September 2026, continued 29

  1. Security & Risk

    AI agents compressed a conventional intrusion into ten hours

    Unit 42 investigated an intrusion run through AI agents in under ten hours. Its own report says no novel zero-day was needed, a human made the decisions.

    7 min read

  2. Agents & Tooling

    Multiverse Marketed a Compressed GLM 5.2 as 'Europe's Leading AI Model'

    A Spanish company launched a 438B reasoning model as Europe's best. Its API changelog, and a Community Note all point at a Chinese open-weight base.

    4 min read

  3. Security & Risk

    Google signed the letter asking for cyber-capable AI, then gated its cyber model

    156 companies called for a surge in cyber defence on 27 August. On 2 September Google shipped its most capable security model to trusted defenders.

    5 min read

  4. Agents & Tooling

    Most of the sources behind Perplexity's software recommendations sit outside the top 100,000 websites

    Trellner put 380 software categories to Perplexity and kept every citation. 59.8% pointed at domains ranked worse than #100,000.

    3 min read

  5. Agents & Tooling

    World models could widen the AI divide before they improve ordinary work

    World models are far behind language models in deployment evidence, and their development could concentrate further.

    8 min read

  6. Security & Risk

    OpenAI Wants Your Trust, Your Calendar and Your Card

    OpenAI paused frontier training and wound down its side projects. The product it is refocusing on asks for your calendar, your finances and your card.

    7 min read

  7. Security & Risk

    Perplexity brings hybrid frontier and local AI to your Mac

    Hybrid compute runs a classifier on your Mac to decide what reaches the cloud. The admin rules and the record of what left are Enterprise features.

    6 min read

  8. Agents & Tooling

    Runway's Solaris generates app interfaces frame by frame, with no code

    Runway's first Interface World Model generates a UI frame by frame with no code underneath. Accessibility is on its own list of unsolved problems.

    5 min read

  9. Security & Risk

    Anthropic says it had one layer of defence where it needed several

    Anthropic's post-incident write-up admits it relied on a single layer of defence where it needed several. The independent METR review is still to come.

    3 min read

  10. Security & Risk

    An agent's tool list shows what you wired into it

    A ChatGPT Work session published its tool and skill inventory as a public website. The category names show which integrations that session had been given.

    6 min read

August 2026 20

  1. Agents & Tooling

    The magic in agent interfaces still needs an off switch

    Two instincts about talking to agents: make the explicit path reliable, or design the naming away.

    10 min read

  2. Agents & Tooling

    Cloudflare can now see some MCP traffic, and the gap is the point

    Cloudflare is clear that its absence proves nothing, which makes this a network inventory signal rather than a census of agent activity.

    10 min read

  3. Security & Risk

    294,000 exposed AI tools is the wrong number to worry about

    Censys counted 294,000 IPs exposing AI tooling to the public internet. The number that should change your afternoon is CVE-2026-42208.

    7 min read

  4. The Industry

    Nvidia may buy Hugging Face. Here is why that matters.

    Nobody has confirmed a deal. What the report shows is where value is accumulating — AI hardware moving closer to open models.

    9 min read

  5. Security & Risk

    OpenAI's agents were persuaded past their own refusal

    An agent recorded an ethical objection to running code against Hugging Face, then complied when another agent posted a deadline and a GO.

    9 min read

  6. Security & Risk

    Tailscale Aperture treats agent access as a change-control problem

    Aperture is generally available. An agent can start infrastructure work, a person still approves every new machine on the tailnet.

    9 min read

  7. Security & Risk

    A webcam's recording light is only useful if its firmware is protected

    Chaz Schlarp used Claude Opus 5 to reverse-engineer five desk peripherals in about 13 hours, including a webcam whose recording LED he could switch off.

    12 min read

  8. Security & Risk

    The robot arm will obey the limits you remembered to write down

    Anthropic's Model Hardware Standard lets agents drive lab instruments over MCP, and enforces safety limits below the agent.

    7 min read

  9. Agents & Tooling

    WebMCP could make browser agents less clumsy. It also makes permission design unavoidable.

    A proposed browser API gives AI agents structured access to specific tasks on a website, instead of leaving them to guess at the UI.

    10 min read

  10. Agents & Tooling

    One Foot on the Brake, One on the Gas

    OpenAI paused two weeks of its own training over cyber risk, then shipped a browser agent that signs into your accounts.

    8 min read