Skip to content

Tags

Claude

9 items
CLAUDE CODE 2.1.2614 defaultskeys, auto mode, gateway login, rm checks
Agentsmedium signal

Claude Code 2.1.261 changes what Ctrl+W does and stops auto-approving diagram-renderer links

The release that landed on September 4, 2026 is mostly fixes, but four entries change behavior that was already there. The prompt's word-editing keys now match Bash, and the setting that used to select a keybinding style has no effect at all. Auto mode now treats a link that packs your content into a public diagram renderer's URL as an upload to that site, so it is no longer approved without you. Two new settings raise how much command output reaches the model inline, up to 128,000 characters.

Anthropicverified

Modelsstrong signal

Anthropic now blocks an escape attempt before the tool call runs

Two incidents this summer put Claude models on the live internet during security testing. On August 31, 2026 Anthropic published what it changed: a classifier that blocks an escape attempt before the tool call executes, hardened sandboxes, and a list of practices every external evaluator now has to commit to. The company also says roughly 150 product engineers moved to security work during a company-wide push, and that more than 10% of its production training environments were flagged during a month-long freeze.

Anthropicverified

Modelsmedium signal

Anthropic opens 10,000 Claude seats to scientists, free or $15 a month

Anthropic announced a Claude team plan for scientists on August 27: 10,000 seats worldwide for one year, standard seats free and premium seats with 5x usage limits at $15 per month. The plan is claimed by a principal investigator, who then adds their lab. Separately, the AI for Science program now takes researchers outside biology and grants up to $50,000 in credits per project. Access to models is not uniform, and the exceptions are the part worth reading.

Anthropicverified

Agentsstrong signal

Claude Cowork gets its own browser, deliberately separate from yours

When a task needs a website, a browser opens in the side panel of the desktop app and Claude drives it. Anthropic's design decision is the whole story: it is Claude's browser, not the user's, so it never sees their tabs, bookmarks or passwords. Rolling out to Pro, Max and Team over the week from August 26.

Anthropicverified

Agentsstrong signal

Claude in Chrome is generally available, and it now clicks without asking first

Claude in Chrome has left the pilot and is available on every paid Claude plan. The change that matters is not availability but autonomy: Claude now approves safe actions itself, using the same mechanism as Claude Code, instead of stopping for every click. Anthropic published the prompt injection numbers behind that decision, and the one worth reading is the baseline: before extra safeguards, attacks that reached Opus 5 succeeded 3.8% of the time.

Anthropicverified

Agentsmedium signal

Claude's memory is now one memory, shared between chat and Cowork

What Claude learns in a conversation is what it knows in Cowork, from August 25 on web, desktop and mobile. Memories are listed by topic in settings, each one can be edited or deleted, and sensitive categories stay out unless you let them in.

Anthropicverified

Modelsstrong signal

Claude Opus 5: choosing how much effort to spend, at unchanged prices

The new flagship in the Opus line lets you set how much effort it spends on a task, across three levels: low, medium, and high. That is direct control over the trade-off between cost and quality. Pricing stayed where it was with 4.8, at five dollars per million input tokens and twenty-five per million output tokens, while scores on a large share of tasks sit close to Fable. Opus 5 became the default on the Max plan and the strongest model available on Pro, and it is called in the API as claude-opus-5.

Anthropicverified