Everything You Need To Know About Claude Duet!
Anthropic just launched Claude Duet, a proactive agent with its own computer in the cloud. It sends you a morning brief, checks your connected apps every few hours, and can even buy things, but only after you approve. In this video: what Duet is, how to get on the waitlist, what it costs in usage, how Anthropic is keeping it safe, and who it's really for. Plus PHP2Shell, the huge PHP security bug that AI helped find and attackers poked at before the fix was out, and what to do if you have a website. 🔔 SUBSCRIBE TO BYTEFORWARD AI news, coding agents, model comparisons, benchmarks, and the things people are actually building: https://www.youtube.com/channel/UCGGHPOAzUaKsSc2yjsOeAFQ?sub_confirmation=1 Join the Claude Duet waitlist: https://claude.com/product/claude-duet Chapters 0:00 Claude Duet and the PHP hack 0:47 What Claude Duet is 1:35 Anthropic's demo: the morning brief 2:23 It can buy things (after you approve) 2:46 How to get it 3:13 Usage limits, and how Dots compares 3:58 Is it safe? 4:45 What it can't do yet 5:11 Who it's actually for 5:48 The always-on agent race 6:20 The PHP2Shell hack 7:05 How AI found it 7:30 The fight over credit 8:08 It leaked early: attacks and shutdowns 8:48 What website owners should do 9:13 Two more things 9:35 My two cents Claude Duet access (as of Oct 21, 2026) - Research preview, by waitlist, starting with US Claude Pro and Max subscribers. Included in the plan at no extra cost. Team and Enterprise aren't included yet. - Standalone app on iOS and Android, and on the web at claude.ai. - It uses the same usage limits as the rest of Claude, and its background checks count too. New users get one full reset of the five-hour and weekly limits, usable until November 30, 2026. - It runs on Claude Opus 5.5. You can't pick the model. If you have a website (PHP2Shell, CVE-2026-109618 / CVE-2026-109619) - This is a PHP update on the server, not a WordPress or plugin update. - Managed hosting: ask your host to confirm PHP is patched. WordPress.com and GoDaddy Managed WordPress say no action is needed. - Your own server: install PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 (or your distribution's patched package), then restart PHP-FPM, Apache and any PHP workers. - PHP 8.1 or older: there's no official release. Get a backport from your host or vendor, or upgrade. Sources Claude Duet announcement: https://claude.com/resources/articles/claude-duet Claude Duet product page and FAQ: https://claude.com/product/claude-duet Get started with Claude Duet (Help Center): https://support.claude.com/en/articles/17631495-get-started-with-claude-duet Anthropic's launch film: https://www.youtube.com/watch?v=Fb-68zqcSVs Claude on X (launch): https://x.com/claudeai/status/2112984664256241837 Claude on X (safety): https://x.com/claudeai/status/2112984667758510197 Mike Krieger: https://x.com/mikeyk/status/2112986418503110772 Stripe's demo: https://x.com/stripe/status/2112995753824301406 Shopify's demos: https://x.com/Shopify/status/2112989194167484428 and https://x.com/Shopify/status/2112989196394656119 Claude Opus 5.5: https://www.anthropic.com/claude-opus-5-5 Hacker News comment on usage limits: https://news.ycombinator.com/item?id=50187293 Engadget on Duet: https://www.engadget.com/2293646/claude-duet-is-anthropics-answer-to-meta-muse-and-openai-dots/ Engadget on Dots and Muse: https://www.engadget.com/2281289/openai-dot-vs-meta-muse-ai-agents-comparison/ Dan Shipper: https://x.com/danshipper/status/2112997559463506059 Alexandr Wang: https://x.com/alexandr_wang/status/2112995511796183371 Tibo: https://x.com/thsottiaux/status/2112992042465009736 PHP security advisory: https://www.php.net/archive/2026.php#2026-10-21-5 GitHub advisory and credits: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w Calif's write-up: https://calif.io/php2shell/ Calif on X: https://x.com/calif_io/status/2112914613297668583 Wiz Research: https://www.wiz.io/blog/php2shell-php-rce Wiz on X: https://x.com/wiz_io/status/2112899813264277528 OpenAI: https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities OpenAI on X: https://x.com/OpenAI/status/2112907856018309586 Google (Wiz and Gemini 4 Argon film): https://x.com/Google/status/2112914740058181739 The PHP Foundation: https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/ W3Techs PHP usage: https://w3techs.com/technologies/details/pl-php Sansec: https://sansec.io/research/php2shell Cloudflare's CTO: https://x.com/dok2001/status/2112811965735202970 Patchstack: https://patchstack.com/articles/php-major-vulnerability-alert-10-2026/ Japan's prime minister: https://x.com/takaichi_sanae/status/2112890642590564386 Automattic: https://automattic.com/2026/10/21/your-sites-are-protected-against-the-php2shell-vulnerabilities/ #ClaudeDuet #Anthropic #AINews
