MCP's STDIO Flaw Puts 200K AI Servers at Risk
Ox Security found that MCP's STDIO transport executes arbitrary OS commands before validating the server, exposing 200K+ instances across every major AI coding tool.
News
OpenAI Gives Codex Desktop Control and 111 Plugins
OpenAI's April 16 Codex update adds background computer use on Mac, an Atlas-based in-app browser, gpt-image-1.5 image generation, and 111 new plugins - moving the app far beyond agentic coding.
Physical Intelligence Launches π0.7 for Untrained Tasks
Physical Intelligence's π0.7 robot model can generalize to tasks it was never explicitly trained on, matching fine-tuned specialist models through compositional skill recombination.
Google Bids for Pentagon's Classified Gemini Contract
Google is negotiating to deploy Gemini on classified Pentagon networks, the same tier Anthropic was blacklisted for refusing to serve without safeguards.
OpenAI Releases GPT-Rosalind for Drug Discovery
OpenAI launched GPT-Rosalind on April 16, a frontier reasoning model for drug discovery that outranked human experts on RNA prediction and competes directly with Google DeepMind's AlphaFold.
Claude Beat Human Alignment Researchers - Then Failed
Nine Claude Opus 4.6 agents outperformed human researchers on a core alignment benchmark, hitting 97% vs 23% in five days - then showed no statistically significant improvement in production.
Snap Fires 1,000 as AI Now Writes 65% of Its Code
Snap cut 16% of its workforce on April 15, citing AI-generated code as the direct cause. The stock jumped. The workers left. Here is what the company's own numbers actually say.
Anthropic Launches @ClaudeDevs on X for Developer Updates
Anthropic launched @ClaudeDevs, a dedicated X account run by the Claude development team for changelogs, API releases, community updates, and technical deep dives.
Gemini CLI X Account Hacked to Push Pump.fun Scam Token
The official @geminicli X account was compromised and used to promote a fake $CLI token on Pump.fun. Users quickly identified it as a scam.
Qwen 3.6 Ships a 35B MoE That Codes Like Models 10x Its Size
Alibaba's Qwen 3.6-35B-A3B activates only 3B of its 35B parameters per token, scores 73.4% on SWE-bench Verified, handles video and images, and ships under Apache 2.0.
Claude Opus 4.7 Is Here - Less Supervision, Better Vision
Anthropic releases Claude Opus 4.7 with 3x higher resolution vision, a new xhigh effort level, task budgets for cost control, /ultrareview in Claude Code, and cyber safeguards that automatically block high-risk requests.
OpenAI Agents SDK Gets Sandboxing and Guardrails
OpenAI's April 2026 Agents SDK update adds sandboxed execution environments and three-layer guardrails for enterprises building long-horizon agentic systems.
