GPT-6.1 Sol is rolling out to GitHub Copilot, where Business and Enterprise administrators can manage access to the model. OpenAI’s GPT-6 guide also gives teams practical steps for evaluating costs, setting agent boundaries, and keeping long-running work on track.

Source

IBM Bob is now available for self-hosted deployment, including in fully air-gapped environments—letting organizations keep code and development data within infrastructure they control. Customers must provide a supported AI model; locally hosted options include NVIDIA Nemotron and Poolside Laguna, while hybrid deployments can connect to external model services.

Source

Claude Code mods can now rewrite prompts, intervene in tool calls and permission requests, and replace parts of the interface. The extensions run unsandboxed with Claude Code’s access to the machine, making a mod’s publisher a security decision as well as a software choice.

Source

Cloudflare has released its Clef and Clef-flash decision models as open-source Apache 2.0 weights, while offering customers hands-on reinforcement-learning fine-tuning for their own workloads. Both models are hosted on Workers AI; a self-service training and redeployment platform is planned.

Source

Cloudflare has opened Artifacts in beta and launched a competition to build a Git platform for teams of AI agents. The challenge is to rethink how agents work on code concurrently, while new Workers integrations can build, deploy, and preview changes from Artifacts repositories.

Source

Matthew Berman reviews OpenAI Dev Day announcements, including Dots, an always-on personal AI assistant that connects to services such as Gmail, Google Docs, Slack, and Teams. New model offerings focus on faster responses and lower costs, while Codex expands with cloud-based coding and security features. The announcements also include ChatGPT integrations and a shared workspace for people and AI agents.

Source

AI coding agents are now being blamed for a privacy leak that put internal screenshots, billing records and unreleased product views into public GitHub repositories. Glow says the images were often stored under developers’ personal accounts, making them visible to outsiders while staying outside corporate security scans.

Source

The EU Cyber Resilience Act is now forcing container and Kubernetes teams to treat security as a product obligation, not an optional best practice. The law covers commercially supported container images, Helm charts and operators sold into EU markets, and it will require long-term patching, SBOM tracking and faster vulnerability reporting as enforcement phases in.

Source

Visual Studio’s September 2026 Stable Channel update changes Bring Your Own Model so it now runs only through the new Agent (Preview) built on the GitHub Copilot SDK harness, which means older Ask and Agent modes are out and external Ollama models must be added again. The same release also brings native Podman container debugging and one-click NuGet vulnerability fixes inside the Error List.

Source

Microsoft’s September 2026 Azure SDK roundup is led by the first stable release of Azure Storage SAS for Rust and PostgreSQL Authentication for.NET and JavaScript. The update also pushes a wave of new 1.0.0 management libraries across several languages, while Azure AI Search previews pick up the latest service API and broader knowledge-source features.

Source

Work IQ is the intelligence layer behind Microsoft 365 Copilot that lets agents query and act on Microsoft 365 work data with the signed-in user's permissions. Custom and third-party agents consume it through APIs billed with Copilot Credits, and you govern that usage in the Microsoft 365 admin center. This article explains what Work IQ is, how access and compliance work, and which billing, spending, discovery, and MCP policy settings you manage as an administrator.

Source

OpenAI used DevDay 2026 to push Codex beyond coding assistance, adding reusable cloud environments, repository security scanning, and a faster premium “Ultrafast” tier. The company also extended its Agents API with Computer Use, introduced a Decisions API for quick classification-style tasks, and added a code review view in the ChatGPT desktop app, building on the earlier Agents API rollout on Codex-style automation.

Source

OpenAI has added reusable cloud setups to Codex, letting developers publish a prepared GitHub environment once and reuse it for separate coding tasks on the web, desktop, or mobile. The change keeps each task’s uncommitted work isolated, so engineers can leave a job running in the cloud and reopen it later from another device without losing progress.

Source

Docker has introduced an open Sandbox Kit specification that packages an AI agent, its tools, and requested permissions into a single OCI image. The format, released under Apache 2.0 and planned for submission to the CNCF, could let teams review and reproduce an agent’s authority across different sandbox runtimes.

Source

Matthew Berman evaluates Claude Sonnet 5.5 through browser-based applications, games, Lego design, and Unreal Engine projects. The model creates surprisingly capable software from short natural-language prompts, often approaching the quality of the more expensive Opus 5.5. Its main limitations are long build times, visual glitches, and weak sound and music generation.

Source

Microsoft’s MSSQL extension for VS Code v1.46 adds a guided Getting Started experience and makes its SQL Formatter generally available. The release also gives all customers one-click access to Microsoft SQL agent skills for GitHub Copilot, including database development and Azure SQL migration workflows.

Source

Microsoft has released a free, open-source course for the GitHub Copilot app, teaching developers how to manage AI coding agents rather than simply chat with them. The eight-chapter curriculum covers parallel sessions, worktrees, testing, pull requests, MCP servers, canvases, and automations using a single sample project.

Source

Cloudflare has released Forge, an Apache 2.0-licensed pipeline that generates SDKs, command-line tools, documentation, and other API clients from OpenAPI definitions. The self-hosted tool creates preview artifacts for every pull request, helping teams catch compatibility problems before API changes reach users.

Source

Carbonato is using unauthenticated Docker daemons to install Hermes Agent, turning compromised Linux hosts into Telegram-controlled attack platforms. The botnet launches privileged containers, opens reverse SSH access, steals credentials, and scans for more exposed Docker services every five minutes.

Source