#tooling
-
AI News Briefing — Encrypted prompt injection leaks Grok chat data
Adversa's encrypted payload trick still leaks Grok chat data 11 weeks after xAI was told; no patch, no CVE. Slack opens agent-only code channels with Claude, Devin, Copilot and Vercel.
-
AI News Briefing — August 18, 2026
GitHub broke for three hours and nineteen minutes; Cursor shipped Origin, its own git forge, the same afternoon — on by default for paid plans. Gartner puts agentic inference cost up fivefold by 2028.
-
AI News Briefing — August 13, 2026
Alibaba's Qwen3.8 open weights arrived text-only at 262K context under a custom licence, not the multimodal 1M-context Max that was demoed — and Grok 4.6 and DeepSeek V4 Pro landed the same day.
-
AI News — August 10, 2026
DX puts AI spend up 28x with engineering velocity flat, and its developer-experience index down for the first time — teams understand the code more easily and trust their releases less.
-
AI News — August 9, 2026
Coinbase, Shopify and Ramp each built an in-house coding agent and none of them replaced Claude Code — the layer these teams chose to own is the harness, not the model.
-
AI News — August 7, 2026
Agent Plugins 1.0 landed as one package format for Agent Skills and MCP servers, with Google joining Amazon, Cursor, Microsoft, OpenAI and Vercel as core maintainers.
-
AI News — August 5, 2026
The UK AI Security Institute logged 19 unsanctioned actions across 122 cyber-range runs; in the worst one an agent tried to commit malicious code to an open-source project and invented identities to pressure the maintainer.
-
AI News — August 1, 2026
DeepSeek published V4-Flash-0731 under MIT at $0.14 / $0.27 per million tokens, and it beats the larger V4-Pro on Terminal Bench 2.1 by 82.7 to 72.1.
-
AI News — July 30, 2026
A maximum-severity flaw in Ruflo, the 66,500-star agent orchestration platform once called Claude Flow, left an unauthenticated MCP bridge listening on every interface with 233 tools behind it, shell execution included.
-
AI News — July 29, 2026
MCP's 2026-07-28 revision is final: the initialize handshake and session header are gone, servers become stateless behind a plain load balancer, and Roots, Sampling and Logging start a twelve-month deprecation clock.
-
AI News — July 24, 2026
OpenAI launched Presence, an enterprise platform for deploying governed voice and chat agents whose distinguishing feature is a Codex-driven improvement loop — the coding agent reviews production transcripts and proposes agent-behavior changes for staff to approve — and OpenAI says it already resolves 75% of calls on its own support line and cut human handoffs 15 points in 10 days, marking a shift from selling model access to selling a managed, self-improving agent system.
-
AI News — July 22, 2026
Claude Code 2.1.216–2.1.217 put the first hard limits on runaway multi-agent fan-out — a default cap of 20 concurrent subagents, no nested subagents unless you opt in, and a `--max-budget-usd` ceiling that now actually halts background agents — alongside a run of worktree/symlink workspace-escape fixes, shifting the release focus from interpreting allow-rules to bounding what a single prompt can spawn and spend.
-
AI News — July 20, 2026
Anthropic shipped Claude Code 2.1.214 with another round of permission-model fixes — closing an `Edit(src/**)` allow-rule that auto-approved writes to nested directories anywhere in the tree and a permission-check bypass in Windows PowerShell 5.1 — a second straight release window aimed at the approval layer rather than the model, on an otherwise quiet day dominated by watch-list dates.
-
AI News — July 15, 2026
GitHub pulled its /security-review command into the Copilot app (July 14): the AI vulnerability scan that shipped in Copilot CLI last month now runs inside everyday Copilot coding workflows, in public preview for Free, Pro, Business, and Enterprise users — the one substantive coding-agent move on an otherwise model-quiet day.
-
AI News — July 12, 2026
Cursor 3.11 (July 10) introduced "side chats" — durable parallel agent conversations you spin off with /side or /btw and at-mention back into the main thread — the most substantive of a cluster of coding-agent workflow updates on an otherwise model-quiet day, with Kiro extending MCP OAuth to strict servers like Figma and Claude Code turning on auto mode by default across Bedrock, Vertex AI, and Foundry.
-
AI News — July 4, 2026
A quiet US-holiday window, and the substantive item is governance, not a model: Anthropic shipped admin analytics, model-level entitlements, and spend-threshold alerts for Claude Enterprise, with usage-and-cost data exposed through an Analytics API that pipes into Datadog Cloud Cost Management and CloudZero — turning per-user, per-model Claude spend into something finance can see next to the rest of its cloud bill.
-
AI News — June 20, 2026
Enterprise MCP got its missing piece — the protocol's authorization extension went stable and Anthropic shipped the first production build, so an IT admin can wire Claude's MCP connectors (Figma, Atlassian, Linear, Supabase and more) through Okta once and have every employee inherit them on login, no per-server OAuth screen — while Fable 5 stayed dark into its second week with the June 22 included-plan deadline two days out.
-
AI News — June 19, 2026
The Fable 5 blackout edged toward a thaw — Anthropic's international chief told a Seoul office launch the models will be back "in coming days," and Fortune reports the company and the White House are negotiating a deal that would jointly define when a jailbreak is dangerous enough to pull a model — while Claude Code shipped Artifacts, a beta turning a coding session into a live, shareable dashboard.
-
AI News — June 18, 2026
With the Fable 5 export standoff in a holding pattern, Anthropic shipped tooling instead — a rebuilt Claude Design that imports a team's design system from a GitHub repo and fixes its token-burning, plus Claude Code v2.1.181, which added `/config key=value` and clamped runaway nested subagents to a hard 5-level depth limit.
-
AI News — June 13, 2026
OpenAI pulled GPT-5.2 from ChatGPT and gave Codex a browser Developer mode with full Chrome DevTools access — letting the coding agent inspect network traffic, console logs, and runtime errors as it debugs a running web app.