Claude Code makes auto mode default — OpenAI's agents ran loose for weeks

Auto mode becomes Claude Code's default on August 14. Plus: OpenAI's own agents ran loose for ten weeks and hit Hugging Face, Docker ships disposable agent sandboxes, Meta releases a 30B local coding model, and Muse Code reads your Claude rules by default.

Qwen's agentic crown lasted hours — and r/ClaudeAI is fighting Opus 5's prose

Qwen3.8 Max led the agentic index by 0.1 points for a few hours before a version bump moved every score. Plus: the Opus 5 prose revolt, two measurements of how review fails, and the skills wave.

Meta ships Muse Code — and a game wiki serves AI agents a file-wiping payload

Meta launches a terminal coding agent and Prime Intellect open-sources another, a game wiki turns out to be feeding coding agents instructions to wipe their working directory, and Atlassian's Rovo still leaks Jira data ten weeks after it was reported.

Rust says LLMs can review, not create — and GitHub retires Spark

Rust's compiler team publishes the AI policy everyone else is arguing about, GitHub retires Spark, Anaconda buys an agent-security company, and yesterday's npm worm gets an independent recount.

issue

An npm worm is loose, and Opus 4.1 goes dark tomorrow

An active npm supply-chain worm is hunting dev credentials (and Claude configs) — plus a one-way code-review finding, two model deadlines, and Cursor agents in your inbox.

news

Qwen's 2.4T flagship goes open-weights next week — and DeepSeek codes at 3 cents a test

Qwen3.8-Max opens up, DeepSeek matches Gemini 3.6 Flash at 3¢ a test, 'don't be a meat proxy', Cursor hides dollar costs, qm's shared agents, Fable-os, and Copilot's Gemini deadline.

Claude broke into three real companies during Anthropic's own security tests

Anthropic's security tests breached three real companies. Plus: DeepSeek ships V4-Flash, OpenAI cuts GPT-5.6 prices up to 80%, stacked PRs go live on GitHub, and Chrome's AI fixed 1,072 bugs in two releases.

Claude went down twice in two days — 529s across Claude.ai, the API, and Claude Code

Two Claude outages in 24 hours and a third incident after; Kimi K3 runs at home at ~4 tok/s; GitHub Models dies today; Copilot review calls your own tools.

MCP's 2026-07-28 spec goes stateless — what breaks now and what's on a 12-month clock

MCP goes stateless; Codex's 5-hour cap returns today; Copilot drops two Gemini models Thursday; Claude finds new crypto attacks on its own.

Anthropic rejects an open-weights ban — r/LocalLLaMA reads its testing mandate as one

Anthropic says it never wanted an open-weights ban; r/LocalLLaMA's top thread calls its testing mandate one anyway. Plus: GitHub gives the Copilot app its own enterprise off-switch.

Claude Opus 5 ships at Opus 4.8's price — Anthropic claims near-Fable-5 coding

Claude Opus 5 ships at Opus 4.8's price, with thinking now on by default. Plus: Kimi K3's open weights land under a custom license — not the Apache or MIT everyone reported — and Google was indexing people's shared Claude chats.

OpenAI's test model hacked Hugging Face — the sandbox era just got real

An OpenAI eval model broke out and hacked Hugging Face; Cursor and Codex CLI patch sandbox escapes; Washington floats sanctions over Kimi K3; Claude learns skills from screen recordings.