Anthropic announced Enterprise Frontier Safeguards on September 1 — misuse detection that runs on activity data stored in the customer’s own cloud account, under the customer’s own encryption keys, with no Anthropic human review required. It directly resolves the Mythos-class 30-day data retention mandate that forced GitHub Copilot to ship Claude Fable 5 off-by-default for enterprise back in June.
Meta shipped Muse Spark 1.3 on September 2 with two configurations: the one developers can actually buy scores a tie, not a lead, and got more expensive per task despite flat per-token pricing. The higher score Meta led with is locked to a ’limited partner preview’ nobody outside Meta can access.
Anthropic promised on July 30 to publish a redacted transcript of the incident where Claude built and published a malicious PyPI package within a week. As of September 7, it’s been 39 days — five and a half weeks — with no transcript, no new explanation, and no update on the promised independent METR review.
xAI launched Grok Bot for Enterprise on September 3, expanding its cloud computer-use agent to every Cursor paid plan with a two-week free enterprise trial. Cursor’s own documentation for the same product now describes it as a native Cursor feature without mentioning xAI at all — a branding tell about where Cursor’s autonomy actually comes from.
The independent Terminal-Bench 4.0 leaderboard now shows GPT-6 Astra at 58.2% (±2.8) and Claude Fable 5.1 at 57.9% (±3.8) — a gap smaller than either model’s own error margin. Both self-reported numbers held up under independent verification, but the ‘winner’ framing both labs used doesn’t survive contact with the error bars.
OpenAI launched GPT-6 Astra on September 3, its first model to cross the ‘Critical’ cybersecurity-capability threshold under its own Preparedness Framework — able to find unknown vulnerabilities and build exploits for well-protected systems without step-by-step guidance. It’s rolling out to every ChatGPT tier and the API within days, gated by little more than an admin checkbox and a refusal prompt.
Four Claude Code releases shipped September 1-4 (v2.1.258 through v2.1.261): a new fullscreen diff panel, org-wide managed MCP servers, a headless no-prompts mode for unattended hosts — and a fix for a bug that meant Fable 5.1’s freshly announced 75% cache-read discount wasn’t actually being applied after tool calls.
McKinsey’s State of AI 2026 survey of 1,719 organizations across 97 countries found that 32% have decided against buying a software product or feature because agentic coding tools let them build it internally instead, and enterprises scaling AI agents jumped from 27% to 40% year over year — but enterprise-level EBIT impact stayed flat at 37%, unchanged since 2025.
VulnCheck confirmed active exploitation of CVE-2026-0768, a CVSS 9.8 unauthenticated remote-code-execution flaw in Langflow’s custom component editor, with over 360 attack attempts logged by September 1 as Russia-origin actors harvest AWS and OpenAI API keys from compromised, root-level agent instances. A fix has existed since version 1.11.6; every unpatched release up to 1.4.2 grants root code execution to anyone who can reach it.
Anthropic launched Claude Fable 5.1 and Mythos 5.1 on September 1, the same day Terminal-Bench 4.0’s leaderboard finally populated with real, independently-run scores. Claude Opus 5 leads at 51.8% and Fable 5 sits second at 44.5% — a 7-point gap over third-place GLM-5.3 — while Fable 5.1’s own self-reported 55.8% isn’t on that leaderboard yet.