AI Coding Live News

Anthropic updated Claude Enterprise security and admin features: Inference Hooks (prompt hooks and pre-tool-call hooks) are generally available so prompts and tool calls can hit the organization's existing DLP/security stack for allow/deny before the model or tool runs. The same post also introduces a Security Center, centralized management, and additional access controls (mostly beta).

Zoom

On November 5 OpenAI launched GPT-6 Cyber for authorized security research: ExploitGym rose from GPT-5.6 Cyber's 32.1% to 48.5% (about 51% relative), out-of-scope exploitation fell to 0.07% without deployment prompts and 0% with them. The model helped find 81 novel high-severity Firefox bugs and develop exploits for 948 Linux privilege-escalation cases, and OpenAI raised its Preparedness Framework cyber rating from High to Critical. It is initially available via API and Codex to select Daybreak Red customers, with expansion to all Red customers planned.

Zoom

On November 4 NotionHQ announced that via Notion MCP, ChatGPT, Claude, Muse and Bot can read and write the same Memories and Skills—one shared brain across agents. Official setup prompts (v0.0.6, Oct 30), help docs and a Nov 3 MCP use-cases blog corroborate the product push.

Zoom

DeepSeek Harness, DeepSeek's open-source, MIT-licensed agent app, announced Creator Mode on its official X account on November 2: users describe the plugin they want in plain language, and the agent turns it into a plugin they can use. Demos include a 3D landmark gallery, a 3D Transformer visualizer, a video editing workbench and a paper reader. DeepSeek also published seven bilingual demo prompts on cdn.deepseek.com, cautioning that some plugins took several rounds of conversation, so a single prompt may not reproduce the video exactly. The post drew about 20,000 likes and 1.69 million views. No benchmarks were published.

Zoom

ElevenLabs' official account announced SFX v3 at 18:03 UTC on Oct 29, saying it creates richer, more precise sound effects from a single text prompt, with improved music and vocals, now available in ElevenCreative and ElevenAPI. Official docs list the model ID eleven_text_to_sound_v3 on the existing Sound Effects API, but v2 remains the default and v3 is in limited access and may not be available in every region.

Zoom

At GitHub Universe on Oct 28, GitHub shipped a batch of Copilot Automations updates. Shared automations now belong to the repository, act as Copilot, bill AI credits to the repo owner and keep running after their creator leaves. Automations gain 24 new GitHub event triggers, REST API triggers from external systems and chaining, plus 20 new tools and custom MCP servers. Teams can cap AI credits per run, day, week or month, automations can propose improvements to their own prompts from real outcomes, and VS Code 1.144 can run them in the cloud.

Zoom

Cognition, the maker of Devin, released FrontierCode 2.0 on Oct 27. It keeps the method of maintainer-written tasks graded on whether the code is actually mergeable, but draws tasks from more repositories, adds security patches and performance work, uses deliberately underspecified prompts and adds many thoroughness criteria. In Cognition's results Claude Opus 5.5 leads at 45.5%, GPT-6 Astra follows at 42.8%, and Grok 4.7 and Gemini 4 Argon drop into the 20s, leaving the benchmark far from saturated.

Zoom

On Oct 27 Cursor announced Annotate for Design Mode: in the Agents Window browser you can click elements, box an area, draw markup, edit text in place or tweak CSS, and each note is sent to the agent with element details and a screenshot so it can edit the code. The post says you can also review designs at different screen sizes. It needs Cursor 3.24.18 or later, and the shortcut is Cmd+Shift+D.

Zoom

In an Oct 26 incident report on its blog, Cloudflare said that between Aug 27 and Sep 9, 155 responses from GLM-5.3 on Workers AI (@cf/zai-org/glm-5.3) to prompts longer than 681,280 tokens contained data from other customers' recent requests, all returned with HTTP 200. The cause was a prefill KV cache pool smaller than the 1,048,576-token context window, combined with an SGLang bug in disaggregated prefill/decode mode. Cloudflare found no evidence of deliberate exploitation, has fixed it, and recommends operators upgrade to SGLang v0.5.22 or later.

Zoom