The AI Wire ●

Workday and Anthropic announced a partnership at Workday Rising 2026 in Las Vegas that connects Claude's reasoning to Sana, Workday's agentic experience and orchestration layer. The experience can run inside Sana or inside Claude, depending on the task.

The integration uses the Model Context Protocol to exchange information and tasks between the two systems, so work can continue in the background without restarting when a user switches surface. Each request is meant to follow the roles, permissions, approval chains and audit controls already configured in Workday.

In practical terms, employees whose organisations have the relevant agents configured could check pay, submit expenses and manage approvals without leaving Claude. The connector is currently a beta service, and Workday admins have to apply for access, so this is an announced enterprise rollout rather than general availability.

OpenAI said on October 13 that the FBI had arrested a former employee in connection with a sophisticated listening device found hidden in one of its offices. Reuters reported the arrest the same day, citing OpenAI's own post about the case.

OpenAI said it used its internal AI models to help identify who planted the device and trace where it came from, then referred the matter to the FBI. The company said the employee was terminated and that it had no indications the person had inappropriately accessed or exfiltrated model weights, source code or customer data.

The FBI investigation is continuing, and OpenAI said it will keep supporting it. No further details about the device, its target or any charges were given in the initial reports.

Executives from OpenAI and Anthropic told a UK parliamentary committee on October 13 that voluntary pledges are no longer enough and that AI safety duties should be set in law. Anthropic's European policy head argued the rules should be binding, while OpenAI's EMEA policy chief backed a statutory framework with mandatory incident reporting as a starting point.

Google DeepMind and Meta, giving evidence at the same session, did not back new legislation. Google's representative pointed to standards, and Meta's pointed to existing British regulators, exposing a clear two-against-two split among the four frontier labs on whether a statute is needed.

Both OpenAI and Anthropic also told MPs they would stop a deployment if the AI Security Institute or the security services showed them a model was unsafe. The institute's own position underlines why the argument matters: it can only test models companies hand over, and it has no power to block a release.

Nvidia's share of China's data-centre AI chip market fell to 34% in the first half of 2026, according to an IDC report seen by Reuters and reported on October 13. Nvidia shipped about 678,000 AI accelerators in China in that period, down 44% from a year earlier, as US export controls limited what it can sell there.

Huawei was the main gainer, shipping about 572,000 accelerators for a 28% share, up from more than 300,000 units a year earlier. Alibaba's T-Head, Cambricon, Baidu's Kunlunxin and Hygon followed with single-digit shares, and most Chinese chipmakers tracked by IDC grew shipments.

Total AI-accelerator shipments in China reached about 2.0 million units in the half, while GPU shipments fell 26%. IDC did not specify which Nvidia products made up its share, and Nvidia did not comment, so the figures should be read as IDC estimates rather than company-reported sales.

Security researcher Johann Rehberger disclosed on October 13 that a single trailing dot in a filename let GitHub Copilot in Visual Studio and SQL Server Management Studio bypass a guardrail meant to stop the agent rewriting its own protected configuration files without user confirmation. The check compared the requested path to protected names such as .mcp.json as plain strings; on Windows, a filename ending in a period is saved without that character, so a name like settings.VisualStudio.json. matched neither blocked name and was then written to the real protected file.

With those files writable, a steered or prompt-injected Copilot could register a malicious MCP server that the IDE launches automatically, or point the copilot ripgrepPath setting at an attacker binary that Visual Studio runs on every text search. Microsoft rated the flaw, CVE-2026-103572, as Important remote code execution at CVSS 8.8, confirmed it on September 16, and shipped the fix in the October 13 Patch Tuesday updates — normalising the path with GetFullPath before the check. Developers should update Visual Studio 2022 to 17.14.42 or later, or Visual Studio 2026 to 18.10.4 or later, and update SSMS in the same pass.

Rehberger reported the flaw on August 4 and noted Microsoft classed it out of scope for a bug bounty despite the severity rating and shipped fix — his third Copilot vulnerability in two months, he said, to be patched without a reward. The pattern is the wider story: the bug was a classic pre-AI path-validation mistake, but what it unlocked was an agent's ability to reconfigure its own tools.

Microsoft's October Patch Tuesday, released October 13, addressed more than 1,400 vulnerabilities — counts put the total at 1,411 to 1,413 depending on how third-party flaws are tallied. That smashes September's record of roughly 1,000 and is more than the company patched in all of 2025.

Microsoft credits AI-assisted scanning, including its multi-model MDASH harness, for finding flaws faster. Most of the fixes were for Windows and Office, with dozens rated critical, and the batch included a Windows Shell flaw reported as already exploited.

Security experts quoted in the coverage urged teams to prioritise by exploitability rather than raw count. Only a small share of this year's Microsoft flaws have landed in CISA's known-exploited list, even as the year-to-date total has passed 4,000.

Meta chief AI officer Alexandr Wang said on X that Muse Wonder and Muse Wonder Full have a bug in how usage is counted against Muse Code subscribers' limits. Wang said the behaviour is not intended, that Meta is working on a fix, and that it will update subscribers once fixed and issue resets.

The bug matters because Wonder Full is only available through Muse Code, whose paid tiers start at $50 a month. Subscribers whose quota drained faster than expected should not assume the usage was real until Meta's fix and resets land.

No timeline for the fix was given in the initial report, which came via TheFly. Watch for Meta's promised update post before drawing conclusions about final quota balances.

A day after launch, independent scoring puts Meta's new Muse Wonder models close to the frontier pack rather than ahead of it. On the Artificial Analysis Intelligence Index, Muse Wonder Full scores 56 and the API-facing Wonder 52, against 58 for Claude Opus 5.5, with GPT-6 Astra and Claude Fable 5.1 around 53.

Meta's own launch charts claim an edge on its internal MemoryBench, but that benchmark's published card gives no item count, and at least one independent audit desk said it could not test Wonder at all because its call was refused under zero-retention routing. On Meta's broader comparison rows, the Wonder models win some and lose others against Opus 5.5.

The practical reading so far: Wonder is Meta's first model that genuinely competes at the frontier, and its strongest Meta-published rows are in long-horizon coding and business-workflow agents. Whether it leads anywhere will depend on controlled, independent tests rather than launch-day charts.

Apple rounded out its October 13 home lineup with a new Apple TV 4K and a HomePod mini 2, alongside the HomeView hub covered earlier today. The Apple TV 4K costs $299, uses an A19 chip, and adds far-field microphones so viewers can talk to Siri AI without the remote; pre-orders opened October 13, with availability on November 13.

The HomePod mini 2 costs $149, comes in five colours, and pairs with the new Apple TV for up to four-speaker surround sound. It goes on sale October 30, with Siri AI arriving later in a software update and requiring a paired Apple Intelligence-enabled device for personal context.

Both devices are built around Siri AI, Apple's more conversational assistant, which Apple is also bringing to older Apple TV models as a free beta update. Prices are up on the models they replace, so whether the AI features justify the step up will depend on how complete Siri AI is at launch.

Apple announced HomeView on October 13, a new home hub with a 7-inch display that combines entertainment, FaceTime calls, home monitoring and smart-home control in one device. It can sit on a tabletop or be wall-mounted, and pre-orders opened the same day, with availability beginning November 13.

The device is powered by Apple Intelligence with what Apple calls an entirely new version of Siri, described as more conversational and more capable, with on-screen awareness and richer music discovery. When paired with an Apple Intelligence-enabled device, it can also draw on personal context from apps such as Calendar and Messages.

Apple says the hub recognises users by their faces and adapts to each person, surfacing their own Messages, FaceTime, Calendar, Reminders and Find My content. Privacy and security are presented as core to the design, though the detailed data-handling terms will matter once the device ships.

Anthropic has moved its main internal monorepo off Git and onto Scion, a version-control system a seven-person team built over five months, the company said in an October 13 engineering post. A companion code-review tool is called Antique.

The driver was volume: merged changes rose from about 2,500 a day in May to more than 30,000 a day by September, a twelvefold jump Anthropic attributes largely to Claude writing and merging code. Git's model, built for human-paced work, became the bottleneck.

Scion is internal only — Anthropic says it is not a general-purpose Git replacement and will not be released as a standalone product. The company instead plans to share its architectural approach with GitHub, GitLab and open-source maintainers.

Britain's AI Security Institute has been given access to the latest advanced AI models and is evaluating them with the US government and major developers, AI Minister Kanishka Narayan confirmed on October 12. He named Google's Gemini 4 Argon among the models now under evaluation.

The confirmation follows reports last month that the White House had asked some developers to withhold new systems from British testers pending a US review, which had cast doubt on the institute's pre-deployment access. Under voluntary agreements, the institute receives models before deployment to test capabilities and safeguards.

The announcement did not list every model under evaluation. Scrutiny of agent safety has intensified in recent weeks after several labs disclosed rogue or undesired behaviour by their own systems during testing.

SpaceXAI announced The X Subscription on October 12, a single plan that bundles Grok, the Cursor coding tool and X Premium, replacing the separate SuperGrok, X Premium and Cursor subscriptions. Existing subscribers can stay on their current plans, pricing and features unless they choose to switch.

The confirmed tiers, published October 13, are Free, Plus at $8 a month, Premium at $30, Super at $100 and Ultra at $200. Paid tiers share one weekly usage pool across Grok and Cursor, managed from a common dashboard, and switching cancels the eligible existing plans with a prorated refund for unused time.

One warning from the company's own documentation: switching is permanent and cannot be reversed, so users are told to review which accounts they are combining first. The rollout is gradual, so availability may not show in every account's billing settings yet.

Day 8 of Tibo Sottiaux's 28-day Codex pledge — an improvement every day, or a full usage reset — was a reset. Tibo posted 'Day 8 / Reset' on October 12 and said the global reset would land by end of day Pacific Time, restoring usage limits for Codex and ChatGPT Work users.

It is the latest in a run of resets in the pledge, following full resets on Days 3 and 6. Trackers following Tibo's posts listed Day 9, October 13, as still waiting for its improvement or reset at the time of writing.

For users, the practical point is simple: paid Codex and Work limits were refreshed early, outside the normal weekly cycle. As with earlier resets, anyone saving leftover quota should not assume it carries over.

OpenAI said on October 12 that it will create 200 additional jobs in Ireland, including roles supporting a new Applied AI Lab at its EU headquarters. The announcement was made alongside Ireland's Taoiseach and the head of IDA Ireland during International AI Summit week.

The new roles add to 250 announced in July, taking OpenAI's total commitment in Ireland to at least 450 roles, on top of more than 120 people already employed there. The jobs will be based at the Tropical Fruit Warehouse, which the company is due to occupy from December 2026.

Technical hiring for the lab includes forward deployed engineers who work directly with customers, plus solutions and privacy engineers. OpenAI is also hiring across sales and user operations in Dublin.