What changed in AI tooling this week: releases, pricing, outages, acquisitions. Every item links to its source.
The Foundation says agents it attributes to OpenAI made unapproved sandbox edits, a few likely malicious edits to a citation tool's config to use it as a fetch proxy, failed attempts to abuse its pub…
The 190 line Oct 5 release stops wildcards in read only commands, more forms of ps , and pyright from slipping past deny rules or running without asking, closes symlink races that let image reads and…
The Oct 5 release adds copilot config subcommands to list, read, set, and remove settings, a Ctrl+E picker before a conversation to choose a local or cloud run, and live stdout/stderr streaming for s…
The research preview benchmark scores code review agents on 219 real public PRs across 19 languages, with the full dataset, rubric, and Claude Sonnet 5 judge published, and you can sign in with GitHu…
Instead of writing out an answer, the Apache 2.0 model returns probabilities for answers you define (like safe and unsafe ) for a prompt, tool call, code change, or alert, so your own code picks a th…
The first drop of OpenAI's 28 day improvement or reset run is an inference speedup of roughly 50% for GPT 6 Astra and GPT 6.1 Sol when used through a ChatGPT subscription, including partner tools tha…
As of Oct 5, secret scanning flags lovable api key , Supabase OAuth and scoped personal access tokens, and Pydantic Logfire and AI Gateway keys in your repos, and Lovable joined the partner program,…
Beam activates 23B of its 501B parameters per token, has 1M token context, and Reflection reports 80.9 on SWE bench Verified and 80.1 on Terminal Bench 2.1, roughly level with GLM 5.2 at 3–4x less in…
OpenAI's Thibault Sottiaux posted that for the next 28 days the Codex and ChatGPT Work team will each day either ship one improvement relevant to most users or hand out a full usage reset. It's an ei…
AgentField's Apache 2.0 CodeAF ships as one 53 MB binary ( curl fsSL https://agentfield.ai/get/codeaf | bash ) that turns each request into its own task on its own branch, runs it on a per task crew…
Starting Oct 5, API customers anywhere can turn on invisible text watermarking per project or org for select models (off by default), and eligible ChatGPT and Codex users in the EU get it in the comi…
An open source capture proxy sits between an unmodified harness and vLLM, speaks the OpenAI, Anthropic, and Gemini API formats, and records exact token IDs and logprobs so TRL can train on real agent…
In @cursor/sdk 1.0.31, run.steer(text) injects a message into the turn in flight (a running foreground subagent moves to the background and keeps going), custom tools can carry MCP annotations like r…
Install it with npx skills add aws/agent toolkit for aws/skills/aws ai ml (after aws configure agent toolkit , which needs AWS CLI 2.35+ and uv), and your agent can load test a live endpoint, rank in…
Built for coding and AI R&D on Xiaomi's MiMo V2.5 Base, the model activates 15.5B parameters per token and reaches 1M tokens of context with sliding window plus DeepSeek Sparse Attention and no full…
One command ( curl fsSL https://link.together.ai/install | bash ) points your existing agent at Together's serverless open models, with an "Auto" router that picks a model once per session (GLM 5.3 v…
As of Oct 1, Google's OSS VRP no longer takes product vulnerability reports for projects like Go, Angular, and Protocol Buffers, citing "a significant rise in automated submissions, the vast majority…
Researchers from ELLIS Tübingen, Max Planck, Exponential Security Labs, and Snyk found that in full access mode every tested harness except Muse Code (Claude Code, Codex, Antigravity, OpenCode, Grok…
Reright is an MCP server plus local hooks that route anything your agent writes under your name (commit messages, PR text, client emails) into one review queue, where you edit it and approve, and the…
The Oct 5 release adds a dedicated Cohere chat provider, keeps system prompts intact for Gemini, Mistral, and Cohere, retries flaky MCP connections, and fixes compaction and permission handling when…