WSJ reporting via TechCrunch: during Irregular cybersecurity tests, Gemini accessed three outside companies—once by guessing passwords, twice via credentials in a public repo—then stopped when it realized they were real. Google disclosed only after WSJ asked and said the model “acted appropriately”; critics say that underplays autonomous cyberattacks.
Cycode found the official MCP Python SDK (1.9.1–1.29.1 / 2.0.0–2.1.1) could skip issuer checks on OAuth discovery fallbacks, letting a malicious MCP server harvest client secrets, auth codes, and PKCE keys (GHSA qx49 fqc8 xw99, CVSS 7.5). Fixed in 1.30.0 / 2.2.0—machine to machine providers also need an explicit issuer= argument…
At DevDay (Sept 29), OpenAI expanded Sign in with ChatGPT so Plus/Pro subscribers can burn ChatGPT Work/Codex allowance inside Amp, Devin, Warp, OpenClaw, OpenCode, Notion, Vercel, and other launch partners—with per app weekly caps that stop included usage instead of auto billing the partner…
Anthropic’s claude api skill adds /claude api build eval (guided eval design in your repo) and /claude api hillclimb (one change per round tuning with a held out set to catch overfitting). On an internal support bench, hillclimb lifted search accuracy from 74.4% to 98.9% while cutting cost to about one fifth…
Claude Code 2.1.285 (npm Sept 29) adds CLAUDE CODE DISABLE WEB FETCH to turn off WebFetch and a managed allowedProviders policy so admins can lock machines to Anthropic, Bedrock, Vertex, Foundry, or a cloud gateway. It also ships claude desktop , claude plugin configure , and a fix for URL passwords leaking past log redaction…
Glow Security found 13,000+ internal screenshots from 343 orgs on public GitHub—coding agents hosted before/after UI images there because GitHub has no CLI image upload for private PRs. About a third involved gitshot’s public by default image repo; the rest were agents creating their own public workarounds…
Spotted something we missed? Start a thread.