Securityhigh impactSep 17, 2026
Plugin4Shell: a zero-click RCE hits Claude Code, Codex, Copilot and Gemini CLI at once
Researchers disclosed Plugin4Shell on September 17, a flaw in how Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI verify plugin updates pinned to a specific Git commit hash. An attacker who controls the plugin's repository can create a branch named after that pinned SHA and set it as the default branch, so the agent pulls malicious code while the pin still looks honored. No click, no approval prompt, no reinstall. Plugins loaded this way inherit the developer's own permissions: local source, cloud credentials, SSH keys, sometimes production access. Anthropic fixed Claude Code in version 2.1.179 and OpenAI closed it in Codex 0.146.0, both before the public disclosure. Google called Gemini CLI deprecated and pointed users to Antigravity instead of patching it. Microsoft, notified back in June, still hadn't shipped a fix, published an advisory, or given a timeline as of September 20 — GitHub says its own branch-naming rules block the exploit on github.com, but Copilot also pulls from Bitbucket, GitLab and self-hosted marketplaces that carry no such protection.
Releasemedium impactSep 10, 2026
OpenAI puts the Codex agent harness behind a public Agents API
OpenAI opened its Agents API in public beta, exposing the same session orchestration, context compaction, sub-agent coordination and crash recovery that runs Codex to any developer through four primitives: agent, environment, session and events. There's no markup on top of it — customers pay only for model tokens, tool calls and whatever sandbox compute they choose, sourced from OpenAI or partners including Cloudflare, Vercel and Oracle. It's a direct pitch against LangChain, CrewAI and the rest of the orchestration layer: don't build the agent runtime, rent OpenAI's.
CodexMarkTechPost; OpenAI Pricingmedium impactAug 21, 2026
OpenAI cuts GPT-5.6 Sol API pricing by up to a third, its second cut in a month
OpenAI dropped GPT-5.6 Sol's input price from $5 to $4 per million tokens and output from $30 to $20, a 20% and 33% cut respectively. The new rate covers the pay-as-you-go API, Codex credits and eligible ChatGPT Work plans through November 21; Plus, Pro and Business consumer subscriptions stay where they were. It's Sol's second markdown since the GPT-5.6 family launched in July. Google's Gemini 3.7 Flash shipped this week at roughly half the price of its predecessor, and Anthropic has been picking off enterprise accounts on reliability rather than price.
Adoptionhigh impactAug 13, 2026
IBM joins OpenAI's Elite partner tier, wiring GPT-5.6 and Codex into IBM Consulting
IBM is bringing OpenAI's frontier models — GPT-5.6, Codex and ChatGPT Work — into IBM Consulting Advantage, the platform IBM uses to deliver consulting work to enterprise clients, with financial services, government, telecom and retail named as first targets. IBM becomes a member of OpenAI's Elite partner tier as part of the deal, and the two companies frame the collaboration around three areas: converting legacy workflows to AI-ready operations, modernizing application development, and cybersecurity/AI risk management. The frontier-model layer and the systems-integrator layer are consolidating. For anyone already inside an IBM Consulting engagement, those stop being two separate vendor decisions.
ChatGPTCodexIBM Newsroom announcement (newsroom.ibm.com); TechCrunch and Dataconomy coverage