AI Agent Security Crisis, Safari MCP, DDR5 Surge and More Tech News

AI

Plugin4Shell: Zero-Click RCE Across Four Major Coding Agents

Security research firm AIR disclosed Plugin4Shell, a zero-click remote code execution vulnerability affecting Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI. The flaw breaks SHA pinning, the mechanism that locks installed plugins to a specific, reviewed version of their code.

A malicious plugin update can execute attacker-controlled code without any user interaction. Since plugins inherit the same permissions as the developer running the agent, this grants access to source code, cloud credentials, SSH keys, and production systems.

Anthropic patched Claude Code in v2.1.179, and OpenAI patched Codex in v0.146.0. Microsoft has not shipped a fix for Copilot. Google deprecated Gemini CLI entirely rather than patching it, leaving every existing install exposed.

Hacktron AI Used Claude Opus 5 to Breach OpenAI in 72 Hours

A three-person security startup, Hacktron AI, breached OpenAI employee accounts through the company’s bug bounty program. The team chained an SSO misconfiguration in the Discourse-powered community forum with an RCE flaw in libheif, a HEIF/HEIC image decoding library.

The researchers generated exploit code using Anthropic’s Claude Opus 5. A previous attempt with Opus 4.8 failed to produce a working exploit, but Opus 5 succeeded. The entire path from initial vulnerability discovery to accessing OpenAI’s internal GitHub repository took less than 72 hours.

OpenAI fixed the SSO weakness within 14 hours and awarded a $6,500 bounty. The company confirmed no customer data or model weights were compromised.

Spain Logs First Data Breach Caused by an Autonomous AI Agent

Spain’s data protection authority, AEPD, received the first formal notification of a data breach executed by an autonomous AI agent on September 14, 2026. This is the first time a national data protection authority has publicly confirmed receipt of such a filing worldwide.

An LLM-based agent performed a sequence of actions with minimal human steering: scanning files for vulnerabilities, achieving unauthorized login, probing the application for further weaknesses, modifying personal data, and accessing invoices. The AEPD’s “Rule of 2” — which prohibits agents from simultaneously processing untrusted input, accessing sensitive data, and taking autonomous action — was violated.

Deputy Director Francisco Perez Bes did not disclose the affected organization or the specific AI model used. He noted that using a particular model does not imply the model or its provider’s infrastructure was compromised.

Big Tech

Apple Safari 27 Ships Built-in MCP Server for AI Agent Browser Control

Apple’s WebKit team shipped a Model Context Protocol server with Safari 27.0. The server includes 16 tools that give any MCP-compatible AI coding agent direct access to a live Safari browser window.

Agents can open tabs, inspect the DOM, execute JavaScript, read console output, monitor network requests, resize the viewport, emulate CSS media modes, and run accessibility checks. The server works with Claude Code, OpenAI Codex, and other MCP clients out of the box.

The MCP server runs entirely on the local machine with no outbound network calls. Developers enable it in Safari Settings under “Allow remote automation and external agents.” This is Apple’s second MCP server in a month, signaling that the protocol is becoming standard platform infrastructure for AI agent workflows.

Global Semiconductor Revenue Hits Record $425B in Q2

Global semiconductor revenue surpassed $425 billion in Q2 2026, setting an all-time high according to Omdia. The 31.4% quarter-over-quarter growth is the highest sequential increase in the 97 quarters Omdia has tracked since 2002.

AI demand and surging memory prices drove the growth. Memory accounted for roughly 80% of the new revenue. Total semiconductor revenue for the first half of 2026 reached $752 billion.

Omdia forecasts Q3 revenue will break $500 billion, pushing the first three quarters of 2026 above $1.25 trillion.

Startups

Mazama Energy Closes $135M Series B for Superhot Geothermal

Superhot geothermal energy developer Mazama Energy closed a $135 million Series B led by Centaurus Capital and Doerr Capital. ConocoPhillips and Shell Ventures joined as new investors, with repeat participation from Khosla Ventures and Gates Frontier.

Mazama holds the record for the hottest engineered geothermal system ever built. In 2025 at Newberry, Oregon, the company created an EGS at 331 degrees Celsius (629 degrees Fahrenheit), proving reservoir creation, connectivity, and heat recovery.

The funding goes toward Project Ceres, which targets horizontal well development in superhot rock at 15 MW capacity per well, aiming for power generation by 2027. The round was oversubscribed.

Nex Playground Raises $150M as Hardware Sales Pass One Million

Family-focused active gaming console Nex Playground completed a $150 million Series E co-led by Baillie Gifford and BAI Capital. NBA Investments, Logitech, and Raine Group participated. A new credit facility with JPMorgan was also secured.

Hardware sales have passed one million units. The company plans to expand into Germany later this year, followed by Japan and South Korea in 2027, while continuing growth in the US, UK, and Ireland.

Former Niantic CFO Jeff Shouger joins as CFO, and EA co-founder Bing Gordon joins the board.

New Tech

Mantic Raises $25M After AI Predictions Beat Human Experts

London-based AI prediction startup Mantic raised $25 million in seed funding led by Radical Ventures. Microsoft’s venture fund M12, Thinking Machines Lab, and Balderton Capital participated.

Mantic’s AI system won the 2026 Metaculus Cup, an online forecasting tournament. It assigned probabilities to political, economic, and cultural developments more accurately than human competitors. The system works by fine-tuning frontier AI models for forecasting, testing against historical data, grading performance, and iterating.

An AI system outperforming panels of human experts in prediction accuracy carries significant implications for decision-making in finance, insurance, and policy.

DDR5 Memory Prices Surge Over 400% in One Year

DDR5 memory prices have spiked dramatically as AI infrastructure buildout devours supply. A 32GB DDR5-6000 kit that cost around $80 in mid-2025 reached approximately $432 by early 2026, a rise of over 400%.

Enterprise-grade 64GB DDR5 RDIMM pricing is projected to climb from $873 in Q1 to roughly $1,586 by Q4 2026. The December 2025 to February 2026 quarter saw 80-90% price increases, the steepest since the 2017-2018 memory boom.

SK Hynix, Samsung, and Micron have allocated over 70% of their latest-node fab capacity to DDR5, LPDDR5X, and HBM3 production. With cloud providers and hyperscalers dominating production priority, severe shortages are expected to persist into mid-2027.

Open Source

OpenMontage: Open-Source Agentic Video Production

OpenMontage has gained attention as the first open-source agentic video production system. Licensed under AGPL-3.0, it offers 12 production pipelines, 52 tools, and over 500 agent skills.

The system structures video production as a multi-stage workflow: research, scripting, asset generation, editing, and rendering. It integrates with AI coding agents like Claude Code, Cursor, and Codex, enabling video creation from natural language descriptions alone.

OpenMontage retrieves clips from free stock footage libraries and open archives, edits them into timelines, and renders finished pieces. It hit the number-one trending spot on GitHub the day it launched in June 2026.

RAGFlow: Deep Document Understanding RAG Engine

Infiniflow’s RAGFlow was highlighted as a top open-source project for September 2026. It features a deep document parsing engine that structures complex PDFs including tables, layouts, and visual elements.

RAGFlow combines retrieval-augmented generation with agent capabilities to build a context layer for LLMs. It handles the full pipeline from document ingestion to vector search, LLM integration, and a web interface in a single system.

Its local-first architecture keeps all data on your own server. No external cloud services are required for document processing, making it suitable for organizations where data sovereignty matters.

Gaming

Blizzard Workers Ratify Union Contract Covering 1,900 Employees

Approximately 1,900 workers across all departments of Blizzard Entertainment ratified union contracts with the Communications Workers of America (CWA). The announcement came on September 9, following two years of bargaining.

The contracts include wage increases, a three-day hybrid work week, remote work accommodations, and grievance procedures. In an industry first, workers secured a 14-month recall right to open positions across Blizzard bargaining units following a layoff. An additional four weeks of severance was also secured regardless of tenure.

Notably, Microsoft is now required to discuss and bargain over workplace AI usage, a first in the gaming industry.

IGN Hit with Major Layoffs

Gaming media outlet IGN laid off employees across multiple departments. The cuts affected longtime video hosts Seth Macy, Brian Altano, and Max Scoville, as well as senior tech editor Bo Moore.

The IGN Creators Guild reported four union members were among those let go. Unlike previous rounds, the union received no advance notice. Sources indicated that remote work status and willingness to relocate may have influenced some decisions.

The timing drew criticism given September’s concentration of major game releases, the Tokyo Game Show, and the Valve Steam Frame launch. The layoffs are part of broader restructuring at parent company Ziff Davis.

Valheim 1.0 Launches Deep North, Ending Five Years of Early Access

Iron Gate Studio’s Viking survival game Valheim launched version 1.0 on September 9 with the Deep North update. The release ends five years of Early Access that began in February 2021.

Deep North is the final biome, set in the frozen north of the map. It introduces final boss Kall Fimbulbringer, new enemies like Gammeltrolls and Elakingar, weapons, building pieces, and underground dungeons. The launch also brings PS5 and Nintendo Switch 2 support alongside existing PC, Linux, Mac, and Xbox platforms, with full crossplay across all.

The base price at 1.0 is $29.99, with existing owners receiving the update at no additional cost.

References

Plugin4Shell Zero-Click RCE — AIR Security
Plugin4Shell AI coding agents vulnerability — Help Net Security
Hacking OpenAI — Hacktron AI
Researchers used Anthropic’s Claude to hack into OpenAI — TechCrunch
Primera notificacion de brecha por agente de IA — AEPD
First Agentic AI Data Breach Reported to Spanish Regulator — SecurityWeek
WebKit Features for Safari 27.0 — WebKit Blog
Introducing the Safari MCP server — WebKit Blog
Global Semiconductor Revenue Surges 31% to Record $425B — Semiconductor Digest
Semiconductor revenue surges to record $425B — Light Reading
Mazama Energy Raises $135 Million — GlobeNewswire
Mazama Energy $135M for superhot-rock geothermal — TechCrunch
Nex Raises $150 Million — Nex Playground
Nex Playground $150 million funding — Variety
Mantic — Mantic Official
AI startup Mantic raises $25 million — Yahoo Finance/Reuters
RAM price tracking 2026 — Tom’s Hardware
DDR5 memory prices continue to increase — OC3D
DDR5 Memory in 2026 — Newegg
OpenMontage — GitHub
OpenMontage agentic video generator — NerdZap
RAGFlow — GitHub
Open Source Highlights September 2026 — DEV Community
Blizzard Workers Ratify Union Contracts — CWA
Blizzard union workers ratify contract — Game Developer
IGN layoffs — Kotaku
IGN Hit With Layoffs — Console Creatures
Valheim — Steam
Valheim 1.0 and Deep North — Fextralife