AI Today: GPT-5.4 now in GitHub Copilot, Claude found 22 Firefox bugs
Claude found 22 Firefox vulnerabilities in two weeks; GPT-5.4 now powers GitHub Copilot across all tiers.
Anthropic's Claude Opus 4.6 discovered 22 vulnerabilities in Firefox during a two-week security partnership with Mozilla, including 14 high-severity issues that underscore AI's accelerating role in vulnerability research. The collaboration also revealed a sobering capability: Claude can occasionally develop working exploits for the bugs it discovers. Meanwhile, OpenAI's agentic coding model GPT-5.4 is now generally available in GitHub Copilot (Mar 5) across Pro, Pro+, Business, and Enterprise users, bringing improved logical reasoning and multi-step task execution to millions of developers. That same day, Copilot code review launched with an agentic tool-calling architecture (Mar 5) designed to…
The velocity of capability integration is accelerating across developer workflows. GitHub users can now select which AI model powers Copilot in pull request comments (Mar 5), giving teams granular control over model choice at the point of use. Design-to-code integration deepened with Figma's MCP server enabling bidirectional workflows between VS Code and design files (Mar 6), while Vercel's v0 API now supports custom MCP servers (Mar 6), letting teams programmatically configure and reference server IDs during chat interactions. These aren't disconnected feature releases—they're pieces of an emerging infrastructure where…
Also: Anthropic: Partnering with Mozilla to improve Firefox's security. Arize AI: How to Build Planning Into Your Agent (The Architecture That Actually Works). Anthropic: Where things stand with the Department of War. GitHub: Hierarchy view improvements and file uploads in issue forms.
Figma MCP server can now generate design layers from VS Code
GitHub Copilot users can now connect to Figma's MCP server to pull design context into code and send rendered UI back to Figma as editable frames, enabling a bidirectional design-to-code workflow. The feature is available today in VS Code with CLI support coming soon.
Read source →v0 API now supports custom MCP servers
Vercel's v0 API now enables integration with custom MCP servers, allowing teams to configure and use custom servers programmatically within v0 chat sessions. Users can reference server IDs to make configured servers available during interactions.
Read source →
Partnering with Mozilla to improve Firefox's security
Anthropic announced a collaboration with Mozilla where Claude Opus 4.6 discovered 22 vulnerabilities in Firefox over two weeks, including 14 high-severity issues, demonstrating AI's capability to accelerate security vulnerability detection. The partnership also revealed Claude can occasionally develop exploits for discovered bugs, underscoring the need for a...
Read source →GPT-5.4 is generally available in GitHub Copilot
OpenAI's GPT-5.4, an advanced agentic coding model, is now generally available in GitHub Copilot across Pro, Pro+, Business, and Enterprise users. The model demonstrates improved logical reasoning and task execution for complex, multi-step development processes.
Read source →
How to Build Planning Into Your Agent (The Architecture That Actually Works)
Arize AI details how structured planning tools and architectural enforcement patterns enable agents to reliably complete multi-step workflows, sharing lessons from building Alyx 2.0 and insights from Claude Code and Cursor implementations.
Read source →
Where things stand with the Department of War
Anthropic received a Department of War supply chain risk designation on March 4, 2026, which the company plans to challenge in court but states will have minimal impact on most customers. CEO Dario Amodei clarified the narrow scope of the restriction applies only to direct Department of War contracts and reaffirmed commitment to supporting national security ...
Read source →Pick a model for @copilot in pull request comments
GitHub now allows users to select which AI model powers @copilot when requesting code changes in pull request comments, with a model picker appearing in the comment box. This feature is currently limited to github.com pull request comments and will expand to GitHub Mobile and other comment types soon.
Read source →Hierarchy view improvements and file uploads in issue forms
GitHub Projects introduces hierarchy view improvements including sub-issue filtering, deduplication, and state persistence, plus new upload field support in issue forms and bulk iteration management for workflow optimization.
Read source →Copilot code review now runs on an agentic architecture
GitHub Copilot code review is now generally available with an agentic tool-calling architecture that gathers broader repository context for higher-quality, lower-noise feedback. The feature is available to all Copilot Pro, Pro+, Business, and Enterprise users, with setup required only for self-hosted runners.
Read source →