May 25, 2026

AI Digest — May 25, 2026

8 minutes

Good day, here's your AI digest for May 25, 2026.

The strongest thread today is that AI for software work is moving on three fronts at once: models are getting more specialized, agent infrastructure is becoming more formal, and developer tools are starting to look like major software businesses in their own right.

Anthropic appears to be preparing broader availability for Claude Mythos 1, with signs of the model showing up around Claude Code and Claude Security. The model has already been spotted in vulnerability discovery programs on Google Cloud and AWS, and a fuller release appears close. The key detail is the target domain: Mythos is not being described as a general chat upgrade, but as a model tuned for security work and code-heavy reasoning. If it reaches Claude Code in production, it could make exploit discovery, vulnerability analysis, and secure remediation feel much more native inside everyday development workflows.

A related Anthropic security evaluation goes deeper on what Mythos Preview can already do. The model can turn vulnerabilities into exploit primitives, then combine those primitives into complete attack chains. On newer academic tests such as ExploitBench and ExploitGym, Mythos Preview reportedly outperforms other evaluated models. This is a capability jump with two sides. Defensive teams get stronger automation for reproducing and understanding real vulnerabilities. Attackers also get a lower barrier to work that used to require substantial specialist knowledge.

Anthropic is also expected to update Claude memory with new Memory Files. Instead of treating memory as one broad stream of notes, Memory Files would split context across structured documents organized by topic, project, or task. That shape is familiar to developers: durable files, scoped context, and explicit project boundaries. It points toward AI assistants that behave less like a single chat history and more like a working environment with persistent, inspectable state.

OpenAI published a macro-evaluation workflow for agentic systems. The idea is to analyze patterns across large populations of traces instead of judging isolated failures one conversation at a time. As agents become part of real engineering workflows, teams need evaluation methods that can find systematic weak spots: where tools fail, where policies conflict, where retries spiral, and where the agent gets the right answer through a fragile path. Trace-level evaluation is becoming part of the engineering stack, not an afterthought.

The next Model Context Protocol specification release candidate is now available, with the final spec scheduled for July 28. This is described as the largest MCP revision since launch. It introduces a stateless core designed to run on ordinary HTTP infrastructure, a cleaner extension model, authorization that lines up more closely with OAuth and OpenID Connect deployments, a formal deprecation policy, and breaking changes. MCP is moving from a fast-moving integration pattern toward protocol infrastructure that large systems can operate, secure, and version over time.

DeepSeek made its V4 Pro price cut permanent, keeping a 75 percent discount that was originally scheduled to expire at the end of the month. Its pricing now sits below GPT-5, Claude Opus 4.7, and Gemini 3.5 Flash, with the biggest gap against frontier reasoning models used for heavier enterprise workloads. The price war is no longer just about chat volume. It is about the economics of long-running agents, coding sessions, evaluation loops, and production automation where token burn compounds quickly.

Google's Gemini 3.5 Flash Low is drawing attention for software tasks. It reportedly generates about 45 percent fewer tokens than Gemini 3.5 Flash Medium while generally outperforming Gemini 3.5 Flash High on SWE tasks. That is an unusual combination: lower verbosity, lower cost, and better coding performance. Model selection is becoming less obvious than picking the largest tier. Smaller or lower-effort variants may win when the workload rewards concise, repeatable reasoning over maximal generation.

Cursor continues to define the commercial ceiling for AI coding tools. The coding editor reportedly reached 3 billion dollars in annualized revenue, up from 2 billion dollars in February, and it is projecting more than 6 billion dollars by the end of 2026. More than 3,000 customers now pay at least 100,000 dollars per year. Cursor also shipped Composer 2.5, its latest model, partially trained on a SpaceX data center. The surrounding acquisition drama is notable, but the bigger software signal is simpler: AI-native developer tools are scaling like core enterprise platforms, not sidecar utilities.

Reasonix is a new DeepSeek-native coding agent for the terminal. It is built around prefix-cache stability and designed to be left running across long sessions. That design choice is important because agentic coding often fails economically before it fails technically. If a terminal agent can preserve useful cache patterns and keep token costs predictable while it watches, edits, tests, and retries, it becomes easier to treat it as a persistent collaborator inside a repository.

Perplexity open-sourced Bumblebee, a read-only security scanner for developer machines. It identifies risky packages, browser extensions, and AI tool configurations without modifying the system. The read-only posture matters because developer workstations are now full of model clients, local tools, plugins, and credentialed integrations. A scanner that focuses on the new AI tooling surface gives teams a way to inspect risk before it turns into supply-chain or data-exposure trouble.

ChatGPT can now help fill forms from images. A user can upload a picture of a form, provide the details to include, and have the model populate it. It sounds mundane, but it is another step toward multimodal automation for paperwork-heavy workflows. The same pattern can apply to internal forms, onboarding packets, procurement requests, compliance templates, and the awkward documents that still sit between software systems.

Spotify and Universal Music reached a deal that will let fans make AI covers and remixes under a rights framework. Music is not a coding tool, but the deal is a marker for AI product design: user-generated AI output is moving from legal gray zones into licensed product surfaces. Similar structures are likely to show up anywhere AI systems transform copyrighted material, from media tools to training-data products to enterprise content workflows.

OpenHuman was introduced as an open-source AI agent with a billion tokens of local memory. The pitch is long-lived, local context rather than short chat windows. Whether the implementation holds up or not, the direction is clear: agents are competing on continuity. The next wave of assistants will be judged by how well they remember projects, preserve intent, and resume work without forcing users to rebuild context every session.

That is today's digest: specialized security models, cheaper reasoning, serious protocol work, stronger agent evaluation, and developer tools turning into major businesses. The center of gravity is shifting from impressive demos to systems that can be measured, secured, priced, and operated.

This has been your AI digest for May 25, 2026.

Read more: