AI Coding Live News

GitLab brings Claude Mythos 5.1 into its Business Logic Security Analyzer and offers free-credit security sprints

On Oct 28, GitLab CEO Bill Staples announced in a blog post and on X that new and existing customers can request free credits to run a security sprint with Claude Mythos alongside GitLab Orbit, Secrets Manager and Duo Agent Platform. The core capability is the Business Logic Security Analyzer, the first GitLab feature to support Anthropic's Claude Mythos 5.1. It reads the whole repository, infers what each endpoint should enforce, and flags authorization and mass-assignment flaws that pattern-based SAST misses. The analyzer has been in early access for a small group of GitLab.com Ultimate customers since Oct 20.

GitLab brings Claude Mythos 5.1 into its Business Logic Security Analyzer and offers free-credit security sprints

Key Takeaways

  • The Business Logic Security Analyzer is the first GitLab feature to support Claude Mythos 5.1; it also supports Claude Opus 5.5, Sonnet 5.5, Sonnet 5 and Sonnet 4.6, all as GitLab-managed models via GitLab's AI gateway
  • It starts with three flaw classes: broken object-level authorization (BOLA), missing or improper authorization, and mass assignment
  • Scans can run on the whole repository from Duo Chat or the API, or automatically on each merge request after its pipeline passes; findings land in the Vulnerability Report and MR security widget as SAST results
  • Early access is limited to a small group of GitLab.com Ultimate customers; each scan consumes GitLab Credits, with cost scaling with the application's attack surface
  • New on Oct 28: a security sprint offer where qualifying teams can request free credits for Ultimate, Duo Agent Platform, Orbit and Secrets Manager
Read full story
C
Chainguard@chainguard-dev·
👀80
🔥86

Chainguard ships three agent-security products: Harness runs Claude Mythos 5.1 vulnerability hunts for you, Checks turns CI into an agent-callable pre-commit check, Workspaces adds microVM sandboxes

On 2026-10-14 Chainguard launched Harness, Checks, and Workspaces. Harness has Chainguard staff run Claude Mythos 5.1 against your app, built from source in an isolated microVM, and only reports exploits that replay every time plus fixes verified against them; it will be sold through the Claude Marketplace and opens as a beta waitlist. Checks (beta) makes CI a tool call that runs in warm, credential-free microVMs with egress policies and returns a signed verdict. Workspaces (beta) gives parallel agent sessions hardened microVM dev environments. Both betas come with a 30-day free trial.

Chainguard ships three agent-security products: Harness runs Claude Mythos 5.1 vulnerability hunts for you, Checks turns CI into an agent-callable pre-commit check, Workspaces adds microVM sandboxes

Key Takeaways

  • Harness: Chainguard staff operate Claude Mythos 5.1, so customers need no model access; an exploit only makes the report if it replays every time in a fresh microVM, each fix must make it fail, and a named engineer signs off
  • Harness will be purchasable on the Claude Marketplace against existing Anthropic commitments; limited beta waitlist for now (per Chainguard)
  • Checks beta: config in .chainguard/ci/*.yaml, drafts generated from existing GitHub Actions via chainctl; runners hold no credentials, a host-side proxy injects short-lived ones in flight
  • Workspaces beta: chainctl develop opens a remote microVM; while waiting on a developer it stays live 10 minutes, then snapshots and stops compute
  • Both Checks and Workspaces have a 30-day free trial; Chainguard published no speed or detection-rate numbers
Read full story

Ars: Rare overlapping outages hit OpenAI, Anthropic, xAI, and Google Thursday morning

Per Ars Technica, cloud models from OpenAI, Anthropic, xAI, and Google saw rare overlapping disruptions over several hours Thursday morning ET. Anthropic reported elevated errors on Claude Mythos 5.1, Fable 5.1, and Opus 5 at 9:23 ET and resolved by about 12:16 ET; OpenAI reported degraded ChatGPT and Codex performance from 10:43 ET, mitigated by about 12:55 ET. xAI’s Grok showed a user-facing outage banner as DownDetector reports jumped from under 10 to about 1,365; Google did not publicly acknowledge issues, but DownDetector and StatusGator pointed to a likely Gemini API outage around 10:45–11:15 ET. AWS, Azure, and Cloudflare had no major incidents. Concurrent frontier-model downtime is almost unheard of.

Key Takeaways

  • Four frontier labs overlapped for hours—Ars calls that practically unheard of
  • Anthropic and OpenAI posted status; Grok showed user errors; Gemini mainly via third-party monitors
  • No major AWS/Azure/Cloudflare incidents—points to model stacks, not a whole-cloud collapse
Read full story
Linked Models & Agents:

Claude Fable 5.1 and Mythos 5.1 Launch for Coding and Knowledge Work

Anthropic introduced Claude Fable 5.1 and Claude Mythos 5.1, calling them the world’s most advanced models for coding and knowledge work. Fable 5.1 is built for long-running agentic tasks and research, with cache reads 75% cheaper than Fable 5—about 25% lower cost on typical workloads and up to 45% on highly agentic ones. Cursor reported 73.4% on CursorBench 3.2 at max effort.

Key Takeaways

  • Fable 5.1 is generally available; Mythos 5.1 is limited to trusted cyberdefense and life-science access
  • Cache-read pricing down 75%, cutting agentic workload cost by up to 45%
  • Immediately live in Cursor and GitHub Copilot for long-horizon coding and research
Read full story
ADSponsored

Anthropic Unveils Claude Fable 5.1 and Mythos 5.1 for Coding and Knowledge Work

Anthropic launched Claude Fable 5.1 and Claude Mythos 5.1, calling them the world's most advanced models for coding and knowledge work. Fable 5.1 more than doubled Terminal-Bench-Science 0.1 to 52.6% and lifted Terminal-Bench 4.0 from 42.0% to 55.8%, while cutting cache-read prices 75% and typical agentic costs by up to 45%.

Key Takeaways

  • Scores 52.6% on Terminal-Bench-Science 0.1 (more than double Fable 5) and 55.8% on Terminal-Bench 4.0
  • Cache reads cost 75% less; real-world agentic workloads can drop about 25–45%
  • Fable 5.1 is generally available today; Mythos 5.1 is trusted-access, with Enterprise Frontier Safeguards rolling out this fall
Read full story
Linked Models & Agents:

Anthropic launches Claude Fable 5.1; cache reads $0.25, ~25% cheaper typical jobs

Anthropic launched Claude Fable 5.1 on September 1 (API id claude-fable-5-1) for Pro, Max, Team, and Enterprise, plus the Claude API, AWS, Google Cloud, and Microsoft Foundry. List price stays $10 input / $50 output per 1M tokens, but cache reads drop to $0.25 (75% less than Fable 5), which Anthropic estimates cuts typical workloads about 25% and highly agentic ones up to about 45%. Claude Mythos 5.1 remains limited to trusted-access programs.

Key Takeaways

  • Fable 5.1 is GA for Pro/Max/Team/Enterprise and the API as claude-fable-5-1.
  • List price stays $10/$50 per 1M tokens; cache reads are $0.25, about 25% cheaper typical jobs and up to ~45% on heavy agent workloads.
  • Mythos 5.1 stays trusted-access only. Fable 5.1 targets long-horizon coding; Devin said it is moving Opus 5 traffic onto it at launch.
Read full story