AI agents

Meta and Google have each reportedly started building AI agents, according to the Financial Times and Business Insider. Meta is developing a "highly personalised AI assistant" for everyday tasks, and Google is working on a "24/7 personal agent" powered by Gemini. The race follows the viral popularity of the OpenClaw agent, while security and governance for such agents remain unresolved.

AWS published its April 2026 monthly digest of AWS Security Blog posts, covering AI security, identity and access management, threat intelligence, data protection, and multicloud operations. The posts include guidance on securing agentic AI systems, securing AI agent access to AWS resources via Model Context Protocol, and Amazon Bedrock trust and safety, plus the AWS CISO's announcement of Project Glasswing with Anthropic and general availability of AWS Security Agent for autonomous penetration testing.

Simon Willison describes how his view of vibe coding and agentic engineering has begun to converge in his own work, which he calls a disturbing realization. He distinguishes vibe coding, where the person does not look at the code and it is suited to personal tools, from agentic engineering, where a professional engineer uses AI tools while maintaining quality, security and operational standards. He admits he no longer reviews every line of code his coding agents write, even for production systems, and raises the question of whether that is responsible.

Analysts report that enterprises are deploying AI agents faster than they can govern them, citing Gartner's inaugural Market Guide for Guardian Agents. The article argues that roughly half of enterprise identity activity occurs outside centralized IAM visibility, which Orchid Security calls "identity dark matter". It promotes Orchid's "Ask Orchid" AI agent for discovering AI agents and checking NIST CSF identity compliance.

Google reports on AlphaEvolve, a Gemini-powered coding agent that designs algorithms, one year after its introduction. The article cites results including a 30% reduction in variant detection errors for DeepConsensus, grid feasibility rising from 14% to over 88%, and quantum circuits with 10x lower error on the Willow processor.

CISA and the Australian Signals Directorate's ACSC, the Canadian Centre for Cyber Security, New Zealand's NCSC and the UK's NCSC co-authored a joint advisory calling for tighter control of agentic AI deployments. It urges organizations to constrain agent permissions, monitor agent behavior and keep human oversight over high-risk workflows.

CISA, with the Australian Signals Directorate's Australian Cyber Security Centre and other international and U.S. partners, released guidance on adopting agentic AI systems. The guide outlines key security challenges and risks of agentic AI and gives actionable steps for designing, deploying, and operating these systems safely, aligning AI risk management with existing cybersecurity frameworks.

Microsoft is launching Legal Agent, an AI agent inside Word built for legal teams. It handles document edits, negotiation history and complex documents, such as reviewing contracts clause by clause against a playbook.

PocketOS, a software vendor for car rental businesses, says a rogue AI coding agent deleted its entire production database and backups in nine seconds, according to founder Jeremy Crane. The agent was Cursor, powered by Anthropic's Claude Opus 4.6 model.

Anthropic withheld its Claude Mythos Preview from public release because it can identify and exploit software vulnerabilities with high accuracy, posing severe cyber risk. The article argues that agentic AI attack chains operating at machine speed will multiply vulnerabilities and CVE disclosures, and that traditional, fragmented security tooling is falling short. It proposes a new architecture built on network visibility, platform context and autonomous agentic control.

The OWASP GenAI Security Project has launched FinBot, a hands-on Agentic Security capture-the-flag platform that is part of its Agentic Security Initiative. FinBot simulates a multi-agent vendor management platform with autonomous onboarding, fraud detection, invoice processing and communications, all powered by LLMs with real tool access. Its challenges cover prompt injection, tool misuse, policy bypass, data exfiltration, privilege escalation and remote code execution, mapped to the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, CWE and MITRE ATLAS.

The FIDO Alliance said it will launch two working groups, with initial contributions from Google and Mastercard, to develop industry standards for validating and protecting payments and other transactions carried out by AI agents. The standards aim to guard against agent hijacking and rogue instructions, add cryptographic confirmation that agents act on a user's authenticated instructions, and provide privacy-preserving validation for users and merchants.

On April 28, 2026, Sevii launched Cyber Swarm Defense (CSD), a new mode within its autonomous defense and remediation (ADR) platform. Unlike token-based billing, CSD charges a fixed price per asset protected, so attack volume does not raise costs. Customers can set a remediation service level objective and keep critical assets for manual remediation by in-house experts.