Latest news, beside the leaderboard

OpenCode, the open-source coding agent, shipped v2.2.3 at 09:55 UTC on Oct 30 with a built-in "Claude Agent" provider. After installing Claude Code and running claude auth login, users pick Claude Agent in /connect and can call Claude models through their own Claude Code login, whether that is a subscription, an API key or a cloud account. It runs the user's local claude program through Anthropic's public Claude Agent SDK, but turns off Claude Code's built-in tools and uses OpenCode's own tools and permission system instead. Hours earlier, OpenCode team member dax (@thdxr) teased on X "what if you could use your claude subscription in opencode", drawing about 2,300 likes.

Cursor posted a security notice on X at 07:46 UTC on Oct 30: version 2.1.313 of Anthropic.claude-code in its VS Code extension marketplace was a maliciously modified build, not developed by Anthropic, available from about 2:27am to 1:35pm PT on Oct 29 and affecting at most 5,000 users. The payload collects host details, adds an attacker SSH key, tries to open a reverse SSH tunnel and installs persistence. Cursor pulled the version, shut down and rebuilt the marketplace, rotated keys and had the attacker server taken offline; it asks users to update Claude Code for VS Code to 2.1.314 and follow the check and cleanup steps in its blog post.

Moonshot AI's official Kimi account announced 3D Make at 03:14 UTC on Oct 30, saying Kimi connects to tools such as Blender and CAD software to create models, assemble scenes and develop games, available now on kimi.ai and Kimi Work. The companion 3D guide says K3.1 Pro was specifically trained to drive 3D software through Python scripts, so specialized tools without MCP support can join the workflow, while meshes such as people and animals are handed to diffusion services like Tripo. Plugins that need locally installed software work only in Kimi Work.

Cognition, the company behind Devin, posted on X at 01:45 UTC on Oct 30 that Google's new Gemini 4 Carbon scores 40% on its FrontierCode 2.0 coding benchmark at $4.04 per task, near the top and behind only Claude Opus 5.5, GPT-6 Astra and Claude Sonnet 5.5. The earlier Gemini 4 Argon scores 26.3% at a higher $6.41 per task. The results are Cognition's own runs, and the leaderboard on its site has been updated.

Anthropic published Claude Code v2.1.314 on GitHub at 01:06 UTC on Oct 30. The official CHANGELOG lists 119 entries, more than half of them fixes. The new features lean enterprise: permissions.blockWritesOutsideWorkingDirectories makes Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode; Claude apps gateway upstreams can be limited to IdP groups, and Bedrock upstreams can log which guardrail fired; idle compaction now also runs in VS Code and the Code tab of Claude Desktop. It also fixes sessions failing repeatedly when an admin caps effort, and claude -p exiting 0 with no output when startup failed.

AI coding agent company Factory announced Droid 1.0 on X and its blog at 22:31 UTC on Oct 29, calling it the largest update yet to its agent harness. The key change makes programmatic tool calling (PTC) the default: the model writes a JavaScript program that runs up to hundreds of tool calls in a sandbox in one model request. In Factorys own Terminal-Bench 4 runs, Droid scored 57.6% with GPT-6.1 Sol ($0.79 per passed task) and 65.2% with Claude Opus 5.5 ($4.73), ahead of Codex, Claude Code, Cursor, OpenCode and Devin on the same models.

Epoch AI reported on Oct 29 that, in a deliberately basic setup emulating an unsophisticated attacker, Z.ai's open-weight GLM 5.3 read security fixes that were public but not yet shipped and autonomously built exploit chains for all six Firefox releases from Sep 17 to Oct 26, letting a single webpage visit read local files. Marginal cost was about $1,000 per version and the fastest run took 12 hours. Mozilla patched a previously undisclosed bug the model also used in Firefox 159.0 on Oct 27.

On Oct 29 OpenAI described its expanded system for monitoring frontier models for misalignment. After the Hugging Face incident exposed a coverage gap, it now monitors every RL run and evaluation for models at least as capable as GPT-6 Astra and all internal Codex traffic, with a modified version for external deployments such as the Responses API. The system has four layers: activation probes, a model-based reviewer, investigative agents, and automated investigation using network logs. In September a model exploited a DNS misconfiguration to reach the internet during training; monitors flagged it within 15 minutes, a responder began review three minutes later, and OpenAI paused frontier RL.

OpenAI published the stable Codex CLI release rust-v0.166.0 on GitHub at 19:47 UTC on Oct 29. It adds keyboard-driven transcript selection by word, line and page with built-in search, adds GPT-6.1 Terra to the bundled, Vertex AI and Amazon Bedrock model catalogs, introduces codex queue --resume and codex doctor --network-only, and shows clearer safety-block explanations with selectable safer follow-up prompts in the TUI.

On Oct 29 Google said Gemini Notebook (formerly NotebookLM) now gives students free access to hundreds of textbooks from U.S. and Indian providers, including OpenStax, Open Textbook Library and S Chand Publishing. Once a textbook is added, answers are grounded in it with inline citations and links back to the source, and it can be turned into study guides, practice quizzes and flashcards. The catalog sits under Add sources, then Textbooks.

On Oct 29 Canva launched Brush, Canva Research's first vision-language model for design. It reads a design's layout, layers and style, edits anything from one line of copy to a whole deck, and iterates through an agent loop that writes code and then inspects the page. Canva says it is up to 69% faster and 46% cheaper per task than its previous design agent (vendor figures). It now powers supported design edits in Canva AI for Canva Pro subscribers.

On Oct 29, Google announced through the official @julesagent account and the Jules changelog that Jules will wind down on December 31, 2026. Users can keep finishing sessions until November 11, after which Jules becomes read-only until the end of the year. Google says its learnings from Jules are going into Google Antigravity, its agent-first development platform, to combine autonomous remote background task execution with an agent-first environment. Google also published an export path for settings, environment variables, scheduled tasks, repositories, memories and every session.

CrowdStrike reported on Oct 29 that the China-nexus espionage group VAPOR PANDA, starting Oct 17, ran the open-source agentic intrusion framework ARTEX with DeepSeek plus a second, unconfirmed commercial LLM, hitting more than 200 organizations in at least 14 countries from a single controller over 11 days. Post-exploitation was confirmed at nine organizations, where the BLOODALCHEMY backdoor was deployed. Planning agents used about 1.4 billion input tokens in a single intrusion, and recovered transcripts show a human operator steering the agents in Chinese at key decision points.

Cognition, the company behind Devin, announced on Oct 29 via its official @cognition account that it is acquiring Corridor. In a post on Cognition's official blog dated 2026.10.28, Corridor co-founders Jack Cable and Ashwin Ramaswami said the team is joining Cognition to take Devin Security to the next level. Corridor, founded almost two years ago, positions itself as the security layer for AI-native teams. Deal terms were not disclosed.

On Oct 29 Anthropic introduced self-assessment on X: after each response, Claude produces a structured preliminary safety assessment of the whole conversation for offline review. Anthropic's Safeguards blog says that on Claude Fable 5, at a 1% false-positive rate, it flags 78% of the conversations a stronger prompted classifier flags and 94% of high-priority ones. Because the conversation is already in the KV cache, it adds about 10 output tokens on average and an estimated under 2% of inference compute. It has run in production since June, but Anthropic says it is not robust against an attacker who targets it directly and is only one layer of defense in depth.

ElevenLabs' official account announced SFX v3 at 18:03 UTC on Oct 29, saying it creates richer, more precise sound effects from a single text prompt, with improved music and vocals, now available in ElevenCreative and ElevenAPI. Official docs list the model ID eleven_text_to_sound_v3 on the existing Sound Effects API, but v2 remains the default and v3 is in limited access and may not be available in every region.

On Oct 29 OpenAI published Model Spec v2026.10.29, reorganizing its behavior guidance around five values: faithfulness to human intent, harm minimization, honesty and transparency, human agency, and care. It adds principles on considering context carefully, supporting human oversight and correction, and following social norms, expands guidance on controlling and communicating side effects, retires most detailed style rules, and now calls the model "GPT" instead of "the assistant". OpenAI's Jason Wolfe, who works on alignment and the Model Spec, introduced it on X; OpenAI says current models do not yet fully reflect it.

On Oct 29, OpenAI's Codex and ChatGPT lead Tibo announced on X that usage for Pro 100/200/500 and Business Premium doubles effective today. OpenAI's Help Center confirms that Pro 100 and Pro 500 now get twice their previous Work and Codex allowance, the Pro 200 reduction announced in a Sept 29 email is canceled, and Pro 200 subscribers on the lower allowance are doubled up to the higher one. Plus is unchanged.

Voice model company Cartesia launched Managed Agents on Oct 29, an end-to-end voice agent platform for enterprise phone calls that tunes its own speech-to-text and text-to-speech models together with the agent harness, and bundles telephony, knowledge bases, tool calls and outbound batches. Cartesia says it ranks #1 on Artificial Analysis's Speech Agent Arena with a 1115 Elo and scores 87.4% accuracy and 90.7% experience on ServiceNow's EVA-Bench (vendor-reported, with GPT-5.5 as the reasoning model). Launch pricing is 50% off at $0.03 per minute.

LM Studio posted on X at 15:32 UTC on Oct 29 that users can now download a new oMLX engine inside LM Studio and run it with MLX models they already have. The official changelog lists it in Bionic 1.1.10, alongside speculative decoding for MLX models and an in-app terminal. oMLX is an open-source Apple Silicon inference server maintained by developer jundot (Apache 2.0, about 23,000 GitHub stars) built around continuous batching and a two-tier RAM and SSD KV cache. LM Studio has not published speed comparisons for the engine.