xAI Trained Grok 4.5 Alongside Cursor. Your Agent Isn't Cursor.

xAI Trained Grok 4.5 Alongside Cursor. Your Agent Isn't Cursor.

xAI shipped Grok 4.5 on July 8, trained alongside the Cursor editor inside one agent's loop. A benchmark score earned in the harness a model was co-trained with is a ceiling under ideal conditions, not a promise it transfers to your stack. Model choice is quietly becoming model-plus-harness choice.

The Exploit Was a Prompt That Said "Leak API Keys"

The Exploit Was a Prompt That Said "Leak API Keys"

CISA added a Langflow authorization bypass to its Known Exploited Vulnerabilities catalog on July 7 and gave federal agencies three days to patch. The attack carried no shellcode: one request ran another user's agent flow with the input "leak api keys". In an agent builder, permission to run a flow is permission to read every credential wired into it.

An Agent That Runs for Three Days Needs Somewhere to Live

An Agent That Runs for Three Days Needs Somewhere to Live

Microsoft moved Foundry hosted agents to general availability on July 11, and the headline feature is a durable runtime, not a model. The thing that kept long-running agents out of production was never the model. It was that you deployed them on infrastructure built for request-and-response, where anything that waits gets killed.

The Model Keeps Thoughts It Never Says. Now There's a Tool to Read Them.

The Model Keeps Thoughts It Never Says. Now There's a Tool to Read Them.

Anthropic open-sourced the Jacobian lens, a technique that reads the words a model is leaning toward before it writes them, and DeepMind reproduced it on a different model. The practical part is not the consciousness headline. It is that a model can hold a thought, including that it is being tested, without saying it.

GPT-5.6 Stops Running Your Tools Through the Model

GPT-5.6 Stops Running Your Tools Through the Model

GPT-5.6 shipped programmatic tool calling: the model writes code that runs your tools in a sandbox instead of calling them one at a time. OpenAI, Anthropic, and Cloudflare all reached the same conclusion, that the model was never a good place to run the tool loop.

xAI Trained Grok 4.5 Alongside Cursor. Your Agent Isn't Cursor.

xAI Trained Grok 4.5 Alongside Cursor. Your Agent Isn't Cursor.

xAI shipped Grok 4.5 on July 8, trained alongside the Cursor editor inside one agent's loop. A benchmark score earned in the harness a model was co-trained with is a ceiling under ideal conditions, not a promise it transfers to your stack. Model choice is quietly becoming model-plus-harness choice.

The Exploit Was a Prompt That Said "Leak API Keys"

The Exploit Was a Prompt That Said "Leak API Keys"

CISA added a Langflow authorization bypass to its Known Exploited Vulnerabilities catalog on July 7 and gave federal agencies three days to patch. The attack carried no shellcode: one request ran another user's agent flow with the input "leak api keys". In an agent builder, permission to run a flow is permission to read every credential wired into it.

An Agent That Runs for Three Days Needs Somewhere to Live

An Agent That Runs for Three Days Needs Somewhere to Live

Microsoft moved Foundry hosted agents to general availability on July 11, and the headline feature is a durable runtime, not a model. The thing that kept long-running agents out of production was never the model. It was that you deployed them on infrastructure built for request-and-response, where anything that waits gets killed.

GPT-5.6 Stops Running Your Tools Through the Model

GPT-5.6 Stops Running Your Tools Through the Model

GPT-5.6 shipped programmatic tool calling: the model writes code that runs your tools in a sandbox instead of calling them one at a time. OpenAI, Anthropic, and Cloudflare all reached the same conclusion, that the model was never a good place to run the tool loop.

The Agent Failed for Weeks and 4,286 Tests Stayed Green

The Agent Failed for Weeks and 4,286 Tests Stayed Green

A June 2026 study tracked 22 production incidents in a live LLM agent runtime. In most of them the system was already broken while all 4,286 tests and 827 governance audits stayed green. Agents fail in the seams your tests never watch.

The Exploit Was a Prompt That Said "Leak API Keys"

The Exploit Was a Prompt That Said "Leak API Keys"

CISA added a Langflow authorization bypass to its Known Exploited Vulnerabilities catalog on July 7 and gave federal agencies three days to patch. The attack carried no shellcode: one request ran another user's agent flow with the input "leak api keys". In an agent builder, permission to run a flow is permission to read every credential wired into it.

Nine in Ten Companies Running Agents Have Already Had a Security Incident

Nine in Ten Companies Running Agents Have Already Had a Security Incident

AvePoint surveyed 750 IT leaders in regulated industries and 88.4 percent reported an AI agent security incident in the past year. The scarier number is the visibility gap: one in five companies cannot account for the agents already running on their data.

Your Model's Best Answers Are Training Data for a Cheaper One

Your Model's Best Answers Are Training Data for a Cheaper One

Anthropic says Alibaba-linked operators ran 28.8 million conversations across 25,000 fake accounts to distill Claude's agentic and coding skills. For anyone running an API-backed AI product, the lesson is that your best outputs are someone else's training data.

Your Agent Logs In With a Password That Never Expires

Most AI agents authenticate with a long-lived static API key in an env var. Anthropic's Workload Identity Federation, GA on June 17, swaps it for short-lived scoped credentials your stack already knows how to issue.

The Bug Report Your Agent Read Was the Attack

An attacker writes a fake error into your Sentry project, you ask your coding agent to fix production bugs, and the agent reads the attacker's text as a remediation step and runs it. The Sentry version hit an 85 percent success rate and no security tool noticed.

An Agent That Runs for Three Days Needs Somewhere to Live

An Agent That Runs for Three Days Needs Somewhere to Live

Microsoft moved Foundry hosted agents to general availability on July 11, and the headline feature is a durable runtime, not a model. The thing that kept long-running agents out of production was never the model. It was that you deployed them on infrastructure built for request-and-response, where anything that waits gets killed.

Apple Made Inference Free for Most of the App Store

Apple Made Inference Free for Most of the App Store

Apple now gives developers with under two million App Store downloads free access to its Foundation Models on Private Cloud Compute, and routes Claude and Gemini through the same Swift API. Free inference is the on-ramp to Apple becoming the layer your app calls. Take the deal, but keep your prompts, routing, and evals on your side of the door.

Your Best Model Can Go Dark on a Friday

Your Best Model Can Go Dark on a Friday

On June 13, 2026, a US export-control letter forced Anthropic to take Fable 5 and Mythos 5 offline for every user worldwide, with no notice and no migration window. The old risk was a deprecation email in twelve months. The new risk is your most capable model gone at 5:21 on a Friday, and most teams have never priced it in.

Run an LLM at the Edge on Cloudflare Workers AI, with Real Numbers

Run an LLM at the Edge on Cloudflare Workers AI, with Real Numbers

Deploy a small open model behind a Cloudflare Worker. Real cold start, p50/p95, and cost numbers vs centralized GPU.

Mistral Forge: The 'Build Your Own AI' Bet That Could Break the API Economy

Mistral Forge: The 'Build Your Own AI' Bet That Could Break the API Economy

Mistral launched Forge at GTC: train custom AI models on your data, on your infrastructure. The company is on track for $1B ARR. The 'build vs rent' question for enterprise AI just got a concrete answer.

The Model Keeps Thoughts It Never Says. Now There's a Tool to Read Them.

The Model Keeps Thoughts It Never Says. Now There's a Tool to Read Them.

Anthropic open-sourced the Jacobian lens, a technique that reads the words a model is leaning toward before it writes them, and DeepMind reproduced it on a different model. The practical part is not the consciousness headline. It is that a model can hold a thought, including that it is being tested, without saying it.

GPT-5.6 Stops Running Your Tools Through the Model

GPT-5.6 Stops Running Your Tools Through the Model

GPT-5.6 shipped programmatic tool calling: the model writes code that runs your tools in a sandbox instead of calling them one at a time. OpenAI, Anthropic, and Cloudflare all reached the same conclusion, that the model was never a good place to run the tool loop.

The Agent Failed for Weeks and 4,286 Tests Stayed Green

The Agent Failed for Weeks and 4,286 Tests Stayed Green

A June 2026 study tracked 22 production incidents in a live LLM agent runtime. In most of them the system was already broken while all 4,286 tests and 827 governance audits stayed green. Agents fail in the seams your tests never watch.

GitHub Wasn't Built for Billions of Agents Hammering One Server

GitHub Wasn't Built for Billions of Agents Hammering One Server

Entire, from former GitHub CEO Thomas Dohmke, mirrors your repo into regional nodes so agents stop hammering one central Git server. The real signal is the bottleneck moving from the model to the plumbing built for human-paced work.

Z.ai's ZCode Puts the Agent in the Center and the Editor on the Edge

Z.ai's ZCode Puts the Agent in the Center and the Editor on the Edge

Z.ai shipped ZCode, an agent-first coding tool where the chat is the main window and the editor is one panel around it, running on the cheap open-weight GLM-5.2. The shift to watch is not the benchmark, it is where the cursor lives.

The Model Was Never the Hard Part. Nine Billion Dollars Just Proved It.

The Model Was Never the Hard Part. Nine Billion Dollars Just Proved It.

In eight weeks Microsoft, AWS, OpenAI, and Anthropic each stood up a forward-deployed engineering unit, more than nine billion dollars combined, to embed their own engineers inside customer companies. An MIT study found 95 percent of enterprises got no measurable return on generative AI. The models work. The deployment does not.

Twelve Agents, Half of Them Working Alone

Twelve Agents, Half of Them Working Alone

The average company now runs twelve AI agents and half of them work in complete isolation. The bottleneck stopped being how many agents you can build. It became whether any of them can hand work to another.

Cost per Solved Task, Not Cost per Token

Cost per Solved Task, Not Cost per Token

Uber capped engineers at $1,500 a month after burning its annual AI budget in four months, and Fable 5 costs double Opus yet wins on long migrations. Per-token price stopped being the cost; cost per solved task is, and the lever that controls it is making loops halt.

The average manager saves twice as much time with AI as the people doing the actual work

The average manager saves twice as much time with AI as the people doing the actual work

Managers save 7.2 hours per week with AI. Individual contributors save 3.4. The gap is structural, not cognitive, and it is shaping how organizations adopt AI in ways that benefit the top of the org chart first.

OpenAI Killed Sora and Its Hardware Plans to Focus on What Actually Makes Money

OpenAI Killed Sora and Its Hardware Plans to Focus on What Actually Makes Money

OpenAI scrapped Sora and scaled back its Jony Ive hardware partnership to concentrate on coding tools and enterprise customers. Consumer AI gets the headlines. Enterprise code writes the checks.

All ai agents enterprise anthropic security