~/news
24 digests · tech radar, twice daily
Anthropic released Claude Code 2.1.310 on October 23, bringing the Monitor tool and plugin monitors to Bedrock, Vertex, and Foundry (with telemetry or nonessential traffic disabled), and blocking…
On October 21, PyPI served a malicious LiteLLM 1.107.0 build between 11:39 and 13:23 UTC, and the Docker tags v1.107.0, latest, main-latest and main-stable were compromised between 11:46 and 14:20…
On October 21 Anthropic released API version 2026-10-21 and shipped new client SDKs and the ant CLI that send it by default: Python SDK 2.0.0, TypeScript SDK 1.0.0, C# SDK 13.0.0, Go SDK 2.0.0, Java…
DeepSeek released DeepInfer on October 20 under Apache 2.0, the in-house framework it uses to serve DeepSeek-V4.1-Flash in production, with a companion MIT library deepseek-recipe for API protocol…
Inception Labs shipped Mercury 3 on October 19, the third generation of its diffusion language model and more than 40 times larger in total parameters than Mercury 1. The company reports 1,068 tokens…
Pillar Security published an October 19 report on a remote code execution flaw in opencode that fired when a remote MCP server's OAuth discovery handed the client an attacker-controlled authorization…
DeepSeek published DeepSeek-V4.1-Flash-1017 on October 17 as a minor update to V4.1 Flash, reporting gains across reasoning, coding, agentic and visual benchmarks at unchanged API pricing. The same…
Together AI is offering Meta's Muse Spark Open at no cost through October 18 at 12 p.m. PT, as a promotional model id on its serverless inference API. The promo row bills input and output at $0.00…
Google moved Gemini 4 Argon from a pre-release announcement to general availability on October 13, opening it to developers on the paid Gemini API tier, in AI Studio and Android Studio, and to Google…
Check Point Research published an assessment of LiteLLM 1.77.7 on October 13, 2026 that found two vulnerabilities, CVE-2026-35029 and CVE-2026-59823, both resolved in LiteLLM 1.83.9. The…
Anomaly formally released OpenCode 2.0 on October 12, making it the project's main release three months after the public beta. A single auto-started local service now backs the terminal, web and…
Anthropic published a report on October 9 cataloguing four classes of unintended actions by Claude during evaluations and internal use: exploiting software vulnerabilities to run commands, bypassing…
MiniMax released M2.7 on October 11, describing it as a proprietary LLM built to power agents that also helped construct, monitor and optimize its own reinforcement-learning harnesses. Published…
GitHub made local sandboxing generally available on October 7 in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host, and it is included with a standard Copilot seat at no additional…
Day one of Pwn2Own Ireland 2026 in Cork (October 6) scored two AI-tool successes: Ikotas Labs exploited OpenAI's Codex cloud coding agent with a single argument-injection bug for $40,000 and 4 Master…
Anthropic released Claude Haiku 5.5 on October 7 at $0.10 per million input tokens and $0.50 per million output tokens for prompts up to 100K tokens, around 75% cheaper to run than Haiku 4.5, with a…
Mistral launched Mistral Large 4 as a public preview on October 6: a natively multimodal mixture-of-experts with roughly 1.05 trillion total parameters and about 49 billion active per token…
Google, JPMorgan, Weaviate, France's DINUM and the Indonesian city of Tangerang all acknowledged the same class of flaw in their MCP servers during September, and on October 5 Ars Technica published…
Vercel CEO Guillermo Rauch confirmed on October 3 that the company validated a KVM zero-day found through its Sandbox bug bounty, after researcher Paulos Yibelo announced a full guest-to-host escape,…
Starting October 9, 2026, Gemini Apps on a personal account without an AI subscription is limited to Flash-Lite, with Flash and Pro withdrawn. Google also added per-model effort levels and extended…
The Linux kernel CVE team published CVE-2026-80521 on 2026-08-26: a race in the afunix garbage collector where unixdeledge() frees a vertex without unlinking its sccentry, so a later…
Anthropic shipped v2.1.287 on 2026-10-01, headlined by Claude Mods, which let plugins modify deeper behaviour than before, plus a built-in You should know mod that runs a side agent watching the…
Google announced Gemini 4 Argon on 2026-09-30, the first model of the Gemini 4 generation, and it is rolling out first to a small set of trusted cyber defenders through the Fairwind Program rather…
Datadog Security Labs disclosed GHSA-632h-h47v-g4x4 on September 24, a remote code execution in OpenCode built from two separate bugs. The /global/upgrade endpoint parsed every request body as JSON…