-
GitHub Copilot’s connected cloud sessions (Oct 28, 2026) span web, Mobile, CLI, app, VS Code, Slack, and Teams with default cloud sandboxes and snapshot resume. Sandbox billing starts November 2026 from the shared Actions entitlement. GitHub-verified MCP connectors (~26 services) are in public preview.
-
Vercel Labs agent-desktop gives coding agents desktop computer-use via OS accessibility trees—not screenshots. Install, refs loop, platforms, and how it differs from vision computer-use.
-
Takeaway: OpenAI’s card and device limits are privacy and security protections that can block a new ChatGPT purchase or stop a paid account from working on a specific device. The ChatGPT device limit reached warning means that paid account cannot be used on this device — even if checkout succeeded and the subscription worked at…
-
DeepSeek open-sourced dsh-superagent-prototype—an MIT research coding agent for one GitHub repo via DeepSeek Harness. Router–Worker design, observe-mode defaults, not a shipped product.
-
Starting December 2026, OpenAI merges Plus/Pro/Business ChatGPT and Codex usage into one shared token pool. Instant chat stays off-meter; Settings → Usage shows the combined reset.
-
Gemini 4 Carbon hits #1 on Artificial Analysis Intelligence Index v5 (59), posts strong but unevenly checkable cyber scores, and rolls out via Fairwind to cyber defenders first—what developers and security teams should do now.
-
Publisher / product takeaway: On October 28, 2026 Google opened a developer preview of the Connected Apps Platform — a single path to build once (via a cloud-hosted MCP server or Android MCP / AppFunctions), register in the Google Connected Console, and reach users inside Search AI Mode and the Gemini app. SEJ’s October 31…
-
Alphabet Q3: Search ads +12% to $63.3B while query growth hit a 5-year high. Google says AI Mode’s lower monetization contributed — what publishers should watch next.
-
Microsoft Bing separates AI Training from AI Grounding with independent prefs (Oct 30, 2026): shared __usage_ai-training robots.txt, page-level grounding with DisallowExtended, and a NoArchive/NoCache sunset through March 1, 2027.
-
Short answer: WordPress 7.1.4 (released Oct 28, 2026) patches a race condition during complete-package core updates that can lead to unauthenticated remote code execution. Wordfence reports mass polling of staged setup-config.php paths under wp-content/upgrade/; The Hacker News cites about 62,969 blocked attempts in 24 hours. The issue affects WordPress 4.7 through 7.1.3 (advisory GHSA-4w3m-c66w-69mg), was…
