Adversa AI disclosed two new attack classes in May 2026: TrustFall (one-click RCE via malicious .mcp.json files affecting Claude Code, Cursor, Gemini CLI, and GitHub Copilot) and SymJack (symlink-hijack RCE across six agents including Codex and Grok Build). A real-world worm — Miasma — was found exploiting TrustFall in a production Microsoft Azure repository.
Anthropic updated its privacy policy to require government ID and a live selfie from flagged Claude users, processed by Persona — a vendor backed by Founders Fund, which also holds Anthropic equity. Effective July 8, the change is widely read as groundwork for a US-only Fable 5 restoration path after the June 12 export ban.
Anthropic launched Claude Tag in research preview on June 23, 2026 — an always-on AI teammate that lives inside Slack, responds to @mentions, and proactively intervenes in conversations without being asked. It’s the most ambitious signal yet that Anthropic is building toward workplace infrastructure, not just developer tooling.
A new attack class called ‘agentjacking’ exploits Sentry’s MCP server to inject malicious instructions into AI coding agents. Disclosed in June 2026, the attack achieves an 85% exploitation rate against Claude Code, Cursor, and Codex — and Sentry has declined to fix it at the root.
Z.AI’s GLM-5.2, released June 13 under MIT license, scores 62.1% on SWE-bench Pro — beating GPT-5.5 at 58.6% while costing roughly one-sixth as much. The model lands within 3 points of Claude Opus 4.8 on FrontierSWE and MCP-Atlas benchmarks, and Z.AI has publicly forecast open-sourcing a Fable-class model before year-end.
Anthropic published an 80-page model specification for Claude in January 2026, released under CC0. Unlike prior rule lists, it teaches Claude why to behave — distinguishing hard prohibitions from adjustable defaults, explaining the priority order when values conflict, and granting operators genuine control over model behavior. Six months in, its fingerprints are visible everywhere from CLAUDE.md to the Fable 5 controversy.
Anthropic’s Workload Identity Federation (WIF) is now generally available: Claude API access with short-lived OIDC tokens from AWS IAM, GCP, Azure, GitHub Actions, Kubernetes, or Okta — no static API keys to create, rotate, or leak. Each agent gets its own identity, role, and audit trail. Here’s what changes and how to migrate.
On June 12, the US government issued an export-control directive suspending Fable 5 and Mythos 5 for all foreign nationals — citing a jailbreak that amounts to asking the model to fix code. Anthropic disagreed, Dario Amodei lobbied at the G7, and Trump softened his view. Nine days later, the directive still stands, the models remain offline for all customers, and no resolution timeline exists.
Gemini CLI — 100K+ GitHub stars, 6,000 community pull requests, free Gemini 2.5 Pro — went dark on June 18. Its closure is a useful forcing function: which open-source AI coding tools are actually worth running in 2026? Aider, OpenCode, Continue, and Cline each make a different bet. Here is what separates them.
AI solved the coding problem and created a review crisis. Faros AI data shows median time-to-first-review up 157%, PRs merged without review up 31%, and incidents per PR up 243% as AI PR volume outpaces human review capacity. The fix isn’t more reviewers — it’s restructuring the entire review model.