The Voyager ยท AI Daily BriefThe AI Daily Brief: what matters in AI, cloud and systems each morning.https://thevoyager.dev/Claude Code's quiet new rule, and five AI coding tools with browser flawshttps://thevoyager.dev/brief/2026-11-02/https://thevoyager.dev/brief/2026-11-02/Anthropic changed Claude Code's behaviour with a server-side prompt, a cheap 1M-context coding model appeared on OpenRouter, and five AI coding tools turned out to leak through their built-in browsers.Mon, 02 Nov 2026 00:00:00 GMTcoding-agentsclaude-codesecurityagent-monitoringinference-costcapacityNorthflank's breach exposed AI API keys, and a 4B model drives desktopshttps://thevoyager.dev/brief/2026-11-01/https://thevoyager.dev/brief/2026-11-01/Northflank told customers to rotate every secret after a breach that led to abused AI API keys, Microsoft released a 4B computer-use model, and Factory showed what owning the agent harness buys.Sun, 01 Nov 2026 00:00:00 GMTsecuritysecretscomputer-useagent-harnessevalsfeature-storeA fake Claude Code extension hit Cursor, and DoorDash cut agent latency 8xhttps://thevoyager.dev/brief/2026-10-31/https://thevoyager.dev/brief/2026-10-31/A tampered Claude Code extension sat on Cursor's marketplace for about 11 hours with an SSH backdoor, OpenAI's cyber model reached AWS GovCloud, and DoorDash moved most of an agent's work offline.Sat, 31 Oct 2026 00:00:00 GMTsecuritycoding-agentssupply-chainagent-architecturesandboxingA relay quietly rewires Codex and Claude Code, and Mistral opens a 1T modelhttps://thevoyager.dev/brief/2026-10-30/https://thevoyager.dev/brief/2026-10-30/Symantec found a relay service that rewrites Codex and Claude Code config to route traffic through its own servers, Mistral released the weights of its 1-trillion-parameter Large 4, and MoEngage shows how to put 400 APIs behind one agent gateway.Fri, 30 Oct 2026 00:00:00 GMTsecuritycoding-agentsmistralopen-weightsagent-gatewayCopilot Fusion routes models per task, and vLLM ships a security batchhttps://thevoyager.dev/brief/2026-10-29/https://thevoyager.dev/brief/2026-10-29/GitHub's Copilot Fusion mixes models for near-Opus coding results at about half the cost per task, Google's Gemini 4 Carbon starts with cyber defenders, and vLLM 0.32.0 fixes two remote-code-execution paths.Thu, 29 Oct 2026 00:00:00 GMTcopilotmodel-routingvllmsecurityagentsLiteLLM proxy flaw scores 9.9, and Liquid AI ships LFM3https://thevoyager.dev/brief/2026-10-28/https://thevoyager.dev/brief/2026-10-28/A critical LiteLLM proxy advisory chains a low-privilege user to remote code execution, Liquid AI releases the small LFM3 family, and MCP's C# SDK 2.0 makes HTTP stateless by default.Wed, 28 Oct 2026 00:00:00 GMTsecuritylitellmsmall-modelsmcpinferenceCloudflare's GLM-5.3 leak, and GPT-6.1 Terra at $1 per millionhttps://thevoyager.dev/brief/2026-10-27/https://thevoyager.dev/brief/2026-10-27/Cloudflare says an SGLang bug leaked 155 long-prompt responses between tenants, OpenAI's mid-tier GPT-6.1 Terra lands at $1 and $5 per million tokens, and a planted AGENTS.md can steer Codex.Tue, 27 Oct 2026 00:00:00 GMTsecurityinferenceopenaiagentsevalsPingCAP's breach leaks TiDB Cloud keys; Claude's API drops temperaturehttps://thevoyager.dev/brief/2026-10-26/https://thevoyager.dev/brief/2026-10-26/PingCAP says attackers copied encrypted TiDB Cloud API keys, Anthropic's new API version rejects temperature and top_p, and a Bayer agent platform shows what 22 specialist agents cost to run.Mon, 26 Oct 2026 00:00:00 GMTsecurityclaude-apiagentsawsevalsAn agentic pentest tool drove the ConnectWise breach; ADK changes telemetryhttps://thevoyager.dev/brief/2026-10-25/https://thevoyager.dev/brief/2026-10-25/Microsoft says a China-aligned group used an open-source agentic pentest framework to reach privileged cloud access in under three hours, NVIDIA released a 4B looped model, and Google ADK 2.13 changes its default telemetry.Sun, 25 Oct 2026 00:00:00 GMTsecurityagentsadktelemetryevalssmall-modelsA Brotli decoder bug reaches Node and Python, and Kimi K3.1 Pro landshttps://thevoyager.dev/brief/2026-10-24/https://thevoyager.dev/brief/2026-10-24/Node.js and Python's Brotli packages got fixes for a remote-code-execution bug in the decoder, Moonshot launched Kimi K3.1 Pro with open weights promised by 4 November, and Databricks measured what agents do with declarative pipelines.Sat, 24 Oct 2026 00:00:00 GMTsecuritybrotlikimiopen-weightsagentspipelinesLiteLLM 1.107.0 was poisoned, and PHP's two critical bugshttps://thevoyager.dev/brief/2026-10-23/https://thevoyager.dev/brief/2026-10-23/A credential-stealing LiteLLM release sat on PyPI and Docker for under two hours, PHP patched two critical RCE flaws, and Anthropic handed Agent Skills to the Agentic AI Foundation.Fri, 23 Oct 2026 00:00:00 GMTlitellmsupply-chainphpagent-skillssandboxingragGoogle Cloud adds OpenAI models, and Vercel makes agent harnesses crash-proofhttps://thevoyager.dev/brief/2026-10-22/https://thevoyager.dev/brief/2026-10-22/OpenAI's GPT-6 models arrive on Google Cloud in private preview, ElevenLabs ships a drop-in realtime voice model, and Vercel adds durable sessions to existing coding agents.Thu, 22 Oct 2026 00:00:00 GMTopenaigoogle-cloudvoice-agentsagent-harnessmcpdurable-executionDeepSeek opens its inference engine, and llm-d reaches 1.0https://thevoyager.dev/brief/2026-10-21/https://thevoyager.dev/brief/2026-10-21/DeepSeek publishes the engine behind its API (offline inference only), llm-d 1.0 adds the serving layer around it, and Mistral prices a full voice-agent stack.Wed, 21 Oct 2026 00:00:00 GMTinferencedeepseekllm-dvoice-agentsmcpevalsCopilot retires six models, and vLLM stops recomputing long chatshttps://thevoyager.dev/brief/2026-10-20/https://thevoyager.dev/brief/2026-10-20/GitHub retires six Copilot models and gives admins an API to govern the rest, Pi Durable shows what crash recovery does to agent writes, and vLLM gets a way to stop recomputing long chats.Tue, 20 Oct 2026 00:00:00 GMTcopilotgovernancedurable-executioninferenceevalsCERT-In says test agents reached live systems, and OpenCode's Console is breachedhttps://thevoyager.dev/brief/2026-10-19/https://thevoyager.dev/brief/2026-10-19/India's CERT-In says test agents walked into live company systems, OpenCode 2 turns the coding agent into a service, and a preprint puts latent reasoning inside tool-using agents.Mon, 19 Oct 2026 00:00:00 GMTagent-securitygovernancecoding-agentsopencodereasoning-modelsDeepSeek ships an MIT-licensed 1M-context model and quietly repoints its API aliashttps://thevoyager.dev/brief/2026-10-18/https://thevoyager.dev/brief/2026-10-18/DeepSeek ships a 1M-context open-weight Flash model and quietly repoints its API alias, Google shows what a lab-automation agent needs around it, and Databricks makes multi-table transactions generally available.Sun, 18 Oct 2026 00:00:00 GMTopen-weightsdeepseekagentsmcplakehouseevalsPerplexity open-sources its agent sandbox, and Reflection's 501B Beam shipshttps://thevoyager.dev/brief/2026-10-17/https://thevoyager.dev/brief/2026-10-17/Perplexity open-sources its Firecracker sandbox for agents, Reflection's 501B Beam arrives under Apache 2.0, and Google shows why grading an agent's last message misleads.Sat, 17 Oct 2026 00:00:00 GMTsandboxingagentsevalsopen-weightsinferencesecurityMeta releases an 816B open-weight model, and Temporal workers scale to zerohttps://thevoyager.dev/brief/2026-10-16/https://thevoyager.dev/brief/2026-10-16/Meta opens the weights of a very large multimodal MoE, Temporal workers scale to zero on Cloud Run, and VPC Service Controls gets folder-level perimeters for agents.Fri, 16 Oct 2026 00:00:00 GMTopen-weightsmoeagentstemporalsecuritycontext-engineeringWorkday opens HR data to your agents over MCP, and Meta ships Muse Wonderhttps://thevoyager.dev/brief/2026-10-15/https://thevoyager.dev/brief/2026-10-15/Workday opens its HR and finance data to your own agents over MCP, Meta ships a first frontier model, and BigQuery adds hard token quotas.Thu, 15 Oct 2026 00:00:00 GMTagentsmcpenterprisecost-controlevalsbigqueryGemini 4 Argon launches at half price, and Anthropic replaces Git for its agentshttps://thevoyager.dev/brief/2026-10-14/https://thevoyager.dev/brief/2026-10-14/Google ships Gemini 4 Argon at half price for six weeks, a 24B open model targets laptops, and Anthropic explains why Git stopped scaling for agents.Wed, 14 Oct 2026 00:00:00 GMTgeminiopen-modelsagentssource-controladkClaude now writes its own multi-agent plans, and GitLab ships goal-driven agentshttps://thevoyager.dev/brief/2026-10-13/https://thevoyager.dev/brief/2026-10-13/Claude now writes its own multi-agent plan, GitLab ships goal-driven agents with spend caps, and Spotify shows what doubled change volume does to verification.Tue, 13 Oct 2026 00:00:00 GMTagentsanthropicgitlabevalsai-engineeringAn AgentCore SDK flaw exposed role credentials, and Anthropic offers OSS scanshttps://thevoyager.dev/brief/2026-10-12/https://thevoyager.dev/brief/2026-10-12/A quiet Monday: an agent-sandbox credential flaw worth a version check, a research idea that lets models edit their own context, and a bus that finally spans accounts.Mon, 12 Oct 2026 00:00:00 GMTagent-securityawsevalscontext-managementevent-drivenGoogle gives Gemini agents their own email address, and decision models arrivehttps://thevoyager.dev/brief/2026-10-11/https://thevoyager.dev/brief/2026-10-11/Google gives agents their own employee-style identity, a new class of one-pass decision models lands from OpenAI and Cloudflare, and Copilot's sandbox goes GA.Sun, 11 Oct 2026 00:00:00 GMTagentsagent-identitydecision-modelssandboxingobservabilitymodel-routingClaude acted on real websites in evals, and Gemini 4 Argon goes to defenders firsthttps://thevoyager.dev/brief/2026-10-10/https://thevoyager.dev/brief/2026-10-10/Anthropic explains how its agents wandered onto real websites during evaluations, Google previews Gemini 4 Argon to cyber defenders only, and Netflix, Ai2 and Valkey show what dependable infrastructure looks like.Sat, 10 Oct 2026 00:00:00 GMTagent-safetyevalsmodelsobservabilitygpu-schedulingvalkeyAnthropic's usage policy requires human oversight, and Spotify shares agent lessonshttps://thevoyager.dev/brief/2026-10-09/https://thevoyager.dev/brief/2026-10-09/Anthropic's usage policy adds human-oversight duties for high-risk products, Spotify shares which multi-agent patterns held up, and a quieter day for models.Fri, 09 Oct 2026 00:00:00 GMTpolicyagentsinferencearchitecturegovernanceresilienceOpenAI posts 722 unverified math manuscripts, and Haiku 5.5 cuts small-model priceshttps://thevoyager.dev/brief/2026-10-08/https://thevoyager.dev/brief/2026-10-08/OpenAI dumps 722 unreviewed math manuscripts on the world, Haiku 5.5 drops small-model prices by roughly 90%, and a few honest lessons about what makes agents and datastores reliable.Thu, 08 Oct 2026 00:00:00 GMTagentsmodelspricingverificationarchitecturesecurityWikimedia catches OpenAI agents off-script, and Mistral previews a 1T modelhttps://thevoyager.dev/brief/2026-10-07/https://thevoyager.dev/brief/2026-10-07/Wikimedia reports unauthorized OpenAI agents on its sites, Mistral previews a 1T-parameter MoE, and an open embedding model raises the lock-in question for vector stores.Wed, 07 Oct 2026 00:00:00 GMTagentsopen-modelsembeddingsmcpicebergsecurityReflection AI promises a 501B open-weights model, and GLM 5.3 lands on Bedrockhttps://thevoyager.dev/brief/2026-10-06/https://thevoyager.dev/brief/2026-10-06/A big American open-weights MoE is coming, GLM 5.3 lands on Bedrock, and two reminders that the plumbing under agents (disks, CLIs, memory) deserves as much thought as the model.Tue, 06 Oct 2026 00:00:00 GMTopen-modelsbedrockagentsmemorysandboxingcloudflareApple tightens Full Disk Access for agents, and OpenAPPA polices data flowhttps://thevoyager.dev/brief/2026-10-05/https://thevoyager.dev/brief/2026-10-05/Monday's thread is who controls what an agent can touch: Apple's disk permissions, a policy engine for exfiltration, and a declared plan that doesn't get followed.Mon, 05 Oct 2026 00:00:00 GMTagentssecuritymacosicebergharnessessearchAgents turn fix PRs into exploits in minutes, and GPT-6.1 Sol undercuts Astrahttps://thevoyager.dev/brief/2026-10-04/https://thevoyager.dev/brief/2026-10-04/A quiet Sunday where the common thread is agents acting faster than the guardrails around them.Sun, 04 Oct 2026 00:00:00 GMTagentssecurityopenaiistioevalsplatform