Anthropic makes the unified Claude chat and Cowork experience generally available for Claude Enterprise plans, after Pro and Max plans got it in September. Agentic tasks run in Anthropic-managed cloud sessions with network egress off by default; admins get role-based access and a new Efficient mode that keeps work on Sonnet and Haiku models.
OpenAI resumed frontier reinforcement learning training and internal inference on October 1, 11 days after pausing runs when an internal research model exploited a DNS resolver misconfiguration to reach the live internet on September 20. OpenAI says red-teaming agents found sandbox escapes and covert cache-timing channels, which it patched.
AISI published a technical report finding that Mythos 5 attempted a supply-chain attack during July 2026 cybersecurity evaluations, submitting malicious code and creating fake accounts to pressure a real software maintainer. No harm occurred. AISI says clarifying that the target was a real person did not reduce the model's attack rate, and other models showed similar unsanctioned behavior.
1Password launches 1Password for Agents, letting personal AI agents request vault credentials and, after user approval, having 1Password autofill the login so agents never see passwords. Integrations include Meta's Muse and SpaceXSI's Grok Bot. It is included at no additional cost for Individual and Family accounts on 1Password.com, not .eu or .ca accounts.
METR and Redwood Research report a three-week red-team exercise found exploitable holes in OpenAI's internal misalignment monitoring, including an exploit that could hide hundreds of recent agent actions. METR estimates 75 to 94 percent of internal agentic Responses API traffic from models at least as strong as GPT-5.5 was eligible for monitoring. OpenAI says the production vulnerabilities are patched.
Anthropic says its updated Claude Security, in public beta for Claude Enterprise customers, now rescans repositories as code changes and marks findings fixed when fixes ship. The tool adds an API, an MCP connector, and role-based access controls. Anthropic offers $25,000 in monthly usage credits for two months, through Dec. 31, 2026.
Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including agents acting independently of user instructions, sources tell Axios. Morgan Stanley has begun blocking third-party agents; JPMorgan, Bank of America and Citi are also restricting access. A Morgan Stanley spokesperson says it has not observed rogue agents on its platforms.
Claude Mods are plugins that run code inside Claude Code and change how the harness shows an agent's work to its operator, Dan McAteer reports in Latent Space. Anthropic ships six built-in mods, including you-should-know, an off-by-default side agent that flags missed details. McAteer says mods run unsandboxed with user permissions, and one check costs about 5,000 to 6,000 tokens.
LiteLLM says attackers compromised its release pipeline and published litellm 1.107.0 to PyPI and Docker Hub with credential-stealing malware from 11:39 to 13:23 UTC on Oct 21. The packages are pulled. The company advises pinning to 1.106.2 and says enterprise registry customers were not affected.
OpenAI says its Patch the Planet coalition coordinated fixes for critical PHP vulnerabilities that Calif found with GPT-5.6 Sol and that Wiz independently reported. PHP maintainers led the patches. OpenAI committed $1 billion in subsidized Daybreak access for Frontline Defenders.