AI Coding Live News

Security firm Parameter published an exploit chain in which an attacker publishes a malicious conversation through ChatGPT's normal sharing feature; when a signed-in victim opens the /share/ link, the payload runs as chatgpt.com in their session, lists conversations, reads a private chat that was never shared, and sends data out. Parameter reported it through OpenAI's bug bounty on October 18; OpenAI raised it from P2 to P1, fixed it on October 26 and paid a $5,000 bounty. Parameter reports no real-world use, and users do not need to do anything.

Zoom

Microsoft Research, Microsoft Security and UC Berkeley open-sourced TokenEconomizer on GitHub (Apache 2.0, v0.1.0 released October 26), a plugin for Claude Code, Codex, GitHub Copilot CLI and Pi, with experimental opencode support. It learns from earlier sessions in the same repository: micro-skills remember repo facts, tool pruning drops tool definitions that go unused, and a loop guard nudges an agent that is stuck. The paper reports 18.4–30.9% lower mean cost across five agent and model combinations on 277 SWE-Bench tasks (paper figures).

Zoom

On Oct 26, Entire co-founder and CEO Thomas Dohmke announced on X and the company blog that Entire is live as "the Git forge for agent-human collaboration." It has three parts: Trails, which replace diff-based review with eval scores computed on every push; Git-compatible distributed hosting that can replicate across regions or mirror from GitHub; and Continuous Memory, which stores agent sessions in the repo. Buildkite and Depot are the first CI integrations, and it is open to any developer today.

Zoom

In an Oct 26 post on its blog, Runway launched App Studio: describe the tool you want in plain language and App Studio writes, tests and deploys an app with its own interface that generates images, video and audio with Runway's models, using your team's Brand Kits, Workflows and Assets. An existing Agent session or Workflow can be turned into an app in one click. Apps are private by default and can be shared with a team or published as a public link that visitors run on their own credits. Built-in apps at launch include Character Swap, AutoComp and 3D Camera Control. It is available now on every paid plan at no extra charge, drawing on existing Runway credits.

Zoom

Microsoft shipped Visual Studio Code 1.143. The Copilot harness, built on the Copilot SDK, is now the default for new sessions and works across the editor and Agents window. A Compare Models preview runs several models on one task with an optional Judge model, an experimental mode runs MAI Code 1.1 Flash on a local NVIDIA GPU, and large chats open much faster.

Zoom

OpenAI officially rolled out 'Locked Chats' across all ChatGPT subscription tiers, including Free, Plus, Team, Enterprise, and Edu. Users can now safeguard sensitive individual conversation threads behind a device PIN, Face ID, or Touch ID biometric lock. Crucially, locked chats feature strict memory isolation: interactions inside locked sessions are physically barred from updating ChatGPT's persistent user memory bank. Confidential corporate discussions, sensitive health queries, or proprietary code audits remain strictly ephemeral to the local lockbox without contaminating future general chat contexts.

Zoom

At PyTorch Conference North America on Oct 20, the CNCF Sandbox project llm-d released version 1.0. It turns inference engines such as vLLM and SGLang into one coordinated serving pool, and 1.0 adds multi-tenant priority and fairness scheduling (flow control), router high availability with zero-downtime rolling upgrades (DisaggregatedSet), a v1 configuration API, and agent-aware session routing with Responses API state. Founded in 2025 by Red Hat, IBM, Google Cloud, CoreWeave and NVIDIA, the project has 500+ contributors, and JetBrains, DigitalOcean and Mistral already run it in production.

Zoom

Researchers introduced MemPilot (arXiv:2610.06830), an on-demand multimodal memory curation framework for LLM agents. Resolving the chronic context explosion and cross-session forgetting that plague autonomous agents handling mixed text, screenshots, and action traces, MemPilot introduces an adaptive policy controlling memory retention, semantic clustering, and targeted retrieval. Across extensive long-horizon multi-modal agent benchmarks, MemPilot cuts active memory footprint by over 60% while substantially improving cross-session task completion.

Zoom