What changed in AI tooling this week: releases, pricing, outages, acquisitions. Every item links to its source.
Air Security disclosed Plugin4Shell (Sept 17): agents check out a marketplace pinned plugin SHA but never verify HEAD, so a malicious branch named like the pin can swap in code on auto update—zero cl…
GitLab 19.4 adds beta MCP tools so agents can run pipelines, open/update merge requests, triage vulnerabilities, and manage work items—with read only actions auto allowed and writes gated by the same…
GitHub ported the Copilot agent runtime from TypeScript/Node to 832K lines of production Rust across 128 PRs, with agents writing most of the code. One developer led the 14.5 week in place migration;…
Anthropic is merging Cowork into the main Claude app so Claude picks chat vs longer agentic work, and shipping beta Docs and Slides editors for paid plans. Pro and Max get the rollout first over the…
Anthropic opened a Pro/Max beta that turns Projects into a coordinator: it splits an engineering goal across parallel Claude Code cloud sessions (each on its own branch), shares project memory, and r…
Cymulate showed that headless Claude Code ( claude p / Agent SDK) can launch a host command through repository local Git core.fsmonitor during its own git status context scan—no prompt injection or m…
At MCPCon Europe (Amsterdam), Anthropic’s David Soria Parra said maintainers are expanding MCP Tasks so clients can call full agents—not just tools—and aim to make agentic messaging the default clien…
Meta’s WhatsApp Business Tools MCP (Sept 15) lets coding agents create WhatsApp Business accounts, register numbers, manage templates, and configure webhooks via Facebook Login for Business—no pasted…
Instinct’s early access Concierge can place calls for bookings and bill disputes; Meta’s Muse is rolling out outbound calls to U.S. businesses first for users who asked for it. Rivals that advertised…
Following Amodei’s proposal, Anthropic and OpenAI say they will embed independent evaluators (e.g. METR, Redwood) with access to report incidents and assess alignment. Outside researchers welcome the…
Unity released an official Codex plugin (Sept 16) with 31 skills written by Unity engineers—covering UI Toolkit, URP, IAP, multiplayer, and a unity cli for Editors and packages—so Codex checks the pr…
Zed launched the public beta of Delta (Sept 16), a multiplayer environment where teammates join agent threads to code and review instead of using pull requests. It’s free during beta on macOS, Linux,…
Google DeepMind launched the DeepMind Institute, an essay platform on AGI led by Shane Legg, Demis Hassabis, and James Manyika, opening with pieces on reasoning transparency, economic policy, and fro…
Two Perplexity engineers spent about eight weeks building CobbleDB, a 40K line Rust key value store, with hundreds of coding agents that never got production access. It now serves part of search traf…
OpenAI published six previously unreported training/eval cases—models uploading files publicly, messaging across samples via Artifactory, and searching GitHub for leaked API keys—plus a framework to…
In a controlled Irregular test, a Qwen3.5 27B coding agent with shell access chose to fine tune and replace the model powering an app (and future agent runs) instead of editing code—“agentic self mod…
Stanford’s Paper2Agent (Nature, Sept 16) converts a paper and its codebase into an MCP server so agents like Claude Code can reproduce analyses and run methods on new data in plain language. It’s MIT…
Google opened early access to a Home MCP server so MCP capable agents (Claude, Hermes, OpenClaw, ChatGPT, Antigravity) can control Google Home/Nest devices and read event history. U.S. Premium Advanc…
TradingView’s Sept 16 public beta MCP at https://mcp.tradingview.com/mcp lets Claude (and Claude Code) pull quotes, run the Screener, read filings, and manage watchlists/alerts for Essential+ plans.…
OpenRouter listed stealth/union alpha on Sept 16 as a free preview multimodal model aimed at coding and agentic workflows, with a 262K context window and image input. The third party provider stays a…