The Economics of Offensive Capability OpenAI’s decision to price the Daybreak Red tier at $75 per million tokens for output — a 2.5x premium over the $30 charged for Daybreak Blue — reveals a calculated bet on the market value of offensive capability. By codifying this pricing structure, OpenAI is not merely selling a tool;…
Autonomous software agents have spent years as digital ghosts—clever enough to scrape and summarize, but perpetually unable to pay for their own lunch. That ledger-backed reality finally shifted on August 4, 2026, with the launch of Cloudflare Wallets. It is a quiet, structural pivot: software that can finally hold a purse string. The friction in…
What Agent Plugins Is Agent Plugins is a technical specification designed to bring interoperability to the AI agent ecosystem. It provides a standardized directory structure and manifest format that allows developers to package AI capabilities—specifically Agent Skills (pre-defined tasks or functions an agent can perform) and MCP servers (which provide context and data via the…
CISA added CVE-2026-9198 to its Known Exploited Vulnerabilities catalog on August 4, setting a federal remediation deadline of August 7. That date has passed. The recurring critical vulnerabilities demonstrate that agent infrastructure builders are not merely tools but high-risk single points of failure.
The agent ecosystem has spent the past two years running AI agents through human-designed browsers. Cloudflare just rendered that arrangement obsolete. On August 6, the company launched Kitesurf — a web browser purpose-built for AI agents, running entirely in V8 isolates on Cloudflare Workers. No Chromium. No human-oriented rendering pipeline. Just a machine-optimized execution layer…
The week in Las Vegas began with a defensive wall of corporate security products at Black Hat and ended with the systematic dismantling of the AI agent runtime stack at DEF CON 34. As we detailed in our BH Day 1 Briefings, the industry has been racing to deploy tools like Wiz Agent Shield and…
On August 6, 2026, the agent ecosystem got its own npm moment. A coalition of major platform operators—Amazon, Microsoft, OpenAI, Vercel, and Cursor—simultaneously adopted Agent Plugins 1.0.0, an open, vendor-neutral standard for packaging Agent Skills and Model Context Protocol (MCP) servers into portable plugins. This is not a proposal or a white paper. It is…
The security architecture of AI agents is facing a fundamental challenge: the trust-through-defaults model. As developers increasingly rely on autonomous coding agents like Claude Code, Gemini, and ChatGPT to streamline workflows, these tools are being weaponized in a campaign codenamed FakeGit. This technique, termed AgentBaiting, exploits the agents’ propensity to autonomously discover and recommend external…
Zenity Labs disclosed a new vulnerability class at Black Hat on August 5 that it calls Intent Collision, a zero-click attack vector that hijacks agentic browsers by injecting hidden instructions into any web page the agent visits. The demonstration compromised Claude in Chrome, Gemini, Perplexity Comet, ChatGPT Atlas, and Copilot Edge without requiring the user…
OpenAI has officially crossed a threshold that industry observers have long anticipated but hoped to avoid, marking its upcoming model, Astra, with the first public Critical flag under its internal Preparedness Framework. This designation represents a significant departure from previous assessments, where models such as GPT-5.6-Sol were categorized only as High. According to an Axios…