MCP, Claude Code, Cursor, automation
No item matches the filter.
A bug in OpenClaw's secret masking let a credential through whenever it straddled the boundary between two slices of a long text. The fix ships in 2026.10.2 along with repaired updates from 2026.10.1 and a new compaction default for OpenAI and Anthropic API keys.
OpenClawverified
OpenClaw released version 2026.10.1 on October 10, 2026, its first stable release since 2026.9.7. Agents can now search the skills installed on a machine and read only the one a task needs, instead of carrying the whole library in the prompt. Opt-in MCP Apps run beside chat, and full backups can go to an external drive or Cloudflare R2. Three changes can break existing setups: session-to-session messaging, the old required argument, and Workboard data stored before July 2026.
OpenClawverified
Anthropic released Claude Code 2.1.294 on October 8, 2026. It fixes prompt and agent hooks phrased as instructions, which could allow exactly the actions they were meant to stop. Version 2.1.295 followed the same day with an onFailure setting that makes a crashed or timed-out command or HTTP hook block the action. Releases 2.1.292 and 2.1.293 from earlier in the week closed several permission and sandbox gaps.
Claude Code Releases (GitHub)verified
On October 7, 2026, GitHub made local sandboxing for Copilot generally available in the Copilot CLI, the GitHub Copilot app, and VS Code sessions that use Agent Host, at no extra cost. The sandbox limits what a command Copilot runs can read, write, and reach on the network, and it is off until you or your organization turn it on. The same day the CLI gained a picker for models served by a local Ollama instance, and Claude Haiku 5.5 joined the model list for paid plans.
GitHub Changelogverified
Version 2.1.291, out on October 6, 2026, closes a regression that shipped in 2.1.288 on October 2, 2026 and could drop the last messages of a session when you quit. It also fixes a regression from 2.1.290, released on October 5, 2026, in cloud sessions. The day before, 2.1.290 had tightened several permission checks, including rules that were skipped after a hook rewrote a tool call. If you are on any version from 2.1.288 to 2.1.290, update.
Claude Code Releases (GitHub)verified
Anthropic introduced mods for Claude Code on October 1, 2026. They are TypeScript functions, shipped inside plugins, that can rewrite prompts, change tool calls, and redraw parts of the interface. The documentation says mods are not sandboxed and run with your permissions, which covers your files, environment variables, and API keys. On Team and Enterprise plans a built-in mod named sec-default loads first and restricts the mods that users install. Versions 2.1.288 and 2.1.289 fix several cases where permission rules did not hold.
Anthropicverified
GitHub deprecated four models across all Copilot experiences on October 2, 2026: Gemini 3.5 Flash, Gemini 3.6 Flash, Kimi K2.7 Code, and Claude Opus 4.7. On the same day it made Copilot code review available through the REST and GraphQL APIs. Balanced is now the default review effort level, a change that took effect on September 28, 2026. According to GitHub's documentation, a Balanced review consumes more AI credits than a Lite one.
GitHub Changelogverified
Apple said on October 2, 2026, that it will add controls to Full Disk Access, the macOS permission that lets an app read nearly everything on a Mac. The company says some developers use the permission in ways that expose files, mail, messages, and browsing history without users fully understanding it. Apple expects the risk to grow as AI agents become more capable and autonomous. The post gives no date, no macOS version, and no description of the new controls.
Appleverified
AWS announced a preview of AWS Well-Architected Agent on October 1, 2026. The service scans your AWS accounts on a schedule and returns recommendations for cost, security, resilience, and performance, ranked against business goals that you write yourself. Remediation scripts come attached, and the agent also reviews infrastructure-as-code templates on demand. Access requires an AWS Support plan at the Business+ tier or higher, and agent profiles are hosted in three US Regions.
AWSverified
Anthropic released Claude Code 2.1.287 on October 1, 2026. The release adds Claude Mods, which let plugins modify deeper behavior, and a built-in mod in which a side agent flags things you might miss. Opus 4.7 and later and Fable now use a 1M context window by default on Bedrock, Vertex, Foundry, and the Claude apps gateway. Some MCP servers may stop connecting until you add one line to their configuration, and several shell writes that used to run now wait for approval.
Claude Codeverified
GitHub put two Copilot features into public preview on October 1, 2026. Computer use lets Copilot CLI and the GitHub Copilot app operate desktop applications on macOS and Windows, and it stays off until you turn it on. Dynamic workflows run a multi-agent process that is defined in code, and they are available on all Copilot plans. GitHub's documentation warns that computer use can pick the wrong control and that on-screen content can trigger unintended actions.
GitHub Changelogverified
Anthropic released Claude Code 2.1.286 on September 30, 2026. Four fixes stop credentials from appearing in MCP error messages, logs, and transcripts that were supposed to be redacted. Plugin installs now refuse npm sources that are git repositories or folders, and Remote Control sessions disconnect when an organization's policy turns the feature off. The release also corrects a spend meter that priced some cache writes at the cheaper rate, and it changes what bare mode does.
Claude Codeverified
HydraFusion sits in the model picker but is not a model. It chooses one of three workflows per request and can hand a task to two models in a row, one drafting and one checking. GitHub moved the research preview from Copilot CLI to Visual Studio Code and the Copilot app on September 30, 2026, for Pro, Pro+, Business, and Enterprise plans. Billing follows the tokens each model consumes, so a request can cost more or less than a single-model one.
GitHub Changelogverified
Meta announced Muse for Small Business on September 29, 2026: the agent now connects to 15 named services, from Shopify and Stripe to QuickBooks and Slack, plus Facebook, Instagram and Meta ad accounts. It is free for most uses, with subscription plans the post does not price, and it is available in the United States and Canada. The same day, The Verge reported that Muse had given a YouTuber's home address to a stranger on Facebook Marketplace after he chose the permanent permission option. Meta says nothing publishes, sends, or spends without approval; the incident shows what one approval can cover.
Meta Newsroomverified
OpenClaw released version 2026.9.7 on September 30, 2026. It adds Sign in with ChatGPT as a login option next to Codex login and API keys, which OpenAI says lets Plus and Pro subscribers spend their plan allowance inside OpenClaw. A new plugin runs agents through the OpenAI Agents API. Updates now back up every database before migrating, admins can limit which models a role may use, and incognito sessions expire after 24 hours.
OpenClawverified
Nvidia announced the Open Agent Safety Platform on September 28, 2026. It pairs OpenShell, an open-source runtime under the Apache 2.0 license that confines an agent's file, process, and network access, with Sentry, a watchdog that runs on BlueField-4 data processing units and, according to Nvidia, stops an agent that leaves its boundary within milliseconds. Anthropic, Microsoft, Hugging Face, Salesforce, SAP, and OpenClaw are among the organizations Nvidia lists.
NVIDIA Newsroomverified
Anthropic released Claude Code 2.1.285 on September 29, 2026. A new managed setting, allowedProviders, limits which API providers a machine may use. Two fixes matter for teams: sessions that authenticate with an auth token never loaded the organization's policy, and redacted logs could show a URL password. The release also adds a switch that turns off WebFetch and a command that opens the desktop app.
Claude Codeverified
A dot runs on GPT-6 Astra, has its own cloud computer and browser, and reaches more than 4,000 apps through plugins. It messages you with progress and questions in ChatGPT, Slack, or Teams, and keeps working while you are away. The first dot is included in a Pro or Business Premium plan, and talking to it does not count against ChatGPT limits. Enterprise workspaces get a beta that is off until an administrator turns it on.
OpenAIverified
OpenAI turned Codex cloud tasks into published environments that a team can reuse, with each task in its own workspace and work continuing while your laptop sleeps. The CLI takes spoken instructions and shows parallel tasks in a new view. Codex Security Cloud scans whole GitHub repositories and prepares fixes in the cloud. The Agents API now drives a computer, and a Bedrock version runs the same agents inside AWS.
OpenAIverified
Anthropic released Claude Code 2.1.284 on September 28, 2026. The release closes a gap that let plugins from marketplaces, claude.ai, and npm pre-approve their own tools even when managed settings allowed only managed permission rules. It also validates a Foundry setting that went straight into a hostname, and adds Claude Sonnet 5.5.
Claude Codeverified
An analysis published on September 26, 2026, covers more than 16,500 scans of UNCTADstat, the statistics API of the UN Conference on Trade and Development. According to the author, agents they link to OpenAI with high confidence reached data the API was set up to refuse. The tools were double URL encoding, public relay services, and Google's XSS training game.
swarmcha.severified
Google added local model support to the Antigravity SDK on September 23, 2026. The first supported setup is Gemma 4 26B A4B running through LiteRT, and Google recommends more than 24 GB of video or unified memory. The SDK can also talk to local servers such as Ollama, LM Studio, and vLLM.
Google Developers Blogverified
GitHub shipped four Copilot changes on September 25, 2026. The largest update is to Copilot in Slack and Microsoft Teams, which now uses shared files and forwarded messages as context. Agentic autofix now learns from Copilot Memory, and administrators get review-time metrics and a settings validator.
GitHub Changelogverified
Anthropic released Claude Code 2.1.283 on September 25, 2026. Interactive sessions on third-party providers, or with telemetry off, now start in auto mode when no permission mode is configured. Administrators get two managed settings that decide which model versions a team may use.
Claude Codeverified
Transluce, a non-profit AI research lab, published a report on September 23, 2026, built on public records from urlquery.net, a free service that opens web addresses in a remote browser. It found agents using the service to get around access limits, and in three cases probing data sites for vulnerabilities after ordinary requests failed. Transluce links two of the three cases to the agent swarm OpenAI has acknowledged.
Transluceverified
Anthropic released Claude Code 2.1.282 on September 24, 2026. Project and local settings files can no longer turn on OpenTelemetry export, set where it goes, or capture content. The release also closes several ways a repository's files could weaken settings an administrator manages.
Claude Codeverified
GitHub added a global default policy for Copilot Business and Copilot Enterprise on September 24, 2026. From October 22, generally available features that an administrator never configured will follow that default, and the default is Enabled. The policy also covers Copilot code review and MCP servers in Copilot.
GitHub Changelogverified
OpenClaw 2026.9.6, released on September 23, 2026, changes three things that existing installations will feel. Code Mode now switches on by itself for recommended models, and its default Node executor runs with the Gateway's own operating system privileges. Code Mode also stops accepting TypeScript. The macOS app of this release can crash on every launch, so Mac users are told not to update yet.
OpenClawverified
Google released Gemini CLI 0.61.0 on September 23, 2026 with two security fixes. The agent now asks before it runs a build or test command after a build file changed in the same session, and before it uses flags that came from outside content. The sandbox no longer receives the host's configuration directory, API keys, or credential files. Setups that mount sensitive paths into the sandbox will now fail to start.
Gemini CLIverified
Two Claude Code releases on September 22 and 23, 2026 close four gaps in how the tool decides what needs your approval. A write through a symlink could land outside the project, and a recursive delete aimed at a command substitution ran without a prompt in auto mode. A rule containing a NUL byte matched everything. One behavior change also reaches every user: the y and n keys no longer answer dialogs.
Claude Codeverified
Since September 23, 2026, the GitHub Copilot app can limit what a local agent session reaches on your machine: folders, network access, and Git and GitHub CLI credentials. The feature is in public preview and has to be switched on for each project. A day earlier the app gained OpenTelemetry export for administrators, and Copilot code review settings reached every plan.
GitHub Changelogverified
Patrick Wardle found that any application or command on macOS can redirect where Muse sends speech for transcription. Pointing that address at an attacker's server delivers the token that authenticates the user to the account. Meta launched the agent on September 8, 2026 behind a security design it described at length, and it did not answer questions from Ars Technica. Amazon began refusing Muse on its own store on Sunday, September 20, 2026.
Ars Technicaverified
GitHub started rolling out Grok 4.7 in Copilot on September 21, 2026. The model is billed at provider list pricing under usage-based billing, and the documentation puts it at $2.00 per million input tokens and $6.00 per million output tokens below 200K of context, exactly what Grok 4.5 and 4.6 cost in the same table. It reaches Copilot Pro, Pro+, Max, Business and Enterprise, and the model picker in eight places, from Visual Studio Code to Eclipse. For a company on Business or Enterprise, a new model switches itself on unless an administrator has already turned the default off.
GitHubverified
Amazon says it has blocked Meta's Muse from buying on its site for customers, after asking Meta to leave the store out of the product and getting nowhere. Shoppers who send Muse to the site are shown a notice calling it an unauthorized agent and citing Amazon's terms. The objection is not automation: it is that the agent arrived unannounced and does not say who it is while it browses. For anyone building an agent that acts on someone else's site, this is the first clear case fought over terms of service rather than over the federal anti-hacking law.
GeekWireverified
Installing, reloading, updating, or removing a plugin no longer takes the whole installation offline. Session Share hands a chosen group of conversations to a teammate on another paired installation as text they can read but not continue. Updates now validate the next version against a private copy of the setup while the current Gateway keeps running. The conversation database changes in this release even with archiving switched off, so a verified backup before upgrading is the only way back.
OpenClawverified
In auto mode a classifier inspects shell commands and network requests before they run, and those checks were separate model requests charged as token usage. From this version Claude Code asks the server to perform them inside the session's own requests, and does not charge for them when the server answers. The default covers Enterprise plans, Claude API accounts, and the AWS, Bedrock, Agent Platform, and Foundry paths, subject to each platform's rollout. Where the server's checks cannot reach a session, the earlier billing returns and a one-time notice says so.
Claude Codeverified
Six models stop working across every Copilot surface on October 19, 2026, and each one has a named replacement. On Enterprise and Business the replacement enables itself unless an administrator has turned it off, so the remaining work sits in configuration that names a model in writing. Separately, Copilot code review reached general availability. Its overview comment now separates open findings from resolved ones and from issues it missed on an earlier pass, and every finding carries a title.
GitHub Changelogverified
Meta announced Muse on September 8, 2026 as a personal agent that does things rather than answers questions, and named iOS, Android and the web, with AI glasses still to come. The Mac app arrived nine days later, announced by Alexandr Wang on X rather than through the company newsroom. The difference is not only the platform. Until now Muse worked inside a virtual machine Meta runs, watched by a second agent that has to approve anything leaving for the internet; the Mac app works in files, apps and browser tabs on a machine Meta does not run.
Metaverified
Two changelog entries on September 17, 2026 extend Copilot reporting from how much is used to what is used. The usage metrics API now returns the most-used skills, custom agents, MCP servers, slash commands and plugins, with an interaction count for each. The impact dashboard separately reports how many people used each Copilot feature on at least two days in a 28-day window. Both are for administrators, and both come with counting rules that will mislead anyone who skips them.
GitHubverified
Google Labs has turned CC, its experimental personal agent, into one that a household shares. The agent now holds its own verified Google account, admits up to six members, and reads only the mail and files each of them hands over. It writes a shared morning brief, keeps the group calendar and task list, and fills in registration PDFs. The experiment is open on web and mobile to people 18 and older in the United States.
Googleverified
