ZDI-26-305 discloses a sandbox bypass in OpenAI Codex. Processing a repository containing malicious JavaScript can lead to code execution under the user's privileges outside the sandbox.
OpenAI shipped GPT-5.5 and GPT-5.5 Pro on the API. A practical rundown of the 1M+ context, the new reasoning.effort default, image input behavior, prompt caching, and pricing.
NVIDIA's build.nvidia.com serves a free inference API that covers 100+ models including MiniMax M2.7, GLM-5, Kimi K2.5, DeepSeek, GPT-OSS, and Sarvam-M. Because integrate.api.nvidia.com/v1 is OpenAI-compatible, OpenClaw, OpenCode, Zed, and Cursor can call it directly.
OpenAI's unreleased image generation model GPT-Image-2 appeared on LM Arena under tape-themed codenames. The first wave was pulled within hours, but duct-tape variants resurfaced in mid-April in Battle Mode.
On April 2 2026 OpenAI scrapped Codex's per-message credit model for per-token billing tied to API consumption. ChatGPT Business dropped to $20, a Codex-only seat appeared, and Copilot's premium-request model is no longer the reference.
A summary of how source maps bundled in the Claude Code npm package made over 510k lines of TypeScript visible, and how a branch-name command injection in OpenAI Codex could have allowed theft of GitHub tokens.
On March 19, 2026, Anthropic took legal action against OpenCode to remove the OAuth integration. On the same day, Python toolchain Astral announced that it was joining OpenAI's Codex team. The formation of AI coding tools was activated in one day.
GitHub releases the layered defense design of the agent execution platform, and OpenAI releases the instruction hierarchy training data IH-Challenge and model. Responses to prompt injection were received from both infrastructure design and training axes.
OpenAI acquired AI security evaluation platform Promptfoo, and Microsoft announced that Anthropic's Claude Cowork would be integrated into Microsoft 365 Copilot. The structure of the enterprise AI market is starting to change.
Two approaches to achieve local isolated execution of AI coding agents. On macOS, Agent Safehouse uses OS-native sandbox-exec for kernel-level restrictions, and on Windows, Codex uses the VM-based Windows sandbox.
