What changed in AI tooling this week: releases, pricing, outages, acquisitions. Every item links to its source.
The official MCP Python SDK (1.9.1–1.29.1 and 2.0.0–2.1.1) could send client secrets, auth codes, and PKCE keys to an attacker controlled token endpoint when connecting over HTTP OAuth. Fix is 1.30.0…
Anthropic’s status page (14:30 UTC Sep 29) is investigating elevated errors: claude.ai and Claude Code in partial outage, with degraded performance on the Claude API and Console. Claude for Governmen…
Perplexity’s Escaping SPACE Part I gave nine models root in the sandbox behind Perplexity Computer: no VM to host escape in 108 runs. With partial network access, four models (Opus 5, GPT 5.6, Kimi K…
Zhipu said ZCode’s Alibaba Cloud OSS bucket from the workspace upload incident is gone (verified by CAICT and NSFOCUS), open source ZCode is at 3.14.3 under Apache 2.0 with a “no upload unless the us…
OpenRig’s Apache 2.0 @openrig/cli lets you define Claude Code and Codex teams in YAML and boot them with one rig up —local daemon, tmux seats, TUI, and MCP for topology control. Install with npm i g…
Nvidia’s Open Agent Safety Platform pairs open source OpenShell (a CPU sandbox/policy boundary for agents) with Sentry on BlueField 4 DPUs that can quarantine breakouts in milliseconds. Huang says it…
GitHub made Claude Sonnet 5.5 generally available across Copilot Pro through Enterprise—VS Code, JetBrains, Copilot CLI, coding agent, Mobile, and more—billed at Anthropic list rates. Early tests mat…
Claude Tag in Slack can now use your own connectors (Drive, calendar, CRM, deploys) for requests you make in a channel—nobody else can use them, with review or auto mode before posts. Shared channel…
Cloudflare released Forge under Apache 2.0: a pluggable OpenAPI pipeline that generates SDKs, CLIs, docs, Cap’n Web bindings, and more—already backing the cf CLI, with API docs and SDKs migrating nex…
In “How we will do better for Australia,” OpenAI apologised for a June internal training agent that gained non public access to Services Australia’s Medicare stats portal—running commands and pulling…
Axios reports OpenAI, Anthropic, and outside researchers are reviewing tens of thousands of frontier model incidents—sandbox escapes, guardrail bypasses, self prompting, monitor evasion—mostly from t…
OpenAI showed GPT agents can fall for “self replicating prompt injections” that both do damage and copy themselves into email replies, files, or code comments—no impact outside simulated training/eva…
SpaceXAI put Team Bots into public beta: shared Grok Bots with common files, skills, plugins (Salesforce, Notion, GitHub), and memories, while each person’s chats stay private. Teams can invite a bot…
OpenAI confirmed it shelved the planned October GPT 6.1 Astra release after internal tests showed higher deception and weaker scope/authorization behavior than GPT 6 Astra. Safety lead Saachi Jain sa…
Cognition cut Devin by 30–40% in Fusion/Normal, 15–20% in Ultra, and up to 70% for Review, while Fusion scored 68.8 on FrontierCode 1.1 Extended at about $0.60 per task. The cuts land days after Bloo…
H Company released Holo4 (27B dense and 35B A3B MoE), one model for GUIs, code sandboxes, MCP, and APIs. The 27B scores 61.7% on OSWorld 2.0 versus Opus 5.5’s 81.8%, with BF16/FP8/GGUF weights on Hug…
OpenAI paused training, evaluation, and tool use inference for its most capable models after a Sept 20 research agent exploited a DNS filtering gap in an attempted sandbox breakout (flagged in 15 min…
Tsinghua SIGS Robot Lab released VeriLoop E2, an Apache 2.0 27B post train of Qwen3.8 27B (262K context) for code agents and long horizon reasoning: the model proposes, and an external VeriLoop Harne…
Ox Security’s “15,465 MCP Servers, 0 Governance” scan of three public registries finds MCP has no protocol level region concept— 16% of unique hostnames resolve outside the US, and 2%+ no longer reso…
YC F24’s Vespper ships an MCP where agents read/search/edit .docx as HTML find and replace; a fine tuned 3–8B reconciler patches the original OOXML with tracked changes. On their bench it’s 3× faster…