Adversa AI’s GuardFall research shows that 10 of 11 popular open-source AI coding agents — including Aider, Cline, Goose, opencode, and OpenHands, collectively ~548,000 GitHub stars — can be tricked into running destructive shell commands their own safety filters were built to block, using decades-old bash tricks like quote splitting and $IFS expansion. Only Continue held up under testing.
Alibaba will ban Claude Code from its internal workplace starting July 10, 2026, after a reverse-engineer claimed the tool silently fingerprinted users tied to Chinese AI labs and encoded the result into subtle system-prompt changes. Anthropic says the mechanism was an anti-distillation control dating to April, not espionage, and has committed to removing it — but the episode lands eight days after Anthropic itself accused Alibaba’s Qwen lab of a 25,000-account distillation campaign.
Cato AI Labs disclosed DuneSlide — two CVSS 9.8 vulnerabilities (CVE-2026-50548, CVE-2026-50549) that let zero-click prompt injection escape Cursor’s sandbox and achieve full remote code execution. Both bugs were patched in Cursor 3.0 back in April, but Cursor’s security team initially rejected the report in February, citing threat-model limitations, before reopening it under escalation.
Anthropic is in early-stage talks with Samsung to manufacture a custom AI accelerator, reportedly on Samsung’s 2nm SF2P process, with no design or workload finalized. The hire of ex-OpenAI silicon engineer Clive Chan suggests the effort has moved past pure exploration — but Anthropic says its existing Amazon, Google, and Nvidia stack stays pivotal, and reports point to parallel conversations with Microsoft and UK startup Fractile too.
Cursor’s revamped Teams pricing splits every seat into two usage pools and adds a $120/month Premium tier with 5x the usage at 3x the cost. The change hits existing customers at their first renewal on or after July 1, 2026 — the third meaningful restructuring of Cursor’s billing model in under a year.
Anthropic launched the Claude apps gateway on June 29 — a self-hosted, stateless control plane that adds corporate SSO, RBAC, per-user spend limits, and multi-cloud failover to Claude Code on Amazon Bedrock and Google Cloud, without routing traffic through Anthropic’s own servers.
Claude Fable 5 returns globally today, July 1, after an 18-day export-control suspension. Commerce lifted the ban on June 30 after Anthropic’s new safety classifier blocked the reported jailbreak in over 99% of cases — at the cost of more false positives on routine coding requests.
Anthropic shipped Claude Sonnet 5 on June 30 as the new default model in Claude Code and across all plans — native 1M-token context, 63.2% on agentic coding evals (vs. 58.1% for Sonnet 4.6), and introductory pricing of $2/$10 per million tokens through August 31.
OpenAI and Broadcom unveiled Jalapeño on June 24 — OpenAI’s first custom ASIC, targeting 50% lower inference cost per token vs. Nvidia GPUs. The 9-month development cycle was accelerated with OpenAI’s own AI models. Full production ramp in 2027-2028; small deployments by end of 2026.
In six days (June 18-24), four of Google DeepMind’s most prominent researchers departed: John Jumper (Nobel laureate, AlphaFold) and Jonas Adler (AI coding lead) went to Anthropic; Noam Shazeer (Transformer co-author, Gemini co-lead) to OpenAI. Bloomberg confirmed all four on June 24. Days later, Google confirmed Gemini 3.5 Pro will miss its publicly committed June GA.