Industry news

Straiker describes a process that links AI red teaming to runtime guardrails. Ascend AI runs adversarial tests across Security, Data Protection, Content Safety, Application Trust, and Agentic Risk, and records each failed test with its prompt, response, category and severity. Defend AI then uses those findings to configure runtime protection, and scheduled Ascend assessments check whether the attack still succeeds.

Elastic Security Threat Command's quarterly threats report, drawn from confirmed customer intrusions and first-party research between April and September 2026, finds attackers abusing trusted software rather than deploying traditional malware. Intrusions use signed legitimate products, including remote monitoring and management agents (ScreenConnect was named most often across 23 confirmed RMM abuse findings), AI coding assistants and Microsoft first-party clients. The report also describes AiTM phishing kits and legacy authentication gaps that bypass MFA, with the time from infostealer infection to login as short as eight minutes.

The author stored six months of their own Claude Code and Cursor sessions as semantic vectors in Elastic and searched them instead of sending every session to an LLM. Roughly one in seven sessions (of 7,454 turns) needed triage for suspicious actions, and the agent's reasoning carried more signal than the prompt. The article argues that agent sessions require semantic search for threat hunting because a new question would otherwise force reevaluation of all collected data.

OpenAI introduced Images 2.6 in ChatGPT, Codex, and the API, adding GIF creation, faster generation, and more precise editing. The update generates images 50% faster, and in the API developers can choose between GPT-Image-2.6 Flare, which can generate images in as little as six seconds at low quality, and GPT-Image-2.6 Sunburst, which offers higher quality and greater consistency across edits at medium or high quality. People create 4 billion images per week across these products.

DevRev built Computer and Operator to carry service and operations requests through to completion, reasoning across live data with reversible actions and answers that point back to their sources. The company combines OpenAI models, including GPT-6 Astra and GPT-6.1 Sol, with its harness for connecting company knowledge and controlling the actions an agent can take. DevRev's chief technology officer, Ahmed Bashir, says the models balance reasoning, trust and latency.

Emmanuel Roman, CEO of Pacific Investment Management Co. (Pimco), wrote a commentary piece saying he cannot predict when the AI bubble will burst. The text references a Bloomberg story about Wall Street CEOs and big money managers divided over AI risks, discussed at the 2026 Global Financial Leaders' Investment Summit in Hong Kong. The source text is truncated before the main points.

CrowdStrike announced an AI Kill Switch, part of its Falcon Guardian platform, at its Fal.Con Europe conference. It lets security teams terminate misbehaving AI agents, prevent them from restarting, and cut off their network access. The technology is available immediately.

US tech stocks recovered on Tuesday after a selloff over AI spending ended, with the S&P 500 up 0.37% and the Nasdaq up 0.83%. Investors expect Democrats to win at least a House majority, which could bring more AI regulation.

Simon Willison published a release note for llm 0.37.1, a bugfix release for LLM. The note credits contributions from Steven Huang, Tao An, Arjan Mossel, and XQ.

Apple's annual financial filing warns that AI agents may take unintended or unpredictable actions, including interacting with systems they are not authorized to access, executing or altering code, sending communications and completing transactions. The company says such behavior could lead to lawsuits or harm its reputation, and that its ability to oversee third-party AI agents may be limited.

Meta is seeking to raise between $20 billion and $25 billion in a bond sale, two-thirds in U.S. dollars and one-third in euros, to fund its spending on AI infrastructure, models and services. The sale follows S&P Global Ratings revising Meta's outlook from AA- stable to AA- negative, citing uncertainty about its capex and negative free cash flow of $2.12 billion last quarter.

OpenAI says ChatGPT now handles search queries at 20 percent of Google's volume, according to consumer product lead Adam Fry at a Monday press event. Fry defined a search as any query that triggers a web search, excluding tasks like defining a term or a simple how-to explanation. He did not specify the source of the Google volume figure.

CrowdStrike will buy Fiddler AI, which makes observability software for monitoring AI agents, and Dreadnode, which automates security testing aimed at flaws in AI models, apps and agents. According to The Wall Street Journal, the deals cost about $400 million for Fiddler AI and about $95 million for Dreadnode.

The article argues that 2025 and 2026 supply chain attacks entered widely used packages through their release processes, which ran on GitHub Actions, rather than through typosquats or malicious new packages. It lists incidents including tj-actions/changed-files (March 2025), Nx s1ngularity (August 2025), trivy-action (March 2026), and LiteLLM 1.107.0 (October 2026). The post is part one of a series, covering outside threats such as pull requests, third-party actions and downloaded scripts.

Google describes Antigravity equipped with its new Cheminformatics Skills, which it says let an agent search thousands of compounds, run matched molecular pair analysis and propose novel rigidified macrocycles with synthetic routes in about an hour. The skills are grounded in RDKit and connect to ChEMBL and PubChem, with the language model handling orchestration while deterministic tools perform molecular calculations. The article also walks through rigidification, using crizotinib and lorlatinib as examples of adding bonds to reduce conformational flexibility and improve potency.

Google is completely turning off Search for schools that reject its AI features, according to The New York Times. In a broader education update, Google said Gemini, Gemini Notebook, Gemini in Classroom and Google Search "will be entirely off" for K-12 student accounts unless administrators explicitly turn them on. Administrators cannot disable Gemini features without also disabling Search, as Google's vice president of education, Chris Phillips, explained.

Gartner named Microsoft a Leader in the inaugural 2026 Magic Quadrant for AI Agent Management Platforms. Microsoft attributes the recognition to Agent 365, which it says began with identity through Microsoft Entra Agent ID and extends existing Microsoft Entra, Defender, Purview, Intune and Microsoft 365 admin center tools. More than 50 million agents have been registered in Agent 365.