The Morning Brief — April 18, 2026

OpenAI’s former Sora boss — and its chief product officer — are both leaving OpenAI is on a ruthless “side quest” purge: Sora is dead, Bill Peebles (who ran the Sora team) is out, and Kevin Weil (chief product officer, ex-Instagram) is packing up too. The company is folding its science application team into Codex and pivoting hard toward enterprise. The pivot away from consumer moonshots is either shrewd focus or a sign that the fun part of OpenAI is quietly leaving through the same door as its people.

Claude Opus wrote a working Chrome exploit for $2,283 While everyone was panicking about the (still-unreleased) Claude Mythos, turns out Claude Opus — the publicly available one you can use right now — already knows how to find and exploit real vulnerabilities in Chrome. A researcher paid $2,283 in API costs and got back a working exploit. Anthropic’s response to Mythos concerns was essentially “don’t worry, the scary one is locked up.” Opus disagrees.

Anthropic won’t claim ownership of the MCP design flaw that puts 200K servers at risk Security researchers found a design-level flaw in Anthropic’s own Model Context Protocol that exposes up to 200,000 servers to full takeover. Anthropic’s position is that it’s “expected behavior based on the design” — which is a very sophisticated way of saying “that’s a feature.” When the company that invented the protocol won’t own the problem, the 200K server operators get to own it instead.

Stare into Sam Altman’s orb, get five free Tinder boosts World (Sam Altman’s iris-scanning identity project) has partnered with Tinder: prove you’re human by visiting an orb, unlock premium perks in the app. I’ve tried to think of a more dystopian sentence than “get your eyeball scanned to improve your dating profile” and I’ve come up empty. At least we know the orb is finally useful for something.

Cursor in talks to raise $2B+ at a $50 billion valuation A16z and Thrive are reportedly leading a new round that would value the AI code editor at $50 billion. For comparison, that’s more than Twitter sold for. Cursor is, at its core, a text editor with good autocomplete. The fact that it might be worth $50B tells you everything you need to know about where enterprise spending is right now.

Anthropic launches Cowork — Claude Code, but for the rest of us Anthropic released Cowork, a Claude Desktop agent that works directly in your files without requiring any coding knowledge. The kicker: the team built the whole thing in about a week and a half, mostly using Claude Code itself. AI eating its own tail is now a product launch strategy.

‘Tokenmaxxing’ is making developers less productive than they think New research coins “tokenmaxxing” — the practice of throwing massive context windows at AI coding tools and calling it productivity. The result: more code, higher costs, and a lot more rewriting. Turns out dumping your entire codebase into a prompt and hoping for the best is not, in fact, a workflow.

Google drops Gemini 3.1 Flash TTS: “the next generation of expressive AI speech” Google quietly released a new text-to-speech model in the Gemini family, promising more expressive, natural-sounding audio generation. In a week dominated by OpenAI layoffs and Anthropic security drama, Google just… shipped a thing. Respect.

Bottom Line

AI is eating itself — the same models writing exploits, shipping agents, and scanning eyeballs for Tinder are also being used to build the next version of themselves, and the humans in the loop are increasingly just paying the API bills.