AWS tested its AWS Security Agent (now part of AWS Continuum) against a freshly built benchmark of 37 real, recently disclosed CVEs, each run as a live containerized target with a hidden flag. Starting from a low-privilege endpoint with only a one-line hint and no proof-of-concept, the agent, running on Claude Opus 5, captured 33 of 37 flags through genuine end-to-end exploitation after an integrity audit, with 2 captures reclassified as unintended-path solves and 2 genuine misses where the agent broke the target before extracting the flag. AWS built this benchmark to avoid the contamination problem of public CVE suites, which models may have memorized from training data.
Anthropic rolled out a beta tracing feature that exports OpenTelemetry spans from both the Messages API and Claude Managed Agents sessions. Developers using the Claude SDK can now capture these spans natively in seven languages: Python, TypeScript, C#, Go, Java, PHP, and Ruby. Enabling the feature requires setting up a destination for the telemetry data inside the Claude Console.
NVIDIA published a case study showing how Siemens EDA applied its open NeMo Gym evaluation library to tighten up an agentic tool used for chip characterization. Instead of checking individual tool calls, the team scored complete final output files with a domain-specific verifier, then used the failure patterns to rewrite the agent's skill instructions and MCP tool descriptions. After several rounds of this loop, a composite accuracy benchmark climbed from roughly 55% to 95%, while the agent needed far fewer steps and far less output to get there. The experiments relied on about 25 evaluation rollouts running Claude Opus 4.8 as the agent model inside Claude Code.
Tamnoon built Tami, an agentic orchestrator on Amazon Bedrock that investigates cloud security findings from CNAPPs and cloud providers, scores remediation safety, and generates fixes with guardrails. The company reports a greater than 90% reduction in critical cloud exposure within 90 days with zero production issues. The system uses four specialized agents (investigation, safety-scoring, remediation, code-generation) each calling different foundation models through Bedrock, with Bedrock Guardrails and Cross-Region inference providing safety and scale.
Orca Security built Discovery AI, an Amazon Bedrock-based agent that turns plain-English security questions into structured queries against its Sonar system, which tracks over 900 cloud resource types. Rather than relying on one large model with the full schema stuffed into every prompt, the production version splits the work across nine specialized stages and multiple foundation models. The result: dramatically lower cost, faster responses, and better accuracy on complex queries, now running live since March 2026.
Anthropic has introduced a beta option on its Claude Platform that allows a Managed Agents agent to construct its own workflow for large, multi-part jobs, such as going through hundreds of documents. Instead of handling everything in one pass, the agent splits the task into phases, delegates pieces across multiple sub-agents, and merges their output into a single result. The job is handed off to the server, which executes it asynchronously and reports progress through a stream of events.
AWS published a joint engineering write-up with Postman describing how Agent Mode, Postman's AI-native interface for API testing and documentation, was built to run in production at scale. Rather than model quality, the team found that tool sprawl and missing context were the biggest obstacles to reliable agent behavior. The post details architectural patterns including dynamic tool scoping, schema-based query access, dedicated context handlers, and how Amazon Bedrock provides model flexibility, cross-Region inference, data residency controls, and prompt caching.
Anthropic has announced the Cyber Mission, a long-term initiative to help defenders secure operational technology and open-source code using Claude models. It includes the Critical Infrastructure Defense Program, built with partners like Accenture, CrowdStrike, Deloitte and Rockwell Automation, and the free OSS Scanner tool that scans open-source projects for vulnerabilities. The effort builds on lessons from the earlier Project Glasswing, now merged into an expanded Cyber Verification Program.
Google Cloud announced the Gemini agent, a unified agent that combines chat, knowledge work, content creation, and coding into one interface accessible across devices and channels. It integrates directly inside Gmail, Docs, Sheets, Slides, Chat, and Calendar, connects to enterprise tools and databases via MCP and a tools registry, and orchestrates across multiple models — including Google's Gemini family and Anthropic's Claude — to balance quality and cost. Google also detailed security/governance features, cost controls like Smart Routing and spend caps, and shared customer results from companies like BNP Paribas, Bradesco, and Orange Spain.
Google has released the Developer Knowledge API, a structured, machine-readable source for Google Cloud, Firebase and Android documentation aimed at AI agents and developer tooling. Instead of scraping web pages or relying on an LLM's training cutoff, agents and CLIs can now query fresh, Markdown-formatted docs through several interfaces: a gcloud CLI surface, an installable agent skill, client libraries, and a browser-based API explorer. The underlying index is refreshed frequently so retrieved answers stay close to the latest published documentation.
Anthropic has launched Claude Haiku 5.5 (claude-haiku-5-5), positioned as its most capable Haiku model for high-volume, latency-sensitive work. It supports a 1 million token context window, up to 128k max output tokens, and adaptive thinking controlled via a new effort parameter. The model is available on the Claude API, Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry. Anthropic warns that code written for the previous Haiku 4.5 model may break on the new version.
Anthropic has merged its Project Glasswing and Cyber Verification Program into a single, expanded CVP with three access tiers: Defense Access, Red Team Access, and Specialized Access. Each tier unlocks progressively fewer safety blocks on cyber-related tasks in Claude Opus 5.5, Claude Sonnet 5.5, and Claude Mythos 5.1 for vetted security organizations. Anthropic also published benchmark results and vulnerability-discovery numbers from the earlier Glasswing program to justify the expansion.
AssemblyAI launched a hosted deployment of the open-source Qwen3.5 4B model on its LLM Gateway, optimized specifically for rewriting raw speech-to-text output into clean, formatted text. On voice rewrite tasks like dictation cleanup and transcript formatting, the model averaged 612ms response time—1.9x faster than GPT-4.1—at 94% lower cost per hour of audio processed. The model is priced at $0.10/$0.50 per million tokens (prompt/completion) and supports only max_tokens, temperature, and stream parameters, with no tool calling.
GitHub has published ReviewBench, a research-preview benchmark designed to compare AI code review agents on a common, auditable standard. The dataset draws on 219 real public pull requests across 19 languages and 187 repositories, chosen to mirror the language and size distribution found across 103.9 million GitHub pull requests. Ground truth comes from a blended pool of human reviewers, static analysis tools, and multiple frontier LLMs, cross-checked by senior engineers who agreed with the benchmark's labels 96.6% of the time. GitHub says it has already used ReviewBench internally to track its own Copilot code review (CCR) product, and that offline benchmark movement reliably predicted the direction of later production A/B tests.
Anthropic has launched the Claude Frontier Academy, a $100 million program designed to address a shortage of skilled staff capable of implementing AI inside large organizations. The goal is to certify a large number of so-called Frontier Deployed Engineers by the close of 2027, with early participants coming from firms including Accenture, Bain, Capgemini, Commonwealth Bank of Australia, Deloitte, McKinsey, Morgan Stanley and Novo Nordisk. The flagship course, a residency modeled loosely on medical training, combines an in-person intensive with a 12-week supervised project inside the engineer's own company before certification.
AWS released a step-by-step walkthrough showing how to give Claude Desktop (on Amazon Bedrock) live internet access through Amazon Bedrock AgentCore Gateway, closing the gap left by the model's training cutoff. The setup wires AWS IAM Identity Center SSO through Amazon Cognito as a SAML-to-OAuth federation layer, issuing JWTs that the AgentCore Gateway validates on every request. The Web Search capability itself is MCP-compatible and runs on an internal Amazon web index covering tens of billions of documents, so no query traffic leaves AWS and no third-party API key is needed. The feature is currently limited to three AWS Regions: us-east-1 (N. Virginia), eu-west-1 (Ireland), and ap-northeast-1 (Tokyo).
Allen Institute for AI (Ai2) has open-sourced AstaBrief 8B, a model built on Qwen3-8B that turns research questions and retrieved literature excerpts into cited scientific reports. It's now live in Ai2's Asta platform as a 'Fast mode' alongside a Claude-powered 'Thinking mode', generating reports in about 51.1 seconds on average compared to 178.5 seconds for the Claude pipeline — roughly 3.5x faster. Ai2 trained the model using supervised fine-tuning on 47K examples (from 90K filtered real research queries) followed by DPO on about 6K preference pairs, and found that filtering training data for citation density was the single most effective lever for improving grounding quality.