anthropic

GitHub announced a Copilot training opt-out and published Claude Fable retention terms; researchers reported Grok Build and ZCode uploading repositories. The Herald compares where each control sat and how the fixes were checked.

Apache's advisory credits Anthropic's OSS Scanner and two Google Cloud researchers for CVE-2026-119618 in HTTP Server 2.4.55 through 2.4.70; Red Hat and Wiz gave different accounts of whether an exploit was public.

OpenAI, Anthropic and Google Cloud publish different minimum notice periods for retiring AI models; the Herald's date arithmetic puts GitHub Copilot's notices at 31 to 32 days, and one OpenAI notice ran about three months.

Per Help Net Security, Glow Labs says agents appear to take the package name from training data in 98% of sessions where a deprecated MCP server was installed or suggested.

Between August and October 2026, Cursor, GitHub and Anthropic described repository infrastructure designed around agent load; they differ on whether to keep Git, and the performance figures are self-reported.

Anthropic's release notes list API version 2026-10-21 and new SDK majors; its migration guide lists 400 errors for sampling parameters, document blocks in assistant messages and user citations.

OpenAI and Anthropic list one model at several per-token rates by speed, OpenAI prices GPT-6.1 Sol at a fifth of Astra, and Red Hat reportedly caps developer token spend.

Anthropic's user profiles let API platforms tag each request with an end customer's ID, so a safety restriction or ban can apply to one customer; related webhook events are not yet live.

Anthropic's October 14 release note launches OpenTelemetry export in beta; its docs say the default content mode omits prompts, destinations are capped at 10 per organization, and delivery is best effort.

Anthropic says Claude Opus 5.5 fast mode no longer needs an access request or beta header, adds a default rate limit in three usage tiers, and extends it to Microsoft Foundry on Azure.

curl's October 14 advisory rates the HTTP/2 upload use-after-free High, lists fixes in 8.23.0 and three older branches, and says remote code execution needs a tightly matched set of conditions.

Anthropic's 2.1.299 release notes for Claude Code add idle compaction for long idle terminal sessions and list fixes to sandbox symlink, glob and plugin-directory handling.