Two frontier labs shipped cyber-specialized capability inside 48 hours, one gated behind a vetted-defender program and one subsidized by a billion dollars, while a specialized scanner already in curl's rotation found six real CVEs in a week where two labs' security products reported nothing new.

Two frontier labs shipped cyber-specialized capability inside 48 hours, one gated behind a vetted-defender program and one subsidized by a billion dollars, while a specialized scanner already in curl's rotation found six real CVEs in a week where two labs' security products reported nothing new.

Three agent launches in three days ship the same primitive, a human confirmation in front of the irreversible step, while a measurement of the retrieval layer those agents read finds six of ten citations outside the hundred-thousand most-visited sites.

The unit that now carries agent capability between machines is an installable Agent Skill fronted by an instruction file, and every governance control that shipped this week reaches models, MCP servers and source files instead.

Frontier models are now shipping in matched pairs built on shared foundations and separated by which safeguards an account is entitled to, which turns capability into a permission rather than a property of the model.

This week's announcements all describe machinery that sits between an agent's decision and the action landing, moving the safety boundary from a property of the weights to a runtime component that watches a job while it runs.

Anthropic shipped two models today that are the same model, and everything around them moves the control surface off the weights and onto the account, so who you are now decides what identical weights will do.

Four separate releases in 48 hours all rebuild the same layer, the boundary around an agent, and all four start from the assumption that the boundary will be crossed rather than that it will hold.

Four separate agent stories today each rest on one headline number, and in every case the number is accurate while the system underneath it behaves differently, starting with a commissioned 0.00 percent prompt-injection score that coexists with a working remote code execution chain.

Magnitude ships install-by-prompt as its documented happy path, which hands your coding agent a global npm install plus write access to its…

The empty findings lists in curl's viral AI-security comparison were a one-week delta from scanners already in the project's rotation, not…

Utopia's append-only decision ledger is enforced by Postgres triggers that its default single-role deployment is privileged enough to drop,…

An audit of 7,534 citations behind AI product recommendations found six in ten pointing outside the 100,000 most-visited sites, with three…

Anthropics/commerce-agents is worth reading as a boundary specification rather than a codebase, because its safety guarantees live in…

Claude Code 2.1.259 narrowed allowedMcpServers to servers users add, so a managed-mcp.json server your allowlist used to filter out now…

Which frontier model your organization may run is now decided by its data-retention posture rather than its subscription, and the exemption…

CL4R1T4S argues you cannot trust an output whose input you have not read, and then proves it by ending a one-screen README with a…