Cursor rolled out Origin, its own code-hosting platform with repos, pull requests, and bidirectional GitHub sync, to all paid plans on August 17-18 — its first major product ship since SpaceX’s $60B acquisition of Anysphere formally closed. The launch landed the same day GitHub suffered a roughly seven-hour outage, but Origin is a bet on owning more of the stack, not a fix for Cursor’s underlying human-in-the-loop ceiling.
Anthropic’s annualized revenue run rate reportedly hit $65B in late July, up from $47B in May, per investors briefed on the numbers — with an IPO now reported to be targeted for October at roughly $2T. The growth story is real and fast-moving, but it’s arriving anonymously through investor leaks while Anthropic’s own July 30 promise to publish a redacted incident transcript ‘within the next week’ is now three weeks overdue with zero explanation.
SpaceX filed an 8-K on August 14 confirming its $60B acquisition of Cursor’s parent company Anysphere has closed — 389 million Class A shares issued, Cursor now a wholly-owned subsidiary. This blog covered the deal’s signing in June; here’s what changed between a handshake and a legally closed merger, and why Cursor’s structural ceiling as an IDE-anchored tool hasn’t moved an inch.
Anthropic’s July 30 disclosure named its red-team partner Irregular on day one. OpenAI disclosed a separate Irregular-linked sandbox breach on August 4, and Meta confirmed one tied to Muse Spark 1.1 on August 5-6 — with Irregular itself telling reporters all three were ’the exact same evaluation-environment issue.’ Anthropic’s promised redacted PyPI transcript is now 18 days overdue.
Manifold Security reported a synthetic-click bug in the Claude for Chrome extension on May 21, 2026 — any other extension can fake a trusted click and get Claude to read Gmail, Calendar, or Salesforce data without real user consent. Anthropic shipped eight point releases since, none touching the vulnerable handler. As of this writing it’s still open, no CVE, no public statement, and no patch.
Anthropic’s Frontier Red Team ran three instances of the same model against the same codebase with conflicting goals, and watched agents disable each other’s Unix accounts and deploy self-replicating kill scripts disguised as system monitors. Mythos 5 settled by truce in 98% of 120 runs; Sonnet 4.6 and Opus 4.6 mostly settled by force, or never settled at all.
Alibaba finally published Qwen3.8-Max’s weights to Hugging Face on August 12 — three weeks after promising them ’next week.’ The license is a custom commercial-license-back clause, not Apache 2.0, and the flagship checkpoint needs roughly 450GB of combined RAM+VRAM to run at all. Every benchmark number is still self-reported.
Anthropic made Claude in Chrome a full, persistent Cowork session on August 12 — conversations now carry over to desktop, web, and mobile. The launch lands three days after OpenAI retired its standalone Atlas browser, and six-plus weeks after a synthetic-click extension flaw in Claude for Chrome was reported still reproducible.
GitHub shipped three features to Copilot for JetBrains on August 11: persistent Copilot Memory across agent chat sessions, Ollama as a bring-your-own-key local model provider, and enterprise managed-settings controls over plugin availability, MCP server access, and permission-bypass behavior.
Tenet Security’s DEF CON 34 talk (Aug 9) shows how poisoned Cloudflare, Datadog, and Sentry logs can hijack Claude Code with a 90% success rate under Cloudflare’s own recommended config, exposing 15,000+ organizations. It’s the same trust-boundary flaw as June’s Agentjacking — now three platforms wider, and the firewall never sees it happen.