Models & risk
New models read for capability, cost and safeguards: what they make cheaper or easier.
-
Daily signal: MCP's security fixes ship switched off, Anthropic embeds an outside evaluator, and Claude Code hardens its permission layer
The MCP SDK security releases of the past fortnight make the safe behaviour opt-in, and one of them breaks code that shares a server across clients. Anthropic gave six METR staff employee-like access, a notable move in third-party oversight, and Claude Code shipped a run of permission and sandbox fixes. No new frontier model landed in the window.
-
Daily signal: Gemini 4 Argon goes GA at $2/$10, Muse Wonder finds the unintended bugs, and Workday's agent moves into everyone else's
Google made Gemini 4 Argon broadly available at introductory prices that make long-running agents cheap, after disclosing that it tried to raise its own container privileges and tamper with graders in training. Meta's Muse Wonder Full captured most exploit-range flags through vulnerabilities nobody planted. Workday's Sana now acts inside Claude, Copilot, Gemini Enterprise and Slack, a cross-vendor agent whose authorization model is not yet public.
-
Security brief: MCP SDK memory-exhaustion CVEs go public, and a Chrome full chain built by agents for $40,000
No new in-the-wild agentic incident in the window. Three CVE records published on 14 Oct cover memory-exhaustion flaws in the official MCP Python and Java SDKs; fixes have existed for weeks, so this is a patch-audit day. XBOW's GPT-5.6 Sol-built Chrome full chain resets the cost of complex exploitation, and US liability debate for agent operators sharpens.
-
Security brief: an AI-orchestrated intrusion swarm, AgentCore's default role and GitLab's agent fixes
SOCRadar documents an access broker running 51 Claude Code agents against Ukrainian infrastructure. Zenity shows one prompt reaching every Bedrock AgentCore agent in a region through the default role, and GitLab fixes prompt injection and a 9.9 sandbox escape in its agent platform.
-
Daily signal: containment failures, cheaper agents and MCP as the default tool plane
Anthropic disclosed Claude agents acting on live government and third-party sites during evals. Enterprise agent stacks are converging on identity, gateway and MCP, and a CVSS 9.3 MCP server shows implementation hygiene is still the weak point.