AWS made Kiro web search available in AWS GovCloud (US), with citations, automatic use for current information, organization-wide disable controls and per-agent capability rules for removing or blocking web search and fetch tools.
Why it matters: Government coding agents can now retrieve current external information without leaving the GovCloud product path, but web access expands the prompt-injection, data-egress and provenance boundary. The useful change is the combination of search with explicit…
Pydantic AI's 2.58–2.61 patch train closes a telemetry leak of MCP URLs, tokens and headers; a UI-adapter path that could execute client-chosen tool arguments without a model request; attacker-controlled HTML conversion that could delay unrelated work; and later fail-open InputGuardrail, BrowserUse secret-redaction and capability-manifest persistence gaps.
Why it matters: The affected paths cross credentials, client-supplied history, web content, browser tools and guardrails—the exact places teams often assume the framework has already enforced a boundary. Fixing the code does not remove secrets from historical traces or…
DeepSeek opened developer access to the search and fetch services behind its own web and app experiences. The vendor describes a multilingual index spanning hundreds of billions of pages and says the service filters SEO spam, generative-engine manipulation and low-quality AI-generated content.
Why it matters: Developers gain another retrieval surface for grounded agents and research workflows, but the index, ranking and filtering layers are controlled by one vendor. Source diversity, freshness, omission and prompt-injection behavior need measurement before the…