Production costs for open-source AI agents range from $50 to $2,000 monthly in LLM costs plus hosting. Model selection is the primary cost driver, with premium models like Claude Opus 4.7 and GPT-5.5 costing $15-30 per million input tokens, while lighter models like Gemini 3.1 Flash or Claude Haiku 4.5 cost under $5 per million tokens.

Source: Pasquale Pillitteri

Microsoft reported exploitation of CVE-2026-42897, a spoofing vulnerability rated Critical in Microsoft Exchange Server with a CVSS of 8.1. Microsoft's updates included 65 CVEs reported in Windows 11 and 58 in Windows 10. Microsoft held their first Windows Hardware Engineering Conference (WinHEC 2026) since 2018 and introduced the new Driver Quality Initiative project.

Source: Help Net Security

Google released its June 2026 Android security update addressing 124 vulnerabilities, including CVE-2025-48595, an integer overflow vulnerability in the Android Framework that allows local attackers to escalate privileges on affected devices without requiring user interaction. This marks the fourth Android zero-day patched since December 2025, with the vulnerability under limited, targeted exploitation.

Source: The Cyber Express

Belgium's national cybersecurity authority warned that threat actors are now exploiting CVE-2026-41089, a recently patched critical Windows Netlogon vulnerability, which Microsoft patched during May 2026 Patch Tuesday as a stack-based buffer overflow allowing attackers without privileges to gain remote code execution. The vulnerability carries a CVSS of 9.8.

Source: BleepingComputer

Cisco disclosed CVE-2026-20245, a seventh SD-WAN zero-day exploited in 2026, affecting the command-line interface of Cisco Catalyst SD-WAN Manager and allowing an authenticated remote attacker with netadmin privileges to execute arbitrary commands as root. Exploitation has already been observed in limited cases, including incidents where configuration changes were pushed to edge devices.

Source: SOCPrime

Multiple critical vulnerabilities disclosed: Oracle WebLogic CVE-2024-21182 (CVSS 7.5, added to CISA KEV), Apache Solr CVE-2026-44825 (CVSS 8.1, hardcoded credentials), and Citrix NetScaler CVE-2026-3055 (CVSS 9.8, large-scale exploitation). CISA set a tight June 4 deadline for WebLogic patching, signalling urgency.

Source: Threat-Modeling.com

Visual Studio Code 1.123 was released on June 3, 2026. The release includes a major update for AI-assisted coding with 1M-token model context, synced chat sessions, side-by-side Agents window sessions, a research agent, and richer integrated browser tools like favorites and screenshot capture.

Source: code.visualstudio.com

This changelog covers releases v1.120 through v1.123, released throughout May and early June 2026. Chat sessions now sync automatically to GitHub account, giving users a personal, searchable history across machines and workspaces, capturing the conversation, files touched, repository context, and referenced pull requests and commits.

Source: GitHub Changelog

A serious zero-day vulnerability was discovered in Visual Studio Code where clicking a link allows attackers to steal GitHub tokens that can read and write to repositories, including private ones. The vulnerability resides in github.dev, and when github.com passes an OAuth token to github.dev, that token isn't scoped to the specific repo opened.

Source: Security Affairs & The Hacker News

VS Code now supports 1 million token context windows for compatible Anthropic and OpenAI models, enabling users to work with significantly larger codebases and longer conversations without losing important context.

Source: code.visualstudio.com

The research agent runs deep research on a topic and produces a thorough, well-cited Markdown report by gathering and synthesizing information from codebases, relevant GitHub repositories, and the web, optimized for depth rather than speed with read-only access.

Source: code.visualstudio.com

Claude Opus 4.8 is now accessible through Amazon Bedrock and Claude Platform on AWS as of June 1, 2026. Built for agentic coding, knowledge work, and extended autonomous task execution, it sustains longer sessions with deeper reasoning and holds context across lengthy documents.

Source: AWS News Blog

Updated June 1, 2026: Customers can access GPT-5.5 and GPT-5.4 on Amazon Bedrock with pricing matching OpenAI rates and no additional fees. Codex is available through Bedrock App, CLI, and IDE integrations with full IAM and encryption protections.

Source: About Amazon

AWS announced on June 12, 2026 that AWS Copilot CLI will reach end of support, though it will continue as an open-source project on GitHub without new features or security updates from AWS.

Source: AWS Containers Blog

AWS announced general availability of AWS MCP Server, a managed remote Model Context Protocol server giving AI agents and coding assistants secure, authenticated access to all AWS services as part of the Agent Toolkit for AWS.

Source: AWS News Blog

Anthropic proposed a coordinated pause in AI development by major labs on June 5, 2026, warning that rapid advances could enable AI systems to improve themselves faster than society can control risks. The company's internal research institute plans to collaborate with others to build systems for a credible slowdown or pause.

Source: Al Jazeera

On June 2, 2026, Anthropic expanded Project Glasswing to approximately 150 new organizations across power, water, healthcare, communications, and hardware sectors. The expansion extends Claude Mythos Preview access and introduces Claude Security for codebase scans, building on initial partners' discovery of over 10,000 high- or critical-severity vulnerabilities.

Source: Anthropic

On June 1, 2026, Anthropic confidentially filed for an initial public offering with the SEC, valued at close to $1 trillion. This follows a $65 billion Series H funding round in May 2026 that pushed valuation to $965 billion, with revenue run-rate surpassing $47 billion.

Source: TechCrunch

Claude Code released updates on June 5, 2026 including version guardrails with requiredMinimumVersion and requiredMaximumVersion settings, new /plugin list command with filters, and improved hooks and session handling. The release also fixed startup, background task, Windows, and permission issues.

Source: Releasebot