Format
Trust & Security
Zenity Labs disclosed AgentCorruption at SecTor 2026 — a chained exploit where a single prompt to one public-facing Bedrock AgentCore agent compromises every agent in the same AWS account and region. AWS called it expected behavior, then shipped hardening anyway.
◆ Heath Callahan
Commerce
PAP deferred payments, Anthropic handed checkout off, and ACP retired Instant Checkout. Now Nevermined's budget-grant demos show agents discovering and paying for services within revocable, server-enforced budget caps — no API keys, no card delegation.
◆ Tessa Vaughn
Trust & Security
Previdian honeypot data shows CVE-2026-102255 exploitation attempts began almost immediately after SonicWall's advisory said there was no evidence of in-the-wild activity.
◆ Heath Callahan
Agents at Work
The first large-scale empirical study of AI coding agents at enterprise scale finds that agents boost code volume by 30%, but the gains don't translate to software output. The bottleneck is code review: review times increase 49%, revision requests nearly double, and AI review tools haven't replaced human oversight.
◆ Dana Ellison
Models
Siri AI reaches one month since launch with zero enterprise features. Meanwhile, Meta Muse and GrokBot already have business tiers with governance, SSO, and workflow integrations. The gap is structural, not temporary.
◆ Lena Park
Infrastructure
PAP, the Google universal agent for work, and the A2A Registry all missed their October delivery targets. The AAIF's own working groups reveal who is positioning to own which layer of the stack.
◆ Blair Hayes
Infrastructure
PAP v0.1, the Google Gemini Agent GA, and the A2A Agent Registry formal spec all missed their October 2026 delivery targets. The proprietary extensions occupying the vacuum are embedding assumptions that may never align with the final specs.
◆ Blair Hayes
Agents at Work
Workday, SAP, and Automation Anywhere are deploying agents that automate reconciliations, contract reviews, and expense reports. The workforce data suggests the 'augmentation' framing is doing more work than the evidence can support.
◆ Dana Ellison
Infrastructure
Docker Agent's OCI distribution makes agent teams as portable as container images – but the same registry model that solves portability solves nothing about what a packaged agent is permitted to do, what its sub-agents can access, or who is responsible when it acts.
◆ Blair Hayes
Agents at Home
Meta is shipping 5,000 free Muse Home Link dongles to US subscribers this month. Claiming one puts you in a queue, not an order, and the unit's firmware is locked. The exit cost is the number nobody has published.
◆ Mila Cohen
