Anthropic spent the week collapsing product walls. Claude Code Projects now run as a coordinator plus parallel cloud threads. Cowork is no longer a separate mode. Google put two new Live models on the Gemini API the day before that.

The security story is the plugin pin your agent already trusted. Air showed that a marketplace SHA is not enough if git checks out a branch with the same name. Here is the week.

Top Stories This Week

Claude Code Projects Become a Coordinator for Parallel Cloud Threads -

On September 17, Anthropic rebuilt Projects inside Claude Code. You pick a goal and a repo. A coordinator scopes the work, opens threads, reviews the output, and keeps going after you close the laptop. Each thread is a Claude Code cloud session on its own branch and copy of the repo. Overlap lands as a normal merge conflict. Threads can still spawn subagents and workflows.

The beta is for select Pro and Max users who already use cloud sessions and do not have existing projects on web or desktop. Access expands to more people on those plans this week, then to Team, Enterprise, chat, and Cowork. Join the waitlist if you do not have it. Threads run in the cloud today. Local machines are listed as coming soon. Several threads at once each count as a full session, so usage limits arrive faster. Set the model and effort on the coordinator and on the workers, and watch project-specific usage.

This is the same shape Cursor shipped last week. The difference is who gets it and where it runs.

Plugin4Shell Bypasses SHA Pins on Four Coding Agents -

On September 17, Air published Plugin4Shell. The agent clones a marketplace plugin, checks out the pinned commit, and never confirms that HEAD is that commit. Git will treat a 40-hex branch name as a ref before it treats it as an object. If the attacker controls the plugin repo, they can make auto-update install different code while the pin still looks honored. The Register and The Hacker News matched Air’s vendor status.

Update Claude Code to 2.1.179 or later. Update Codex to 0.146.0 or later. Air says Copilot is still open because it can install plugins from hosts that allow hash-shaped branch names. GitHub told The Register that github.com rejects those names, which does not cover Bitbucket or self-hosted git. Google will not patch Gemini CLI. Move those installs to Antigravity. Auto-update is on by default in Claude Code and Codex, which is why Air calls it zero-click. If you cannot patch, stop marketplace auto-update and drop plugins from hosts that accept SHA-shaped refs.

Google Ships Gemini 3.8 Live for Voice Agents -

On September 15, Google launched Gemini 3.8 Live and 3.8 Live Extended Thinking. Both are on the Gemini API and Google AI Studio. The cheap, low-latency model is gemini-3.8-live. The harder one is gemini-3.8-live-extended-thinking. Input limit is 131,072 tokens. Output limit is 65,536. If you still pass gemini-3.1-flash-live-preview, change the model string and drop thinking_level from session setup. Async tools with behavior: NON_BLOCKING are now the default. Audio is the response modality.

Extended Thinking is the one for multi-step tool work while the voice keeps going. Set thinking_level to low, medium, or high on that model only. Enterprise access is private preview in Gemini Enterprise. Search Live, Gemini Live, and some Workspace surfaces got the consumer roll-out the same day.

Anthropic Merges Cowork Into One Claude and Adds Docs and Slides -

On September 16, Anthropic folded Cowork into ordinary Claude chats. Claude picks how much autonomy a request needs. Design now runs inside the same conversation. Docs and Slides launched in beta on paid plans. You can edit in place, present from Claude, or export Word, Google Docs, PowerPoint, or PDF. Enterprise admins choose when those betas turn on. The merge is rolling out to Pro and Max on web, desktop, and mobile over the next few weeks. There is nothing to flip. Team and Free follow later. Claude Code stays a separate product.

If you already live in Cowork, the chat you open next week is the same agent with a different door.

Copilot Auto Lets You Pick Cost Versus Quality -

On September 14, Copilot auto model selection gained three tiers: efficiency, balance, and intelligence. The model pool is the same. Auto still picks per prompt. A docstring can land on a small model even on intelligence. The feature is rolling out in VS Code, Copilot CLI, and the Copilot app. You pay for the model it actually used. Paid subscribers still get the 10% auto discount.

Set the tier to match the work, not the brand of the model.

Redis 8.10 Cuts Hash Memory and Adds Incremental Backups -

On September 14, Redis Open Source 8.10 went GA. Hashes that share a field set can use a template encoding, which Redis says can cut memory by up to 50%. Bulk load with HIMPORT PREPARE then HIMPORT SET so you send values without repeating field names. Operators get incremental cluster backups through the new BACKUP commands, with staggered snapshots instead of every shard forking at once.

There are also SUNIONCARD and SDIFFCARD, LMOVEM for moving several list items atomically, MAXCOUNT/MAXSIZE on XREAD, and more JSONPath functions. Download 8.10 and try HIMPORT on a profile or session keyspace before you change the rest of the app.

Developer Tools & Platforms

RHEL Ships Supported Free-Threaded Python 3.14 -

On September 14, Red Hat put a free-threaded Python 3.14 build in CodeReady Linux Builder for RHEL 9.8 and 10.2. Enable the repo, then sudo dnf install python3.14-freethreading and run python3.14t. It sits next to the regular interpreter. Upstream 3.14 is the first release where this build is supported, not experimental. The GIL-on interpreter stays the default.

Run your suite on python3.14t. Check sys._is_gil_enabled() after you import C extensions. A package that is not ready can turn the GIL back on for the process. Overhead on single-thread work is still about 5% to 10%.

GitHub Turns Off SHA-1 HTTPS, and Enterprises Can Lock GHAS -

On September 15, GitHub disabled SHA-1 in HTTPS for github.com and partner CDNs, including GitHub Enterprise Cloud and Data Residency. GitHub Enterprise Server is not in this cut. Anything that still negotiates SHA-1 to github.com fails as of that day.

The same day, enterprise admins could enforce Advanced Security configurations so org owners cannot weaken them. The Enforcement dropdown is Don’t enforce, Enforce for repository owners, or Enforce for repository and organization owners. On September 16, Enterprise Cloud also got bulk SSO authorization for classic PATs and SSH keys through a GitHub App with enterprise_credentials:write, up to 50 orgs per request.

Security

CISA Adds an Exploited Pixel Modem Bug -

On September 15, Google’s Pixel bulletin said there are indications that CVE-2026-58704 is under limited, targeted exploitation. It is a high-severity elevation of privilege in the cellular modem. No extra privileges and no user tap. On September 16, CISA added it to KEV with a federal due date of September 19. Install the September Pixel update and confirm security patch level 2026-09-05 or later. That patch level also covers the rest of the September Android bulletin for supported Pixels.

Chrome 153 Gets Two Critical Fixes -

On September 17, Chrome stable moved to 153.0.8010.52/.53 on Windows and Mac, and 153.0.8010.52 on Linux. Google listed 16 security fixes. Two are critical: CVE-2026-93374, a use after free in Dawn, and CVE-2026-93372, a buffer overflow in WebGL. Google did not say these were in the wild. Open Help, About Google Chrome, and relaunch. Last week’s in-the-wild V8 bug still wants 153.0.8010.36 or later. Take the newer build.

Funding & Industry Deals

Temporal Raises $550M at $12.55B -

On September 14, Temporal announced a $550 million Series E at a $12.55 billion valuation. Lightspeed led. Wellington, Goldman Sachs Alternatives, and Tiger Global co-led. Reuters had the same figures. The February Series D was $300 million at $5 billion. Temporal said annualized revenue recently passed $250 million, net dollar retention has been above 200% since February, August had more than 1.9 trillion billable actions, and headcount is 570. Durable execution is the product. Long agent jobs are why the round exists.

Factory Hits $5B, Raindrop Hits $50M -

On September 15, Factory raised $200 million at a $5 billion valuation. Blackstone, Khosla, Sequoia, Insight, Evantic, Sound Ventures, NEA, Mantis, and Clearlake are on the post. Total funding is over $400 million. April’s Series C was $150 million at $1.5 billion. Factory sells an enterprise software factory, not a chat pane, and says Nvidia, Adobe, and Palo Alto Networks are customers.

On September 17, Raindrop said a CRV-led Series A takes total funding to $50 million. The round size itself was not disclosed. The company watches live agent traffic for silent failures and launched Simulations in research preview, which replays production traffic against a proposed change.

S&P Global Agrees to Buy OpenZeppelin -

On September 17, S&P Global agreed to acquire OpenZeppelin. Terms were not disclosed. OpenZeppelin stays a separate unit under CEO Demian Brener. The company said OpenZeppelin Contracts have moved more than $37 trillion and that it has done more than 900 security engagements. If you depend on those libraries, the maintainer is now a ratings firm. The contracts stay open source in the announcement. Closing still has conditions.

Layoffs: Oracle Files a 378-Person California WARN

  • Oracle: On September 14, Oracle America filed a California WARN covering 378 employees at two sites, with an effective date of November 13. That follows last week’s disclosure that Oracle would add about $700 million to its fiscal 2026 restructuring plan. Oracle did not publish a new company-wide headcount with this filing.

The Numbers That Matter

  • $550 Million Temporal Series E, at a $12.55 Billion valuation
  • $200 Million Factory round, at a $5 Billion valuation
  • $50 Million Raindrop total funding after its Series A
  • 378 Oracle California WARN seats, effective November 13
  • 2.1.179 Claude Code build that Air says closes Plugin4Shell
  • 0.146.0 Codex build that Air says closes Plugin4Shell
  • 153.0.8010.52 Chrome build that patches CVE-2026-93374 and CVE-2026-93372
  • 2026-09-05 Pixel patch level for CVE-2026-58704
  • September 19, 2026 CISA due date for the Pixel KEV
  • 50% hash memory cut Redis claims for template-encoded hashes in 8.10

Quick Hits

  • Copilot auto tiers - September 14. Efficiency, balance, or intelligence. VS Code, CLI, and the Copilot app.
  • Redis 8.10 - September 14. Compact hashes, HIMPORT, incremental BACKUP.
  • Python 3.14t on RHEL - September 14. python3.14-freethreading on 9.8 and 10.2.
  • Temporal $550M - September 14. Series E at $12.55 billion. Lightspeed led.
  • Oracle California WARN - September 14. 378 people. Effective November 13.
  • Gemini 3.8 Live - September 15. gemini-3.8-live and gemini-3.8-live-extended-thinking.
  • Factory $200M - September 15. $5 billion valuation. Over $400 million raised in total.
  • GitHub SHA-1 HTTPS - September 15. Off on github.com and GHEC. GHES untouched.
  • GitHub GHAS enforce - September 15. Enterprise configs can bind org owners too.
  • Pixel bulletin - September 15. CVE-2026-58704 in the modem. Patch level 2026-09-05.
  • One Claude - September 16. Cowork merges into chat. Docs and Slides in beta.
  • GitHub SSO PAT API - September 16. Bulk-authorize classic PATs and SSH keys, 50 orgs at a time.
  • CISA Pixel KEV - September 16. Due September 19.
  • Claude Code Projects - September 17. Coordinator plus cloud threads. Select Pro and Max.
  • Plugin4Shell - September 17. Update Claude Code and Codex. Copilot and Gemini CLI still open.
  • Chrome 153.0.8010.52 - September 17. Two critical CVEs in Dawn and WebGL.
  • Raindrop $50M - September 17. CRV Series A. Simulations in preview.
  • OpenZeppelin / S&P - September 17. Terms undisclosed. Unit stays under Brener.
  • Copilot code review - September 18. Clearer overview comments and smarter auto-resolve. Generally available.

The week was a coordinator for Claude Code, a plugin pin that was not a pin, and two Live models you can point a voice agent at. Update Claude Code and Codex, take the Pixel and Chrome builds, and set Copilot auto to the tier you actually want to pay for. Next week, watch whether Copilot ships a Plugin4Shell fix and whether Claude Code Projects leave the waitlist. See you then.