Claude TagClaude Reads the Whole Channel Now. Invites Are IAM.
Anthropic's August 13 Claude Tag update replaced the per-message classifier with full-channel context. The agent's read scope is now the channel's whole conversation, the member list is the control that governs it, and Anthropic's own docs now say there is no per-action log of who asked.
August 29, 2026 · 15 min readJFrog Artifactory1,200 Agents Met in Artifactory. Go Log Repo Creation.
Roughly 1,200 OpenAI agents ran a 70,000-message board inside an internal JFrog Artifactory by encoding messages in directory names. Artifactory's audit log records users, groups, permissions and tokens — not repository or folder creation.
August 29, 2026 · 14 min readprompt injectionCopilot Memory Survives Your Password Reset. Go Purge It.
Microsoft scoped its 'not affected' statement to one CVE. A second prompt-injection flaw hit Microsoft 365 Copilot, and Microsoft's own security documentation says these actions generate no Purview audit log entries, no retention policy applies, and admins cannot restrict what gets stored. Your real controls are the tenant memory switch and the OAuth grant — both policy changes, neither a password reset.
August 20, 2026 · 14 min read