Sep 18 2026

Plugin4Shell zero-click flaw hits four coding agents; two get no patch

SAFETY

Original reporting

A SHA-pinning bypass via git branch names yields in Claude Code, Codex, GitHub Copilot and Gemini . Anthropic and OpenAI patched; Microsoft shipped no Copilot fix and Google says the deprecated Gemini CLI will not be patched.

Named in this event

AIR SecurityAnthropicOpenAIGitHubGoogle

Open calls that touch this

OpenAI's Astra maths results survive independent scrutiny · 80%, resolves December 31st 2026
OpenAI never publishes the raw Astra reasoning traces · 75%, resolves February 28th 2027
Anthropic holds the Sonnet 5 price increase · 70%, resolves November 30th 2026
Anthropic IPOs before OpenAI · 75%, resolves August 6th 2027
OpenAI does not IPO in September · 80%, resolves September 30th 2026
OpenAI signs another $10B+ non-Azure compute deal · 65%, resolves August 6th 2027

Issues that mention AIR Security, Anthropic, OpenAI…

Around the same time

Sep 18 2026MONEYINFRA

Nscale files a public S-1 for a NYSE listing under NSCL

search for coverage

Sep 18 2026OPENADOPT

Kimi K3 becomes a first-party model on Amazon Bedrock

search for coverage

Sep 18 2026POLICYSAFETY

Subscribers sue AI labs over alleged coordination to slow development

BBloomberg Law

Sep 18 2026MONEY

WSJ reports Anthropic's IPO slipping from October to November

Bca

Sep 18 2026POLICYMODEL

UMG and Sony sue Suno again, arguing licensed v6 inherits infringement

BVariety

Sep 17 2026CHIPSINFRA

Huawei announces an Ascend 960 supernode using near-packaged optics

Ahuawei