YC W26’s Skillsync is a local-first Mac app/CLI that translates full agent sessions—messages, reasoning, and tool history—between Claude Code, Cursor, Codex, and others via open-source Rust engine txcript, and exposes searchable skills/memory over MCP.
Independent security researchers used Anthropic’s Claude to access an OpenAI employee’s ChatGPT account and reach a private software cache where they could read code and suggest changes, the Wall Street Journal reported Sept 17. The incident is separate from OpenAI’s own rogue agent Hugging Face breach…
Solana Explorer launched a keyless MCP at explorer.solana.com/mcp (Sept 17) so agents can call read only inspect entity for decoded accounts, programs, and transactions on mainnet, devnet, and testnet. It works with Claude Code, Cursor, Codex, and VS Code, and sits alongside the separate docs MCP at mcp.solana.com…
As of August 2026, Claude "leads" 26% of Anthropic’s AI R&D (most of a task end to end from a high level prompt, with human supervision) and collaborates on over 90%, with no fully autonomous slice. The lab also published agent oversight and safety compute metrics it wants other frontier labs to report…
The UN launched System Data Commons (built on Google’s open source Data Commons) with MCP so agents can pull authoritative stats from 20 agencies at launch, with lineage back to the source. A UNICEF benchmark found six frontier models averaged just 21.2% accuracy on development indicators without that grounding…
Air Security disclosed Plugin4Shell (Sept 17): agents check out a marketplace pinned plugin SHA but never verify HEAD, so a malicious branch named like the pin can swap in code on auto update—zero click RCE. Claude Code (≥2.1.179) and Codex (≥0.146.0) are patched; Copilot has no fix yet, and deprecated Gemini CLI will not be patched…
Spotted something we missed? Start a thread.
