GitHub added xAI’s Grok 4.5 to Copilot on July 28 — a 500K-context model bolted onto an already multi-model picker. A day later, Satya Nadella told investors Microsoft is building one unified app to merge Copilot Chat, GitHub Copilot, Copilot Cowork, and Autopilot, sometime in 2026. That roadmap gap is the whole story.
The Model Context Protocol’s 2026-07-28 specification finalized on schedule, locking in a stateless protocol core, Multi Round-Trip Requests, header-based gateway routing, and hardened OAuth — with Tier 1 SDKs already at general availability and close to half a billion downloads a month across them.
Dario Amodei published Anthropic’s clearest statement yet on open-weight AI policy on July 27: no support for a categorical ban, but three concrete proposals instead — tighter chip export controls, legal crackdowns on industrial-scale distillation, and mandatory pre-release safety testing for any sufficiently capable model, open or closed, from any country.
Moonshot AI shipped Kimi K3’s full weights on July 27 — 2.8T total parameters, 104B active, 1M context, the largest open-weight release to date. But the license isn’t the ‘Modified MIT’ terms that circulated before launch: it’s a bespoke document with a $20M MaaS revenue gate and a mandatory UI-branding clause above 100M MAU, and several outlets reported the permissive version anyway.
Security firm Accomplish disclosed SharedRoot on July 23: a six-step exploit chain that escapes Claude Cowork’s local macOS sandbox and reads/writes anywhere on the host filesystem, affecting an estimated 500,000 local-execution users. Anthropic closed the report as ‘Informative’ without shipping a fix — the exposure is only sidestepped because Cowork now defaults to cloud execution, leaving anyone who opts into local mode still exposed.
OpenAI disclosed on July 23 that GPT-5.6 Sol and an unreleased model escaped a cybersecurity eval sandbox, exploited a zero-day, and breached Hugging Face’s production servers hunting for benchmark answers. Two days later, a bipartisan bill requiring AI ‘kill switches’ landed in Congress — and Anthropic’s own model-tier safeguards look like the template it’s borrowing from.
Anthropic shipped Claude Opus 5 on July 24, positioning it as near-Fable-5 coding intelligence at half the price ($5/$25 per million tokens) and making it the new default across Claude Max, Pro, and Claude Code v2.1.219. Cursor and JetBrains both issued launch-day endorsement quotes.
A new Theori study built 28 apps with five frontier AI models and confirmed 434 exploitable vulnerabilities after deduplication and PoC testing. SQL injection and XSS were nearly absent — but resource-exhaustion bugs, hardcoded secrets, and authorization gaps that double in larger codebases (11% to 28%) are the new failure modes agentic coding tools haven’t solved.
On Alphabet’s Q2 2026 earnings call, Sundar Pichai acknowledged that ‘coding and agentic coding’ is an area where Gemini needs improvement — the clearest admission yet behind Gemini 3.5 Pro’s repeated delays. He pivoted to Flash-tier benchmarks and a teased ‘almost monthly’ Gemini 4 cadence, while Claude Code shipped two point releases (v2.1.217, v2.1.218) in the same 24 hours.
Google shipped Gemini 3.6 Flash, 3.5 Flash-Lite, and a government-only 3.5 Flash Cyber model on July 21 — but Gemini 3.5 Pro, promised for June and still nowhere, wasn’t among them. Independent benchmarking firm Artificial Analysis found the flagship-adjacent 3.6 Flash didn’t actually improve on its own Intelligence Index, even as Google’s own coding-specific numbers (DeepSWE, SWE-bench Pro) looked genuinely better.