AWS released a sample that runs each Claude Code task in a separate Bedrock AgentCore runtime session inside the customer's AWS account and returns a GitHub pull request for review. The design uses Bedrock model calls, short-lived GitHub tokens, a prompt guardrail and optional private VPC networking.
Why it matters: The reference makes remote coding-agent isolation and human merge review concrete without requiring a laptop to stay online. It also concentrates repository credentials, network policy and generated code inside a cloud runtime that must be configured and…
Anthropic published a privacy-preserving study of 207,000 Claude and Claude Code research sessions. It reports heavier relative use in formal sciences, with data analysis representing about one-third of Claude sessions and nearly half of Claude Code research sessions.
Why it matters: The study supplies behavior evidence about where scientists actually use assistants rather than only surveying intended adoption. It also exposes a gap between common use in analysis and writing and scientists' stated importance of idea generation and data…
Ollama 0.40.14 applies cloud-model output limits when launching Claude Code, verifies ChatGPT routing before Codex setup, retries ChatGPT disconnects, preserves packaged sampler defaults on OpenAI-compatible endpoints and keeps readable input and refusal history in Responses requests.
Why it matters: The fixes close silent configuration drift between local and cloud paths: model limits, sampling and prior refusals now survive compatibility layers more predictably. They also make broken ChatGPT routing fail earlier.
Docker Agent 1.155 added standalone SSE configuration, structured Claude Code elicitation, a CloudGPU provider and fixes for MCP environment precedence and streaming termination. Version 1.156.1 then published generated TypeScript wire types and Zod schemas from the Go source.
Why it matters: Elicitation, environment precedence and finish reasons affect whether an agent asks before acting and records a complete answer; generated SDK types reduce drift between Go servers and TypeScript clients.
Agent Deck 1.16.35 adds an opt-in guarded retry for swallowed Codex submits, records Claude and Codex tool-call spans in trace.db with a trace CLI, logs dropped Codex notification reasons and introduces managed configuration plus opt-in crash reporting. It also updates x/net for two cited Go advisories and ships a broad set of session, status, MCP-pool and restart fixes.
Why it matters: Operators supervising long-lived coding agents gain evidence for missing submits and cross-harness tool calls, while the guarded retry addresses a failure mode that can otherwise look like idle completion. Tracing and crash telemetry also create new local…
Anthropic renamed the $200 monthly Max 20x consumer plan to Ultra. Verified Ultra accounts no longer have the rolling five-hour usage limit, while the weekly allowance remains 10 times Pro; existing Max 20x subscribers move automatically without a price change.
Why it matters: Removing the short session window makes long Claude and Claude Code jobs less likely to stop mid-task, but it does not create unlimited use: the shared weekly pool, model-specific limits and discretionary capacity controls remain.
Cursor said a malicious Anthropic.claude-code 2.1.313 package was available in its extension marketplace for about 11 hours and reached at most 5,000 users. The package collected host details, added an SSH key and installed persistence; Cursor removed it, rebuilt the marketplace and published indicators and cleanup scripts.
Why it matters: AI-tool marketplaces can turn a familiar vendor name into a supply-chain execution path. Uninstalling is insufficient here because the payload drops independent persistence, so affected hosts need incident response and credential review.
Anthropic released case studies and linked technical reports from six drug-development partnerships. The reported work spans antibody design and lab iteration, manufacturing-document review, regulatory drafting and clinical-planning analysis; examples include roughly 35,000 generated antibody designs, about 1,010 lab-tested variants and preclinical mouse results in a rare-disease program.
Why it matters: The evidence moves beyond a static benchmark into repeated design, lab and documentation loops across real programs. It is still early, heterogeneous and largely reported by Anthropic and its partners, so it is evidence about workflow potential rather than…
Orca 1.4.240 adds searchable browser history, preserves Claude turns and retained messages across clients, clears stale Codex subagent state, keeps running Codex work visible through side conversations and adds approval cards for MCP tool calls that do not require forms.
Why it matters: Multi-agent workspaces fail when the interface disagrees with the underlying session about what ran, finished or still needs approval. This release concentrates on that state boundary across desktop, browser, phone, SSH and paired hosts.
GitHub's Copilot usage API now reports configured names for custom agent components and adds a totals_by_client breakdown for model traffic from OpenCode, Claude Code, Codex, Zed, Copilot CLI, cloud agents, code review and other clients. Reports include requests, sessions, tokens, model and selection mode alongside the optional peer-comparison dashboard.
Why it matters: Administrators can see Copilot consumption outside traditional IDE telemetry and distinguish internal agent components. The same detail can expose sensitive naming or create false precision when client IDs, request counts or opt-in peer groups are treated as…
Claude Code 2.1.319 moves MCP task tool calls to the background, adds permissions.denyInsteadOfPrompting so unattended tools can fail instead of waiting, and changes auto-mode behavior when server checks are unavailable. It also adds gateway spend, pooled-budget, JSON-log and policy warnings.
Why it matters: The release changes how unattended work progresses and fails: background tasks reduce blocking, while hard denial and a nonzero headless exit when safety checks are unavailable make policy failure visible to automation.
Agent Deck 1.16.28 rebuilds the terminal manager for Claude, Gemini, OpenCode and Codex with Go 1.26.9 and golang.org/x/net 0.60.0. The maintainer says this clears thirteen govulncheck advisories carried by 1.16.27, while noting that the cited HTTP/2 HPACK crash was not reachable because Agent Deck does not serve HTTP/2.
Why it matters: Agent supervisors sit beside credentials, prompts, repositories and long-lived sessions. Even when one listed flaw is not reachable, shipping binaries on patched runtime and network libraries narrows avoidable exposure in a tool that coordinates multiple…
Anthropic shipped Claude Code 2.1.294 and 2.1.295. The releases repair instruction-based guard hooks, add fail-closed onFailure behavior for command and HTTP hooks, and strengthen gateway routing, model filters, request IDs, MCP reconnection and unattended retry limits.
Why it matters: Hooks that silently allowed an action after failing to start or timing out weakened an important policy boundary. Fail-closed behavior, model-scoped upstreams and bounded retries give operators more explicit controls over agent authority and provider failover.
StepSecurity added Agent Skills inventories for developer machines and GitHub repositories. The product discovers skill folders used by 18 coding agents, records source and content hashes, flags bundled code, hooks and shell execution, and shows declared tool approvals and managed provenance where available.
Why it matters: Agent skills can travel from a laptop into a repository and execute with developer privileges while looking like documentation in review. A cross-device and repository inventory makes that supply-chain surface visible before a skill spreads further.
StepSecurity reported that tensorlake 0.5.144 on npm stole developer credentials, attempted to spread through packages and repositories, and installed a token monitor that deletes the user's home directory if the stolen GitHub token is revoked. The package was built from the compromised upstream main branch and carried npm provenance.
Why it matters: The incident shows why provenance proves build origin, not code safety, and why routine token revocation can be destructive when malware monitors credential validity. It also used Claude and VS Code project configuration as persistence and propagation paths.
Anthropic followed Claude Code 2.1.292 with 2.1.293, making Haiku 5.5 the default Haiku tier and fixing compaction action state, HTTP MCP memory use, queued messages, agent tools, permissions and path-scoped rules. It also reverses the scheduled-task recovery fix shipped one release earlier.
Why it matters: The rapid reversal changes whether unattended tasks recover after restart, while the remaining fixes affect context preservation, tool availability and long-running MCP reliability. Teams need version-specific canaries rather than assuming every point…
AWS made Claude Opus 5.5 and Claude Sonnet 5.5 available on Amazon Bedrock in AWS GovCloud (US). The bedrock-runtime endpoint is available in US-East and US-West with Guardrails and invocation logging; the Anthropic-compatible bedrock-mantle endpoint is available in US-West with server-side tools, background inference and Projects.
Why it matters: Regulated teams now have a GovCloud path for newer Claude models, but endpoint choice changes the control surface. Logging and Guardrails live on bedrock-runtime, while Mantle offers Anthropic-native features, so compliance evidence cannot be inferred from…
AWS released the `aws-ai-ml` skill through its Agent Toolkit for AWS. MCP-compatible coding agents including Kiro, Claude Code and Codex can use it to benchmark SageMaker endpoints, compare runs, recommend deployment configurations and generate executable SageMaker Python SDK v3 code.
Why it matters: Inference sizing and benchmarking become an inspectable agent workflow rather than a sequence of manual console decisions. The skill can shorten exploration, but it also places deployment code, benchmark jobs and cloud spend behind the agent's AWS identity.
Airia made its support for Claude Enterprise inference hooks generally available. One organization-level configuration can evaluate prompts and connected-tool results against enterprise policies before Claude processes or returns them, issue an allow or deny decision across Claude chat, Claude Code and Claude Cowork, and trigger alerts, tickets or review escalations.
Why it matters: The release moves a third-party governance layer from retrospective monitoring into the request path. That can reduce policy drift across Claude surfaces, but it also makes the policy engine's coverage, latency, availability and bypass behavior part of the…
Claude Sonnet 5.5 is available on Anthropic's platform, apps, AWS, Google Cloud, Microsoft Azure and GitHub Copilot. Anthropic keeps API list prices at $2 per million input tokens and $10 per million output tokens while adding effort controls, cyber fallbacks and a migration requirement for thinking-off clients.
Why it matters: Teams get a lower-tier model positioned for high-volume coding and knowledge work, but model identity, effort defaults, preserved thinking and cyber fallback behavior can change task quality, cost and reproducibility.
Google open-sourced GKE Agentic Migration, an agent plugin and local MCP server that inventories checked-in EKS infrastructure, drafts GKE Terraform and Kubernetes changes, runs deterministic validation and opens pull requests instead of applying changes to live clusters.
Why it matters: The design shows a useful pattern for consequential agent work: keep source control authoritative, separate generative translation from deterministic checks, retain durable state, isolate roles and require approvals at the deployment boundary.
Anthropic's new life-sciences lab reported that roughly 950 Claude agents searched more than 200,000 reverse transcriptases, narrowed 3,500 candidate systems to 20, and flagged an array-associated reverse transcriptase system whose repeat RNA expression was then tested by human scientists.
Why it matters: The work is a concrete example of agents scaling hypothesis generation while humans retain experimental validation. It also exposes the operational shape of AI-assisted discovery: massive candidate generation, staged filtering and costly expert follow-up.
Anthropic released Claude Opus 5.5 across its API, Claude apps and Claude Code. The model uses adaptive thinking, keeps a 1 million-token context window, and is priced at $4 per million input tokens, $20 per million output tokens and $0.20 per million cache-read tokens.
Why it matters: The release changes the capability-cost choice for long-running coding and knowledge work. Anthropic reports performance near Fable 5.1 on most work with a 40% lower typical task cost than Opus 5, but its strongest benchmark comparisons use different effort…
Anthropic redesigned Claude Projects around a coordinator that scopes goals, delegates to parallel Claude Code cloud sessions, reviews outputs and assembles results. Threads use separate branches and repository copies, share project memory and a library, and can keep working after the user steps away.
Why it matters: Projects moves Claude from a folder of context into a durable multi-thread agent surface. Shared memory and parallel branches can preserve momentum, but they also create new collision, provenance, usage and shutdown risks when several workers change related…
Salesforce launched AIforce as a governed interface layer for exposing Salesforce data, permissions, workflows and actions to external AI surfaces. Its first Claudeforce integration makes a preconfigured Salesforce MCP server and 37 sales skills available in Claude beta, while a Claude Code development plugin adds more than 40 Salesforce skills.
Why it matters: Users and agents can query records, update CRM data and trigger workflows without opening Salesforce. The convenience moves authentication, delegated authority, record writes and model-provider data handling into one cross-vendor boundary.
Anthropic released Claude Fable 5.1 broadly and Claude Mythos 5.1 through trusted-access programmes. Both expose a one-million-token context window, 128,000-token maximum output and adaptive thinking. Anthropic's Enterprise Frontier Safeguards add customer-controlled cloud storage, customer-managed keys and optional automated misuse review for eligible deployments.
Why it matters: The release combines a stronger long-running agent model with explicit differences in access, retention, storage and safeguard policy. Those boundaries can change privacy, compatibility and completed-task cost even when the underlying model is the same.
LiteLLM 1.99.0 adds an OAuth authorization-code flow with PKCE for its CLI, stores credentials and refresh tokens in the operating-system keychain, can configure Claude Code at login, and accounts for batch spend through enqueue limits, refunds and atomic cost claims designed to avoid double billing across polling workers. It also exposes configurable routing classifiers and provisioned-throughput declarations.
Why it matters: A model gateway now sits directly on identity, credentials, routing, rate limits and cost attribution. Mistakes in those paths can cause secret leakage, duplicate spend or traffic shifts even when the underlying model works correctly.
Anthropic reported a pilot in which Stanford, Oxford, and METR researchers designed analyses over roughly 250,000 Claude and Claude Code conversations from April and May. Anthropic ran the privacy-preserving aggregation, a third party audited the privacy process, and project-level aggregate data was released publicly.
Why it matters: External questions over real product use can expose patterns that lab-authored studies or public chat datasets miss. The pilot also makes the trade-off visible: privacy-preserving aggregation protects raw conversations but makes category errors harder for…
Reuters and the Financial Times reported that Anthropic agreed to lease roughly 460 megawatts of NVIDIA Vera Rubin compute from Nscale's planned West Virginia campus for about $45 billion over six years, with access expected to begin in late 2027.
Why it matters: If confirmed, the agreement would turn a large future power and accelerator block into a single-customer commitment and deepen Anthropic's dependence on multiple external compute providers ahead of projected demand growth.
Anthropic extended Claude Security's Enterprise public beta from bounded repository scans into continuous change-aware scanning, automatic fix and reopen tracking, editable threat models, cross-repository projects, role-based controls, webhooks, an API and an MCP connector while retaining human review for patches.
Why it matters: The update turns a point-in-time model-assisted scan into an operational vulnerability-management loop, where repository scope, threat-model quality, triage authority, integration tokens and proof of remediation determine whether findings improve security.
Anthropic reported degraded performance across claude.ai, the Claude API, Claude Code, and Claude Cowork on August 18. An intermediate update named Mythos 5, Fable 5, Opus 5, Sonnet 5, Haiku 4.5, and other models; the final report confirms Opus 5 impact from 16:11 to 18:23 UTC.
Why it matters: A shared model-service incident can disrupt consumer, API, coding-agent, and workplace-agent surfaces together. Teams need provider-independent task state and recovery controls instead of treating each client as a separate availability boundary.
Anthropic added beta Compliance API coverage for Cowork on desktop, web, and mobile and for Claude Code in the CLI and desktop app. New session endpoints return server-hosted transcripts containing prompts, responses, web and MCP tool calls, skills and artifacts, plus verified user, organization, session, message, and timestamp metadata.
Why it matters: The update closes an audit and eDiscovery gap by putting agent-session content and tool activity beside existing Claude chat records instead of requiring a separate logging stack for each surface.
The ColluSkill preprint splits a malicious objective across individually plausible agent skills whose handoffs, order, and shared artifacts create the harmful behavior only in combination. Across six scanners, the authors report a 96.0% average attack-success rate; their joint installed-skill scanner, ChainGuard, reduced it to 22.5% while passing 99.5% of benign samples.
Why it matters: Per-skill review can miss the actual security boundary when agents compose tools, artifacts, and instructions across an installed skill set.
AgentConnect released an Apache-2.0 control plane that routes messages, webhooks, and schedules across Claude Code, Codex, Gemini CLI, ACP agents, and common collaboration channels.
Why it matters: Cross-agent messaging and scheduled triggers become inspectable infrastructure instead of ad hoc terminal sessions, bot scripts, and hidden handoffs.
HarnessSafe executes 328 persistent-carrier attacks across memory, skills, tools, subagents, summaries, and shared artifacts, finding large containment differences for the same model across harnesses and inference backends.
Why it matters: Agent security cannot be inferred from a model name when the surrounding harness and serving path change whether malicious state persists or executes.
Skill-Use pairs 79 real skills with 177 executable tasks across nine domains and two harnesses; the strongest configuration reached only 0.613, while triggering and procedural compliance failed independently and rankings changed by harness.
Why it matters: A good skill document has no value when an agent fails to retrieve it, misses required steps, or crosses its forbidden operations.
GDPevo's public release contains 240 tasks across 24 groups spanning CRM, ERP, finance, healthcare, legal, analytics, and engineering, with business rules split across training and held-out tasks.
Why it matters: The benchmark is designed to distinguish genuine transfer from repeatedly solving variations whose full rules were already visible.
OpenAI compiled five Codex and three Codex-plus-Claude-Code projects spanning packaging, optimization, language migration and GPU redesign. Contributors repeatedly emphasized external correctness tests, staged changes, representative workloads and long-term stewardship.
Why it matters: The field report makes scientific coding-agent value concrete while showing that domain experts shift from implementation toward specification, verification and maintenance ownership.
AWS released Coding Agent Insights for Codex, Claude Code and GitHub Copilot telemetry. OpenTelemetry dashboards track tokens, latency, tool calls, approvals, organizational attribution and correlations with commit or pull-request velocity.
Why it matters: Coding-agent adoption can be measured by team, model and cost center instead of relying on anecdotes, seat counts or self-reported time savings.
Anthropic announced a $65 billion Series H at a $965 billion post-money valuation and said annualized revenue had crossed $47 billion earlier in May. The round includes strategic infrastructure partners and follows agreements for up to five gigawatts each from Amazon and Google-Broadcom plus SpaceX GPU capacity.
Why it matters: Frontier AI is becoming a capital and energy market as much as a software market, with labs financing infrastructure at hyperscaler scale.
Anthropic released Claude Opus 4.8 at the existing $5 per million input and $25 per million output token price. The launch also added user-selectable effort, a 2.5-times-speed fast mode, mid-task system messages and a research preview of Claude Code dynamic workflows that can coordinate hundreds of subagents.
Why it matters: Inference effort and multi-agent scale are becoming product controls rather than hidden model behavior, letting teams trade cost and latency for reliability by task.
Anthropic said it signed for all compute capacity at SpaceX's Colossus 1 data center, giving it more than 300 megawatts and over 220,000 NVIDIA GPUs within a month. It simultaneously doubled Claude Code five-hour limits, removed peak reductions and raised Opus API rate limits.
Why it matters: Compute contracts are directly shaping customer product limits, while frontier labs diversify across GPUs, TPUs and Trainium rather than relying on a single cloud.
Anthropic released ten finance-agent templates for tasks including pitchbooks, KYC screening, model building, ledger reconciliation and month-end close. Each combines skills, governed connectors and subagents, shipping as Claude Code or Cowork plugins and Managed Agent cookbooks with tool permissions and audit logs.
Why it matters: Reusable agent products are becoming domain workflows that bundle instructions, approved data and permissioned tools instead of relying on a polished system prompt.
Anthropic released connectors for creative tools including Adobe Creative Cloud, Affinity by Canva, Autodesk Fusion, Blender, SketchUp, Ableton, Resolume, and Splice. The integrations let Claude tutor users, invoke tool capabilities, script repetitive work, bridge formats, and coordinate production pipelines.
Why it matters: AI assistants are moving from generating isolated assets to operating across the software that creative professionals already use.
Anthropic Labs launched Claude Design for creating and refining software prototypes, presentations, one-pagers, and other visual artifacts. The preview can ingest design-system context and export work to formats and tools including PowerPoint, Canva, and Claude Code.
Why it matters: AI design systems are connecting ideation, brand context, editable business artifacts, and implementation handoff in one iterative workflow.
Anthropic opened a limited Claude Code Security research preview for Team and Enterprise customers and offered expedited access to open-source maintainers. The service reasoned across codebases for context-dependent vulnerabilities, rechecked findings through a multi-stage verification process, assigned confidence and severity, and proposed patches for human approval.
Why it matters: AI code review moved beyond known-pattern scanning toward business-logic and cross-component flaws that traditional static analysis often misses.
Apple's Xcode 26.3 release candidate added a native Claude Agent SDK integration with subagents, background tasks, plugins, project-wide reasoning, and Apple-documentation search. Claude could also inspect Xcode Previews, iterate on SwiftUI output, and expose Xcode capabilities to Claude Code through MCP.
Why it matters: Apple developers gained an agent loop that can write code, inspect the rendered interface, and correct its own work without leaving Xcode.
Anthropic released Claude Opus 4.5 for coding, computer use, and complex professional workflows across Claude, the API, and Claude Code.
Why it matters: Flagship models were being judged on whether they could complete consequential multi-step work with fewer interventions, not merely answer difficult questions.
Anthropic disclosed a campaign it attributed with high confidence to a Chinese state-sponsored group, saying Claude Code was manipulated to automate most intrusion work across roughly 30 targets.
Why it matters: Agentic tools can compress reconnaissance, exploit development and data triage into machine-speed workflows with relatively few human decision points.
Anthropic introduced Agent Skills: directories containing metadata, instructions, scripts and resources that Claude can discover and load only when relevant to a task.
Why it matters: Reusable procedural knowledge can specialize a general agent without repeating large prompts or building a separate bespoke agent for every workflow.
Anthropic released Claude Haiku 4.5 across Claude and its API at lower pricing than Sonnet, positioning it for fast coding, subagents, and high-volume tool use.
Why it matters: The useful agent stack was becoming hierarchical: expensive models could plan or review while cheaper fast models executed parallel subtasks.
Anthropic released Claude Sonnet 4.5 across Claude, the API, and Claude Code, alongside an Agent SDK and product changes aimed at longer-running coding and computer-use workflows.
Why it matters: The release packaged a model, coding surface, and agent-development kit together, reinforcing that frontier competition had shifted toward complete work systems.
Anthropic’s threat-intelligence report described Claude misuse in data extortion, North Korean fraudulent employment and ransomware development. One disrupted actor used Claude Code across reconnaissance, credential theft, network intrusion, data analysis and targeted extortion against at least 17 organizations.
Why it matters: Threat actors are integrating agents across complete attack workflows, lowering skill barriers and increasing the speed and scale of abuse.
Anthropic added remote MCP support to Claude Code, allowing the coding agent to use tools and resources from services such as Sentry and Linear through a server URL. Native OAuth removed the need to distribute long-lived API keys for supported servers.
Why it matters: Coding agents could draw live context from operational and project systems without every developer running and maintaining local integration servers.
Anthropic released Claude Opus 4 and Sonnet 4 with extended thinking, parallel tool use, and improved coding; Claude Code moved to general availability with IDE and terminal workflows.
Why it matters: A frontier model family was packaged around sustained professional work rather than chat alone, with coding agents becoming a supported product rather than a research demo.
Anthropic released Claude 3.7 Sonnet as a hybrid model that could answer directly or use extended thinking, with an API thinking budget. Claude Code launched in research preview as a terminal-based coding agent.
Why it matters: Reasoning control and software action arrived together: builders could trade cost and latency for harder tasks while testing an agent inside real repositories.