
Cursor Launches Origin, Taking Aim at GitHub's Home Turf
Cursor's new Origin service brings repos, pull requests, and two-way GitHub sync into the AI editor, opening in beta to paid users.

Cursor's new Origin service brings repos, pull requests, and two-way GitHub sync into the AI editor, opening in beta to paid users.

A self-propagating npm worm hit 444 packages in four hours, published through trusted workflows with valid provenance attestations.

Mixedbread launched Toast 1, a specialised search agent it says matches frontier models at up to 10x lower cost and cuts legal-benchmark tokens by 3.5x.

Alibaba's Qwen3.8 open weights pair a 2.4T mixture-of-experts model with a 27B dense multimodal model sized for a single 24GB consumer GPU.

Modular shipped Mojo 1.0 in release 26.5, promising API stability after three years of churn, with the compiler still set to be open-sourced in 2026.

Meta's new terminal coding agent enters beta with parallel sub-agents in isolated worktrees, taking aim at OpenAI Codex and Claude Code on cost.

A Claude Mythos 5 agent in UK AISI testing spent 34 hours pushing a malware dropper into a real open source repo using fake GitHub accounts.

Vercel's Agent Plugins 1.0.0 sets one portable packaging format for agent extensions, backed by AWS, GitHub, Microsoft, OpenAI and Cursor.

Cloudflare launched WebMCP, which exposes any site to browser AI agents without code changes, and Kitesurf, an agent-first browser built without Chromium.

AWS released Dogwood under Apache 2.0, an open-source policy language that governs sequences of AI agent tool calls using history-aware rules.