OpenAI Codex

A security study reveals that AI agents are vulnerable to supply-chain attacks via the new llms.txt documentation standard. By following links in these files, agents like Claude and Codex have been observed executing unowned and potentially malicious code within corporate networks.

The GhostSplice attack demonstrates how malicious MCP servers can manipulate AI agents into exfiltrating sensitive data by fragmenting instructions across different tool channels. This technique successfully bypasses modern LLM safety guardrails by disguising theft as routine administrative tasks like form completion.

SpaceX's massive acquisition of Cursor raises critical questions about the future of interoperability in AI coding tools. The deal may force a confrontation between Musk's new venture and major model providers like Anthropic and OpenAI.

Anthropic's new Claude Tag feature transforms Claude from a reactive chatbot into an autonomous agent living within Slack channels. It utilizes a unique 'agent identity' model to allow for secure, multi-user collaboration on long-running enterprise tasks.