPT 6 Astra leads the leaderboard; the suite also scores Gemini Flash, Fable 5.1, Kimi K3, and Qwen, with agent runs on Codex and Antigravity…
GitHub’s Sept 17 changelog adds 28 day feature engagement to the Copilot impact dashboard and report APIs—counts of users who used code completion, agent edit, code review, cloud agent, CLI, or the Copilot app on at least two days. Enterprise owners can see which surfaces stick in regular workflows…
Anthropic reports Claude optimized more than 30 open source biomolecular models in under four weeks—roughly 4x faster on average, with a low memory mode for systems over 10,000 tokens on one GPU node—and open sourced the code. With Adaptyv Bio it is co sponsoring a protein design competition backed by up to $1M in Claude credits and wet lab validation for over 5,000 designs…
Anthropic shipped a beta redesign of Projects in Claude Code for select Pro and Max users: a coordinator chat scopes work and spawns parallel cloud threads—each a full Claude Code session on its own branch—with shared memory and a project library. Threads run in the cloud today; local execution is coming soon…
Spotted something we missed? Start a thread.
