Skip to content
What are you looking for?. Open searchSR

Tags

enterprise

40 items
Agentsmedium signal

GitHub Copilot ships a local sandbox for agent commands and lets its CLI pick models from Ollama

On October 7, 2026, GitHub made local sandboxing for Copilot generally available in the Copilot CLI, the GitHub Copilot app, and VS Code sessions that use Agent Host, at no extra cost. The sandbox limits what a command Copilot runs can read, write, and reach on the network, and it is off until you or your organization turn it on. The same day the CLI gained a picker for models served by a local Ollama instance, and Claude Haiku 5.5 joined the model list for paid plans.

GitHub Changelogverified

Anthropic's illustration for the mods announcement: a hand-drawn hand placing a white block onto a wall of outlined bricks, on an orange background.
Agentsstrong signal

Claude Code mods are not sandboxed, and version 2.1.289 fixes a deny rule they could override

Anthropic introduced mods for Claude Code on October 1, 2026. They are TypeScript functions, shipped inside plugins, that can rewrite prompts, change tool calls, and redraw parts of the interface. The documentation says mods are not sandboxed and run with your permissions, which covers your files, environment variables, and API keys. On Team and Enterprise plans a built-in mod named sec-default loads first and restricts the mods that users install. Versions 2.1.288 and 2.1.289 fix several cases where permission rules did not hold.

Anthropicverified

CLAUDE CODE 2.1.2871M contextnow the default on Bedrock, Vertex, and Foundr
Agentsmedium signal

Claude Code 2.1.287 adds Mods and makes a 1M context window the default on cloud platforms

Anthropic released Claude Code 2.1.287 on October 1, 2026. The release adds Claude Mods, which let plugins modify deeper behavior, and a built-in mod in which a side agent flags things you might miss. Opus 4.7 and later and Fable now use a 1M context window by default on Bedrock, Vertex, Foundry, and the Claude apps gateway. Some MCP servers may stop connecting until you add one line to their configuration, and several shell writes that used to run now wait for approval.

Claude Codeverified

Agentsstrong signal

GitHub Copilot can now control desktop apps and run workflows defined in code

GitHub put two Copilot features into public preview on October 1, 2026. Computer use lets Copilot CLI and the GitHub Copilot app operate desktop applications on macOS and Windows, and it stays off until you turn it on. Dynamic workflows run a multi-agent process that is defined in code, and they are available on all Copilot plans. GitHub's documentation warns that computer use can pick the wrong control and that on-screen content can trigger unintended actions.

GitHub Changelogverified

Agentsmedium signal

Claude Code 2.1.286 fixes four cases of exposed credentials and tightens plugin install sources

Anthropic released Claude Code 2.1.286 on September 30, 2026. Four fixes stop credentials from appearing in MCP error messages, logs, and transcripts that were supposed to be redacted. Plugin installs now refuse npm sources that are git repositories or folders, and Remote Control sessions disconnect when an organization's policy turns the feature off. The release also corrects a spend meter that priced some cache writes at the cheaper rate, and it changes what bare mode does.

Claude Codeverified

Agentsmedium signal

GitHub Copilot's HydraFusion, which can run two models on one request, reaches VS Code and the Copilot app

HydraFusion sits in the model picker but is not a model. It chooses one of three workflows per request and can hand a task to two models in a row, one drafting and one checking. GitHub moved the research preview from Copilot CLI to Visual Studio Code and the Copilot app on September 30, 2026, for Pro, Pro+, Business, and Enterprise plans. Billing follows the tokens each model consumes, so a request can cost more or less than a single-model one.

GitHub Changelogverified

Agentsstrong signal

Meta extends Muse to small businesses while the agent hands one user's home address to a stranger

Meta announced Muse for Small Business on September 29, 2026: the agent now connects to 15 named services, from Shopify and Stripe to QuickBooks and Slack, plus Facebook, Instagram and Meta ad accounts. It is free for most uses, with subscription plans the post does not price, and it is available in the United States and Canada. The same day, The Verge reported that Muse had given a YouTuber's home address to a stranger on Facebook Marketplace after he chose the permanent permission option. Meta says nothing publishes, sends, or spends without approval; the incident shows what one approval can cover.

Meta Newsroomverified

Toolsmedium signal

ChatGPT gets Space, Pages, and shared team tasks on Pro, Business, and Enterprise plans

At DevDay on September 29, 2026, OpenAI added a document layer to ChatGPT. Space is a shared workspace for a team, ChatGPT, and the user's dot. Pages is a document type that agents and people edit together. Collaborative slides follow in the coming weeks, with export to PowerPoint and Google Slides. All three are limited to Pro, Business, and Enterprise plans. Business and Enterprise also get teams with scheduled tasks and an @ChatGPT mention in Slack and Microsoft Teams.

OpenAIverified

Agentsmedium signal

OpenClaw 2026.9.7 adds Sign in with ChatGPT and an OpenAI Agents API plugin

OpenClaw released version 2026.9.7 on September 30, 2026. It adds Sign in with ChatGPT as a login option next to Codex login and API keys, which OpenAI says lets Plus and Pro subscribers spend their plan allowance inside OpenClaw. A new plugin runs agents through the OpenAI Agents API. Updates now back up every database before migrating, admins can limit which models a role may use, and incognito sessions expire after 24 hours.

OpenClawverified

Agentsmedium signal

Nvidia ships an open-source sandbox for agents and a hardware watchdog that quarantines them

Nvidia announced the Open Agent Safety Platform on September 28, 2026. It pairs OpenShell, an open-source runtime under the Apache 2.0 license that confines an agent's file, process, and network access, with Sentry, a watchdog that runs on BlueField-4 data processing units and, according to Nvidia, stops an agent that leaves its boundary within milliseconds. Anthropic, Microsoft, Hugging Face, Salesforce, SAP, and OpenClaw are among the organizations Nvidia lists.

NVIDIA Newsroomverified

Agentsmedium signal

Claude Code 2.1.285 lets admins restrict API providers and fixes a token login that skipped org policy

Anthropic released Claude Code 2.1.285 on September 29, 2026. A new managed setting, allowedProviders, limits which API providers a machine may use. Two fixes matter for teams: sessions that authenticate with an auth token never loaded the organization's policy, and redacted logs could show a URL password. The release also adds a switch that turns off WebFetch and a command that opens the desktop app.

Claude Codeverified

Agentsmedium signal

Claude Code 2.1.284 stops plugins from pre-approving their own tools under managed permission rules

Anthropic released Claude Code 2.1.284 on September 28, 2026. The release closes a gap that let plugins from marketplaces, claude.ai, and npm pre-approve their own tools even when managed settings allowed only managed permission rules. It also validates a Foundry setting that went straight into a hostname, and adds Claude Sonnet 5.5.

Claude Codeverified

Toolsmedium signal

Microsoft's new Copilot app puts Cowork, Code, and Autopilot on usage-based billing

Microsoft introduced a redesigned Copilot app on September 25, 2026, with three tabs: Home, Code, and Autopilot. The per-user license still covers everyday chat and Office work. Cowork, Code, Autopilot, and frontier models such as Fable and Astra are billed by usage in Copilot Credits.

Microsoftverified

Connectorsmedium signal

Claude Tag can now use your own connectors when you ask it something in a Slack channel

Anthropic announced on September 24, 2026, that Claude Tag can use the connectors of the person who makes a request in a Slack channel. Until now it could reach only the connectors an administrator attached to the channel. The feature is rolling out on Team plans, with Enterprise to follow.

Claude Blogverified

Agentsmedium signal

The GitHub Copilot app can now sandbox local sessions, but the setting is off by default

Since September 23, 2026, the GitHub Copilot app can limit what a local agent session reaches on your machine: folders, network access, and Git and GitHub CLI credentials. The feature is in public preview and has to be switched on for each project. A day earlier the app gained OpenTelemetry export for administrators, and Copilot code review settings reached every plan.

GitHub Changelogverified

Agentsmedium signal

GitHub puts Grok 4.7 in Copilot at the same rate it charges for 4.6

GitHub started rolling out Grok 4.7 in Copilot on September 21, 2026. The model is billed at provider list pricing under usage-based billing, and the documentation puts it at $2.00 per million input tokens and $6.00 per million output tokens below 200K of context, exactly what Grok 4.5 and 4.6 cost in the same table. It reaches Copilot Pro, Pro+, Max, Business and Enterprise, and the model picker in eight places, from Visual Studio Code to Eclipse. For a company on Business or Enterprise, a new model switches itself on unless an administrator has already turned the default off.

GitHubverified

Agentsstrong signal

Claude Code 2.1.278 moved auto mode's safety checks to the server, where they are not billed

In auto mode a classifier inspects shell commands and network requests before they run, and those checks were separate model requests charged as token usage. From this version Claude Code asks the server to perform them inside the session's own requests, and does not charge for them when the server answers. The default covers Enterprise plans, Claude API accounts, and the AWS, Bedrock, Agent Platform, and Foundry paths, subject to each platform's rollout. Where the server's checks cannot reach a session, the earlier billing returns and a one-time notice says so.

Claude Codeverified

Agentsstrong signal

GitHub is retiring six Copilot models and has rebuilt the code review overview

Six models stop working across every Copilot surface on October 19, 2026, and each one has a named replacement. On Enterprise and Business the replacement enables itself unless an administrator has turned it off, so the remaining work sits in configuration that names a model in writing. Separately, Copilot code review reached general availability. Its overview comment now separates open findings from resolved ones and from issues it missed on an earlier pass, and every finding carries a title.

GitHub Changelogverified

Agentsmedium signal

GitHub's Copilot metrics now report which skills, MCP servers and slash commands get used

Two changelog entries on September 17, 2026 extend Copilot reporting from how much is used to what is used. The usage metrics API now returns the most-used skills, custom agents, MCP servers, slash commands and plugins, with an interaction count for each. The impact dashboard separately reports how many people used each Copilot feature on at least two days in a 28-day window. Both are for administrators, and both come with counting rules that will mislead anyone who skips them.

GitHubverified

Agentsmedium signal

Copilot code review resolves its own comments, and Lite reviews now run an ensemble

GitHub shipped the change on September 11, 2026. When a later commit addresses a review comment, Copilot now resolves that comment during its rereview, and feedback that still needs work stays open. The review agent also picked up the full set of shell tools from the Copilot SDK, so it can run builds, tests and targeted scripts against the code it is reading. The Lite effort level now runs an ensemble of agents instead of one, which GitHub measured at 47% more addressed high severity comments per review for about 8% less cost.

GitHub Changelog: Copilotverified

Modelsmedium signal

AWS added model caching to SageMaker HyperPod and measured about 60% faster scale-out

SageMaker HyperPod can now keep model weights on a node's local NVMe and pre-pull the container image, so a pod that used to wait minutes for downloads starts in seconds. AWS reports benchmarks across models from 57 GB to 145 GB showing around 60% faster scale-out, and an image cache that removes over two minutes of pull time, a 97% reduction. Those figures are the vendor's own and arrived without a description of the test. On the same day AWS made TwelveLabs Marengo 3.0 available as an embedding model in Amazon Bedrock Managed Knowledge Base, so a knowledge base can index what a video shows rather than only what was said in it.

AWSverified

Agentsmedium signal

GitHub retired MAI-Code-1-Flash across Copilot the same day it announced the change

GitHub deprecated MAI-Code-1-Flash on September 10, 2026, and the changelog entry carries that same date for both the announcement and the retirement. The model is gone from Copilot Chat, inline edits, ask mode, agent mode, and code completions. GitHub names MAI-Code-1.1-Flash as the suggested alternative and asks teams to update anything that calls the old model by name. On Copilot Enterprise the alternative does not show up until an administrator enables it in the model policies.

GitHub Changelogverified

Industrystrong signal

Kimi and DeepSeek users were quietly talking to Claude, Anthropic says

Anthropic's September 2026 misuse report describes distillation campaigns run out of seven Chinese labs. Two of them did more than harvest answers: Moonshot and DeepSeek forwarded their own customers' requests to Claude and showed Claude's replies as their own. The relayed traffic carried live database credentials, internal documentation and surveillance work, from people who had no idea a third vendor was reading it. Every figure below is Anthropic's, and none of it has been confirmed independently.

Anthropicverified

Connectorsmedium signal

Amazon Bedrock adds a ServiceNow connector and scheduled syncs to its managed knowledge bases

AWS published three changes to Amazon Bedrock Managed Knowledge Base on September 4, 2026. ServiceNow becomes a native data source, so knowledge articles and service catalog items are crawled without a custom ingestion pipeline. SharePoint, OneDrive, and Confluence can now be connected by signing in with your own credentials instead of waiting for an IT-issued service account. Sync scheduling arrives for every native connector, at daily, weekly, or monthly intervals.

AWSverified

Agentsstrong signal

GitHub Copilot switches GPT-6 Astra on by itself and leaves Claude Fable 5.1 off

GPT-6 Astra became generally available in GitHub Copilot on September 4, 2026, for the Pro+, Max, Business, and Enterprise plans. Claude Fable 5.1 reached the same four plans three days earlier. The two arrived with opposite administrator defaults: Astra is enabled automatically under default model enablement, while the Fable 5.1 policy is off until someone turns it on. Fable 5.1 is also the one that retains prompts and outputs, and the zero-retention exemption runs only to the end of the calendar year.

GitHubverified

Toolsmedium signal

Invisible Unicode characters from AI research turned up in a phishing campaign of 2.3 million messages a day

Microsoft published telemetry on September 3, 2026 for a phishing campaign that split financial words apart with invisible Unicode tag characters, the same block that AI security research made famous under the name ASCII smuggling. In the messages Microsoft sampled there were no hidden instructions for a model. The characters were there to break keyword matching, and daily volume passed 2.3 million messages. The defensive rule Microsoft draws from it fits in one line: normalize before you match, and do it upstream of anything a model reads as well.

Microsoft Security Blogverified

Agentsmedium signal

GitHub retires four Copilot models on October 2 and starts charging for seats up front on October 1

Three GitHub changelog entries landed on September 3, 2026, and together they change which models you can pick, what a new seat costs before anyone types anything, and whether you can sign up at all. Gemini 3.5 Flash, Gemini 3.6 Flash, Kimi K2.7 Code, and Claude Opus 4.7 go away on October 2, 2026, across every Copilot surface. Gemini 3.8 Flash arrives in its place on Pro, Pro+, Max, Business, and Enterprise. Signups for Business and Enterprise reopen for card and PayPal customers, but every assigned seat is now billed before the person using it gets access.

GitHubverified

Modelsstrong signal

OpenAI ships GPT-6 Astra at $10 per million input tokens, with enterprise access off by default

GPT-6 Astra went out on September 3, 2026, first to a limited set of organizations and then, over the following days, to ChatGPT Plus, Pro, Business, and Enterprise. In the API it answers to the name gpt-6-astra at $10 per million input tokens and $50 per million output tokens, and it is also served through Microsoft Azure and Amazon Bedrock. Enterprise workspaces do not get it automatically, because access is off by default at launch and an administrator has to turn it on. OpenAI also says the extra safety checks around this model can pause work in ChatGPT and Codex and stop it outright in the API.

OpenAIverified

Modelsstrong signal

Anthropic moves the monitoring record into the customer's own cloud account

Anthropic announced Enterprise Frontier Safeguards on September 1, 2026. It pairs zero data retention with automated misuse detection by keeping the activity data in the customer's cloud account rather than Anthropic's. The rollout is phased, and eligible customers get zero data retention on Fable 5 and Fable 5.1 until it reaches them. Anthropic charges nothing for it; the cloud provider bills the storage.

Anthropicverified

Agentsmedium signal

Copilot can now approve a pull request, if an administrator lets it

GitHub added an approval assessment to every Copilot code review, and a separate setting that lets Copilot submit a real approval. That approval counts toward a repository's required-approvals rule, which means a machine can satisfy a gate that used to need a person. It is off by default and configurable at three levels, down to which file paths Copilot may sign off on. A second changelog entry the same day gives individual user budgets an expiry date.

GitHubverified

Connectorsmedium signal

AWS Agent Registry is generally available and answers as an MCP server

AWS took Agent Registry out of preview on August 31, 2026. It is a private catalog of the agents, tools, skills, MCP servers, and custom resources an organization already runs, with search, approval, and audit trails on top. General availability adds provisioning as code, cross-account sharing, and automatic detection of agents running on AgentCore. The registry is also exposed as an MCP server, so an assistant in an editor can query it during a task.

AWSverified

Agentsmedium signal

Copilot's CLI moved to a Rust runtime and kept its TypeScript terminal

GitHub's weekly Copilot roundup for August 28 carries one change that is structural rather than cosmetic: the command-line agent now runs on a native Rust runtime, while the terminal interface it draws stays in TypeScript. Around it sit smaller changes that all point the same way, toward deciding once how the agent behaves instead of deciding again every session. GitHub reports the speedup but publishes no figure for it.

GitHubverified

Agentsmedium signal

Copilot in Visual Studio gets org-wide agents and a thinking-effort dial

GitHub's August update for Copilot in Visual Studio 2026 lets organization and enterprise owners publish custom agents that every repository in the organization can use. Supported models now expose Low, Medium and High thinking effort, so reasoning depth becomes a choice rather than a default. The Git agent will review uncommitted changes before you open a pull request, on GitHub and Azure DevOps alike. All of it lands on every Copilot plan, including the free one.

GitHubverified

Agentsmedium signal

GitHub sets three Copilot dates: seats paid upfront, one chat policy, longer retention

One changelog entry on August 28 carries three separate changes. From September 1, new Copilot Business and Enterprise seats bought by card or PayPal must be paid for before anyone can use them, and existing card customers move to upfront charges on October 1. No earlier than September 28, chat on github.com, chat in GitHub Mobile and the cloud agent become one experience under one policy that is on by default, and chat data then stays for the life of the account instead of 28 days. On the same date, the default effort level for Copilot code review moves from Lite to Balanced.

GitHubverified

Agentsmedium signal

Copilot's global model policy starts enforcing on September 1, and the default is on

GitHub is rolling out enforcement of the default model policy for Copilot Business and Copilot Enterprise through September 1. Models an administrator never configured stop being unconfigured and start following the policy, and the policy ships enabled. Two categories are held back regardless of what you set: open-weight models, and models GitHub's data retention agreement does not cover. Anthropic's Fable 5 is in the second group.

GitHubverified

Agentsmedium signal

GitHub Copilot moved into Slack and Microsoft Teams on the same day

Both shipped on August 21 in public preview. Mention @GitHub in a channel and the agent triages issues, investigates failures, writes changes in a cloud sandbox and opens a pull request, with the conversation attached. The interesting part is not the capability list, which is familiar, but the room it moved into: the place where work gets discussed rather than written.

GitHubverified

Industrymedium signal

OpenAI introduces Private Safety Processing

On August 19, OpenAI released a preview of a system that recognizes abuse patterns across several linked sessions without retaining user content. The idea is that only a narrowly defined safety signal is passed on, without exposing the prompts and responses themselves, which keeps the zero data retention guarantee for paid API customers in force. The target is attackers who split a request across several conversations to avoid detection. The approach is the opposite of Anthropic's policy, which keeps data for 30 days with controlled human review on its covered models, the Mythos class among them, and holds to non-retention outside that set; if you are choosing a vendor for a project with sensitive client data, that difference is worth understanding before you sign. Wider rollout and a technical paper were announced for September.

TechCrunch / OpenAIverified