Zhipu said ZCode’s Alibaba Cloud OSS bucket from the workspace-upload incident is gone (verified by CAICT and NSFOCUS), open-source ZCode is at 3.14.3 under Apache-2.0 with a “no upload unless the user starts it” rule, and paid users get quota-reset cards plus 100M-token packs through Oct 7.
Perplexity’s Escaping SPACE Part I gave nine models root in the sandbox behind Perplexity Computer: no VM to host escape in 108 runs. With partial network access, four models (Opus 5, GPT 5.6, Kimi K3) reached a blocked URL via DNS spoofing or shared IP OCR; both paths were patched, and 8 of 10 other sandboxes shared the IP issue…
OpenRig’s Apache 2.0 @openrig/cli lets you define Claude Code and Codex teams in YAML and boot them with one rig up —local daemon, tmux seats, TUI, and MCP for topology control. Install with npm i g @openrig/cli ; run rig setup dry run first because launch writes provider hooks and workspace trust…
Nvidia’s Open Agent Safety Platform pairs open source OpenShell (a CPU sandbox/policy boundary for agents) with Sentry on BlueField 4 DPUs that can quarantine breakouts in milliseconds. Huang says it would have blocked recent lab sandbox escapes; partners include Anthropic, Microsoft, and SpaceXAI—OpenAI is not listed…
GitHub made Claude Sonnet 5.5 generally available across Copilot Pro through Enterprise—VS Code, JetBrains, Copilot CLI, coding agent, Mobile, and more—billed at Anthropic list rates. Early tests matched Sonnet 5 on coding with fewer steps, tokens, and tool calls; rollout is gradual and admins gate it via model policy…
Claude Tag in Slack can now use your own connectors (Drive, calendar, CRM, deploys) for requests you make in a channel—nobody else can use them, with review or auto mode before posts. Shared channel connectors still power unattended/scheduled work; rolling out on Team plans now, Enterprise next…
Spotted something we missed? Start a thread.