Claude Code Projects delegates work to parallel threads, Pinterest ads move into search results, WordPress 7.1.1 closes a comment XSS
Today's 3 verified headlines: Anthropic announced a redesigned Projects beta for Claude Code; the user describes a goal, Claude scopes the work, delegates it to parallel cloud threads and assembles the result. At Pinterest Presents, Pinterest introduced Visual Search Ads inside search results, added Priority Products to Performance+ and announced self-serve A/B testing. The WordPress 7.1.1 security and maintenance release patched a stored XSS that an unauthenticated visitor can trigger through comments, subject to approval, and the Click2Shell chain that reaches server-side code execution when an administrator opens a crafted URL; fixes are backported through 4.7. Full analysis, sources and business impact live on each story's own page.
Claude Code Projects: a coordinator agent delegates work to parallel threads
On September 17, 2026 Anthropic announced a redesigned Projects beta for Claude Code. The user describes a goal; Claude scopes the work, delegates it to parallel cloud threads on separate repository branches, reviews the outputs and assembles the result. Every thread draws on a shared project memory; the docs set a limit of 200 new threads per day, and usage limits can fill up faster. The beta covers select Pro and Max subscribers who have used a cloud session; Team and Enterprise come later, the terminal CLI is not included, and code work requires a github.com repository. VentureBeat reports no standalone pricing. The sources do not mention Türkiye; the access timeline depends on the plan.
Pinterest brings Visual Search Ads into its search results
At Pinterest Presents on September 17, 2026, Pinterest announced Visual Search Ads. The ads get a prominent spot in search results and Pin closeups, advertisers bid for the top response, and a click goes straight to the advertiser's site. Performance+ gains Priority Products, self-serve A/B testing arrives, and an App Promotion objective enters global beta for qualified advertisers. Bill Ready's keynote put Pinterest at 640 million monthly users and said over 96 percent of searches are unbranded. Pinterest says the beta reaches all its ad markets in the coming weeks; Social Media Today says selected markets, and no source mentions Türkiye.
WordPress 7.1.1: anonymous-comment XSS and the Click2Shell chain patched
On September 17, 2026 WordPress released 7.1.1 as a security and maintenance release: 17 Core fixes, 19 Block Editor fixes and 11 security fixes. The two headline flaws are a stored XSS in wpautop() that an unauthenticated visitor can trigger, subject to comment approval (CVE-2026-93485, CVSS 7.1 per Patchstack), and the Click2Shell chain, which reaches server-side code execution when a logged-in administrator opens a crafted URL. Fixes are being backported through 4.7, and sites with automatic updates update on their own. The sources report no in-the-wild exploitation and nothing specific to Türkiye; the update arrives the same way on every site.
The agenda moves fast, the system stays calm.
Let's talk about what these changes mean for your business and clarify which step fits you.