In Positron 2026.10, turning on the MCP: Enabled setting lets agents like Claude Code, Codex, OpenCode, Kiro, Gemini and Copilot CLI see your loaded data, plots and consoles and run code there, labeled with the agent's name. Posit warns that this amounts to unrestricted shell access under your credentials, so trust decisions fall to your agent harness.
OpenAI plans to fold Pierre's Git backed Code Storage service into Codex; Pierre's open source projects stay open and existing Code Storage customers keep access after closing. Terms weren't disclosed and the deal still needs regulatory approval (Axios)…
Conductor has stopped taking new users and plans a new interface in early 2027; its cloud service goes read only Nov 13 and shuts down Nov 20, when cloud data deletion begins, so export or move workspaces to the local app before then. Terms weren't disclosed (InfoWorld)…
In a mid October run with an upcoming cyber model, the pipeline reproduced 1,724 kernel bugs and built working local privilege escalation exploits for 948 of them, about $1,279 each, with human researchers reviewing results before reporting fixes to maintainers. The 948 counts validated exploits, not merged patches (HN)…
The agentic text and image model (104B active, MXFP4 weights) is now public in 96 safetensors shards, with vLLM, SGLang and TokenSpeed recipes and an OpenAI/Anthropic compatible API as kimi k3.1 pro . Its MIT style license allows commercial use but requires a separate deal for model as a service businesses above $20M yearly revenue…
Shown on HN, the MIT scanner ( uvx autorun audit repo <url ) reads folder open VS Code/Cursor tasks, Claude Code and Cursor hooks, unpinned MCP launches, dev container host commands, npm install scripts and hidden Unicode in AGENTS.md , then flags what can read credentials or hit the network and whether your tool asks first. It only reads files, never runs them, and ships a GitHub Action with SARIF output…
Spotted something we missed? Start a thread.
