Stack layer
Anthropic collapses Cowork and chat into a single Claude, rolling out to Pro and Max first
Simon Willison's Blog (Anthropic)
Stack layer / Threat pattern
Plugin4Shell: One SHA-Pinning Bug Gives Zero-Click RCE in Claude Code, Codex, Copilot and Gemini CLI
Help Net Security (corroborated by The Register)
Policy dependency / Stack layer
Claude Code 2.1.277 reads AGENTS.md when there is no CLAUDE.md, and subagent output now carries an anti-spoofing header
Claude Code changelog
Policy dependency / Stack layer
Vercel Sandbox can now run Terminal-Bench, SWE-bench and OSWorld with a single --env vercel flag
Vercel Changelog
Stack layer / Contrast
A Staleness Tracker Shows GPT-6 Astra Shipped More Than Four Months Behind Its Own Training Cutoff
stale.jock.pl / Hacker News (79pts, 47 comments)
Policy dependency / Threat pattern
Rust's crates security team warns of an active campaign social-engineering maintainers over fake video calls
Simon Willison's Blog (Rust Blog)
Stack layer / Contrast
MiniMax open-sources its terminal coding agent under MIT with bring-your-own-model support
GitHub / MiniMax-AI (via r/LocalLLaMA, 125 upvotes)
Stack layer / Threat pattern
WSO2 Ships Agent Manager GA With MCP Governance and a Kubernetes Sandboxed Runtime
InfoQ