Tag
Anthropic built web_fetch to block data exfiltration by permitting only exact, pre-approved URLs. A researcher walked data out anyway. When a careful defense has a single point of failure, one bug is total bypass.
Three years after the term 'AI engineer' was coined, the discipline has a tested playbook. Here is what the shift from prompting to agent harnesses tells you about where autonomous agent work is heading.
OpenAI killed the model picker to simplify AI, then shipped extra options that confuse people anyway. The lesson for agent operators: the routing layer is the new control surface, and hiding it doesn't make it disappear.
Meta's Muse Spark 1.1 is the first Spark model with an API, and it leads with tool calling and computer use, not benchmarks. The tell isn't the model. It's that Meta wants you building agents that act.
Modal's CTO says the old infra stack worked because humans could fill in missing context in their heads. Agents can't. That single admission is forcing a redesign of every dashboard, error message, and config layer in the agent stack.
Vercel bumped its Anthropic-on-AWS provider to 2.0.0 to correct a versioning mistake. The mundane fix reveals more about the maturing plumbing beneath your AI agents than the changelog admits.
Vercel's Chief of Software says the company is turning itself into an agent. That inversion, from selling agent tools to reorganizing around autonomous software, is the signal the category just went structural.
A funded startup and Anthropic's own keynote both point at the same idea: agents that maintain themselves. That moves agents from labor to governance, and it changes your attack surface.
The industry's multi-year convergence on autonomous agents has crossed from experimental to systemic. GPT-5.6's limited preview is the signal, and the evaluation bar just hardened for everyone running agents.
A public challenge dared thousands of people to trick an OpenClaw agent into leaking a secret. After 6,000 attempts, nobody did. The story isn't a breach. It's the labs' injection-resistance work finally showing up at scale.
OpenAI's internal Codex usage grew 56x in Research and 32x in Customer Support since November 2025, while Engineering grew 27x. The departments that scaled fastest weren't the ones best suited to automation. They were the ones that solved deployment first.
Self-driving labs and Qwen's jump from screen to robot arm both cross the same line: from describing the world to changing it. Here is how to find where your own agents sit on that line, and whether you put them there on purpose.
Anthropic's Claude Tag turns persistent, multiplayer, event-triggered agents into something you can buy. The interesting move isn't the feature list. It's that Anthropic just commoditized the in-house project five named companies were building by hand.
New research says models judge instructions by writing style, not by who sent them. That makes prompt injection a structural flaw, not a bug you patch. Here is what it means for anyone running an agent.
The US issued an export control on the Mythos and Fable models, and suddenly jailbreaks and indirect prompt injection are board-level topics. The technical threat didn't change. The audience did. Here is what that means for the agent running on your machine.
Hermes Agent v0.17.0 reads like a feature-packed release. The real story is architectural: a single-user desktop tool just became a multi-channel, multi-node system, and that shift carries problems the release notes don't name.
Cloudflare's new ephemeral Worker projects let an agent deploy and run code for 60 minutes with no account setup. It removes the friction agents hit when they need temporary compute, and quietly redraws a trust boundary in the process.
OpenClaw's v2026.6.9 quietly absorbed 422 merged PRs in a single release window. That number is the story the changelog buries: a project consolidating faster than its public stability narrative can keep up.
A week of routine agent-framework releases reads like changelog noise. Read together, the patches point at one quiet structural shift: credentials are being pulled out of the place agents can see them.
Z.ai released GLM-5.2 under an MIT license: 753B parameters, a 1M-token context window, and no API meter running. For agent builders, the question is no longer whether open weights can compete, but how long the closed-lab moat survives.
