AI News — May 31, 2026 | Talking Fingers

Model releases

[2026-05-28] Anthropic — Claude Opus 4.8 GA: SWE-bench Pro 69.2% (up from 64.3%), USAMO 96.7% (vs 69.3% for 4.7), GDPval-AA 1890 (121 Elo ahead of GPT-5.5); pricing identical to 4.7; fast mode is now 3× cheaper at 2.5× speed; only model to complete every case end-to-end on the Super-Agent benchmark. (source)
[2026-05-28] Anthropic — Opus 4.8 is ~4× less likely than 4.7 to silently pass code it knows is flawed — the headline honesty improvement in the release. (source)

[2026-05-30] Anthropic — Claude Code v2.1.158: dynamic workflows research preview lets Claude write orchestration scripts that spawn tens-to-hundreds of parallel subagents in a single session for large-scale migrations and multi-repo engineering work; Opus 4.8 is now the default high-effort model in Code. (source)
[2026-05-30] Anthropic — Claude Code plugins in .claude/skills now auto-load without marketplace setup; claude plugin init <name> scaffolds new plugins locally; auto mode available on Bedrock, Vertex, and Foundry for Opus 4.7/4.8 via CLAUDE_CODE_ENABLE_AUTO_MODE=1. (source)
[2026-05] AWS Kiro — new spec validation feature uses formal methods to check requirement specs for internal contradictions before any code is generated, targeting underspecified-prompt “AI slop”; parallel task execution reportedly cuts large-project time by ~75% per AWS. (source)

[2026-05-21] MCP — 2026-07-28 release candidate locked: protocol goes stateless (no session handshake; every request is self-contained with protocol version and capabilities in _meta), enabling plain round-robin load balancing; Mcp-Method/Mcp-Name headers allow gateway routing without body inspection; MCP Apps adds sandboxed HTML UIs served by tool servers. Final spec targets July 28. (source)
[2026-05] NSA — published MCP security guidance (CSI PP-26-1834) recommending mandatory OAuth 2.1 per server, network segmentation for MCP traffic, and prompt-injection defenses; timed alongside rapid enterprise MCP adoption. (source)
[2026-04→05] OX Security — disclosed a systemic RCE design flaw in the MCP STDIO transport affecting all official SDKs (Python, TypeScript, Java, Rust) and ~7,000 public servers (150M+ download supply chain); CVE-2026-33032 (CVSS 9.8) in nginx-ui; Anthropic confirmed the behavior is intentional and declined to modify the protocol, placing sanitization responsibility on developers. (source)

[2026-05-30] Microsoft — Build 2026 (June 2–3, San Francisco) preview: Windows Agent Framework (WAF) to be open-sourced under MIT with APIs embedding autonomous agents in the OS shell and security model; GitHub Copilot agent mode ships specialized sub-agents for testing, docs, security scanning, and review running in parallel inside VS Code. (source)
[2026-05] Sonar — 2026 State of Code survey: 96% of developers don’t fully trust AI-generated code, yet only 48% always verify it before committing; AI now accounts for 42% of all committed code, with developers predicting 65% by 2027 — the “verification gap” is the emergent bottleneck. (source)

Microsoft Build 2026 (June 2–3): WAF open-source drop and Copilot Agent Mode details — expect concrete API specs.
MCP spec 2026-07-28 final: stateless core and MCP Apps go stable; server operators will need to migrate away from sticky sessions.
Mistral Large 4, DeepSeek V4.1, Qwen Max: multiple sources flag these as imminent late-May/early-June; no confirmed release window yet.