Goldman Sachs restricts AI coding tools to engineers
Goldman Sachs limits advanced AI coding tools like Claude and GitHub to engineers only after October guidelines cite productivity and risk.
Stories per day · 30 days
7 RSS
Relatedcodex4claude2claude-desktop2cursor2jetbrains2visual-studio-code2ai-coding1ai-tools1claude-code1code-review1coding-agents1copilot-fusion1developer-tools1embedded-browser1faros1goldman-sachs1model-router1model-routing1
19 stories, newest first · one card per story
Stories tagged #github-copilot
Embedded browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop flawed
Forever Security’s EMBRACE findings show prompt injection, address spoofing, and local file reads; Codex and VS Code were still unpatched.
1
Embedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
GitHub launches Copilot Fusion to route and combine coding models
Fusion is generally available on all Copilot plans, bills each model at its normal rate, and offers a 30% discount through November 30, 2026.
1
GitHub launches Copilot Fusion to route coding work across models
Paid Copilot users get a 30% Fusion discount through November 30, 2026, while High and Max can use more credits.
2
AI Can Write the Code. Who Verifies It?
A Faros study and tooling survey say AI coding raises bugs and incidents unless automated verification keeps pace.
20
TokenEconomizer cuts coding-agent token costs on sequential tasks
Authors report 18.4-30.9% lower average token cost on Claude Code, Codex, and GitHub Copilot CLI with comparable success.
Meta and Microsoft Limit Employee Use of Claude AI Tools
Microsoft and Meta are limiting employee use of Anthropic's Claude in favor of their own coding tools.
Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets
Researchers say crafted web pages can make GitHub Copilot CLI decrypt hidden instructions and leak secrets.
5
Meta and Microsoft pull back from Claude as Anthropic transforms from partner into competitor
Microsoft and Meta are sharply cutting internal Claude use as Anthropic becomes a competitor.
AI Coding Agents for Enterprise: IP Indemnity, Data Residency and 500-Seat Cost Compared
Enterprise comparison finds Copilot and Kiro indemnify generated code, while Cognition's Devin terms exclude outputs.
18
Microsoft gives Copilot another makeover, adding an Autopilot agent and usage-based billing
Microsoft revamps Copilot with an OpenClaw-based Autopilot agent, a Code section, and usage-based billing replacing flat-rate pricing.
Microsoft thinks its new Copilot ‘super app’ will be as influential as Office
Microsoft unveiled a Copilot super app bundling chat, coding, and Autopilot agents with usage-based enterprise billing.
Microsoft agentically ports Copilot runtime to Rust for $120K
Microsoft rewrote its GitHub Copilot runtime from TypeScript to Rust using AI agents, converting 430,000 lines for about $120,000 in tokens.
6
A zero-click RCE flaw in AI coding agents could have exposed enterprise systems
Researchers disclosed Plugin4Shell, a zero-click RCE in Claude Code, Codex, Gemini CLI, and Copilot caused by unverified Git plugin checkouts.
3
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
Air Security disclosed Plugin4Shell, letting repository owners swap version-locked plugins in Claude Code, Codex, GitHub Copilot, and Gemini CLI.
3
Plugin4Shell Zero-Click RCE Hits Claude Code, Codex, Copilot and Gemini CLI
Plugin4Shell flaw lets attackers swap SHA-pinned plugins for malicious code, enabling zero-click RCE in Claude Code, Codex, Copilot, and Gemini CLI.
5
Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched
Researchers disclosed Plugin4Shell, a zero-click RCE SHA-pinning bypass in Claude Code, Codex, GitHub Copilot, and Gemini CLI; two remain unpatched.
7
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
Wiz's autonomous Red Agent found and exploited a GitHub Actions injection in a Copilot-assisted PR, reaching Snowflake's internal Jira without human help.