Two of the four AI coding agents are still exposed
The news: Plugin4Shell, disclosed 17 September, breaks the version pin in Claude Code, Codex, GitHub Copilot and Gemini CLI. A plugin's repository owner can swap the code behind a pin the agent still reports as locked.
Why it matters: None of the four verified that the checkout landed where the pin pointed. The swap rides in on background auto-update, so no developer approves it. Anthropic and OpenAI patched, Copilot has no fix, and Google deprecated Gemini CLI rather than patch it.
What to do: Push Claude Code to 2.1.179 and Codex to 0.146.0 today, and disable plugin auto-update on Copilot and Gemini CLI.
From the people who send this
CXO Brief is published by DoGood. More than seventy enterprise vendors are currently paying for 30-minute briefings with IT and security leaders on AI governance, third-party risk, identity, observability and infrastructure. You choose which vendors to meet, if any. Every completed briefing pays you $150 to $200, as a premium gift card, cash, or a donation to a charity you pick if your employer restricts gifts. Membership is free and by invitation.
Or reply to this email with the word "briefing" and Ryan will set you up personally.
A 10.0 in your AI platform, and nothing to install
Microsoft disclosed CVE-2026-85889 on 17 September, a missing authentication check in Azure AI Foundry rated CVSS 10.0. An unauthenticated attacker on the network could reach a privileged backend function. Microsoft fixed the hosted service itself, so there is nothing to install and no sign of exploitation. That also means no patch window, no advisory to action, and no log of your own to check. Ask your account team what evidence they will hand you next time.
Virginia just slowed the world's biggest data center market
Virginia's governor signed Executive Order 22 on 18 September. It pulls large new data centers out of fast-track permitting and bans state agencies from signing project NDAs. Northern Virginia holds more data center capacity than any market on earth. Longer permitting means longer lead times on the capacity your 2027 plan assumes. Ask your colo and cloud teams this week what Northern Virginia delivery dates look like now.
Watch This
Someone re-registered a domain a defunct CDN let lapse. Thousands of sites still hard-code hostnames under it, and the new owner holds wildcard DNS across them all. Infoblox counts roughly 65,000 expired domains re-registered daily, which makes your third-party script inventory a security control.
The CXO Brief is published by DoGood, the network where enterprise IT leaders are paid for 30-minute vendor briefings.
Know a CIO who needs this? Forward it and they can subscribe here.
Run IT or security at a $100M+ company? Claim your invite.