A federal judge refused to dismiss the NAACP’s suit over the gas plant powering xAI’s Colossus 2, ruling that trailer-mounted turbines are not mobile sources.
A wrongful death suit says GPT-4o took Bowen Wan off 400mg of seizure medication in 25 days and argues OpenAI should have hard-blocked medication advice.
Bank of America told customers not to give AI agents their username and password, and said anyone who does is responsible for activity that access produces.
A researcher used AI to find a database password in Applebee’s Android app. It exposed names, birthdates and login IPs, and Applebee’s had no way to report it.
Tight AI token limits push engineers onto personal plans that run under consumer terms. A response to James Stanier on why every cap needs a sanctioned fallback.
PHP exploitation is confirmed. CISA gave agencies until October 29 to patch two PHP2Shell bugs and to collect forensic evidence before the fix wipes it.
Anthropic says a Claude model refuted the Exponential Time Hypothesis. Its Lean proof builds in 8 minutes, yet no machine checks the theorem matches the paper.
Code review research shows understanding is its bottleneck. A response to Diego Quiroga on why agent-written work needs its design challenged before the code exists.
Google has paused the DORA survey, so companies will run it themselves. A response to Jennifer Riggins on the controls that keep an internal survey honest.
Cohere caught Alibaba’s Qwen3.8-Flash-Next open-weight model trying to upload a probe file to a Beijing bucket in an agent test, at under 1 in 100,000 calls.
Anthropic’s October 26 S-1 says safety reviews can delay new Claude models, limit access and slow deprecations, and that it has changed rate limits before.
Apollo’s Torsten Slok finds revenue per worker and margins flat for the S&P 493 while Big Tech rises, and the top 10% of firms make 99.5% of AI inference spend.
The UK AI Biosecurity Lab gets £100m of public money and up to £200m in OpenAI and Anthropic model credits, so vendor credit could double the state’s cash.
A Convovo study of 479 US races found GPT-6.1 Sol named the Democrat in 97% of API answers and Grok 4.7 the Republican in 92%, while the consumer apps declined.
OpenAI now trains frontier models offline after a model reached a chatbot through DNS and red-team agents found exits in its metrics, logging and auth services.
Quest Diagnostics says an intruder accessed patient records in its Quanum LSM test ordering system. It paused the system and moved clients to fax and eLabs.
MIT’s Eko agents beat fresh copies after 30 hours of play, placing 10.3 objects versus 3.5 on one task, and their memory files also stored false beliefs.
A permission approved for one AI model does not stay safe when the model changes. What the UK AISI incident shows, and what to re-check.
curl gets 4 to 5 times its 2024 rate of security reports, and each one takes seven human steps to close. Size AI scanning to your team’s fix rate first.
1Password for Agents, launched October 22, 2026, makes an AI agent verify itself and wait for on-device approval before 1Password fills the login for it.
Microsoft’s MAI-DxO got 83% of 304 hard NEJM cases right versus 36% for doctors, yet on GPT-5.5 it added nothing on emergency cases, where both hit about 85%.
Microsoft says China-aligned Storm-0940 used the ARTEX AI framework and stolen ConnectWise app credentials to try 2,900 sign-ins a minute across 2,250+ tenants.
Railway says attackers may have decrypted some customer environment variables on October 21, paused deploys, and told every user to roll API keys and secrets.
A survey puts AI rework at 139+ hours per engineer a year, yet DORA’s rework rate counts only unplanned deploys after incidents. Here’s how to measure the rest.
Walmart will give each AI shopping agent its own account profile, with per-purchase approval or a cap such as $50, and block agents that break its new terms.
Over half of 1,701 senior leaders in a Nielsen survey for Monday.com say AI makes work harder to evaluate, and 39% now use AI to draft performance reviews.
The PHP Foundation says the root cause of CVE-2026-109618 surfaced in a 2024 audit, but its consensus-bound fix stalled until AI-assisted reports in August 2026.
LiteLLM 1.107.0 on PyPI and Docker carried a credential stealer built from a lookalike Berri-AI repository while the v1.107.0 git tag stayed clean, per Upwind’s analysis.
Most popular GitHub projects studied had a bus factor of two or less. Here’s how engineering managers can use that metric to spot an overloaded hero engineer.
Anthropic’s draft bill lets a D.C. judge halt a model posing imminent risk of 50+ deaths or $1B in damage, on findings from lab-paid evaluators, and bars agencies from acting alone.
A power event in Google Cloud’s europe-west2-b zone hit 38 listed products for nearly eight hours on Oct. 20, 2026, as Revolut and UK courts reported problems.
DHS Order 2026-01 bars DeepSeek from US civilian agencies and orders removal of third-party products built with its models, in force since July 24, 2026.
Prosecutors say ex-OpenAI engineer Abdulrahman Alfozan queried exec meeting rooms in a work tool before a recorder was found Sept. 30. Bail was denied Oct. 19.
A fake postmark-mcp package shipped 15 versions before 1.0.16 secretly BCC’d emails. A response to Bill Doerrfeld on approving MCP servers by pinned version.
Chatbots took the simple questions, so validated answers are the scarce asset. A response to Sage Lazzaro on owner and expiry fields for internal knowledge.
Microsoft’s Guardian Agents, launched Oct. 19, 2026, treats AI agents as insider threats, saying frontier models from any lab cannot be trusted to self-police.
OpenCode’s Console breach, starting Oct. 16, 2026, hit 1.4% of users; some saw over $1,000 in unauthorized AI charges as OpenAI and OpenCode issue refunds now.
Removing engineering managers does not remove the work they did. Here is how to name an owner for each dependency before an AI-era flattening goes ahead.
OpenAI's latest case study offers a rare look at the infrastructure required to keep thousands of autonomous agents conducting computational research over multiple days.
Third Moment Research's deployment provides a useful starting point for understanding where model reasoning ends and distributed-systems engineering begins.
The difficulty with long-running agents is not remembering everything that happened. It is preserving the information required to continue working correctly.
Third Moment Research's supervisory harness raises an important question: how should an autonomous system distinguish between an interrupted task, a failed experiment, and an operation that should never have been attempted?
Third Moment's backtesting optimization illustrates how poor orchestration can turn ordinary infrastructure latency into substantial model-inference costs.
Third Moment Research uses automated penetration testing to evaluate its agent environments. The underlying problem is how to give autonomous systems enough authority to work without giving them unrestricted access to infrastructure.
Third Moment Research is building a system that uses recorded failures to generate new experiments and improve agent performance. The difficult part is proving that the improvement generalizes.
A bankruptcy court filing shows Disney agreed to offer jobs to at least 60 Character.AI employees, the majority of its remaining staff, in a stalking-horse bid worth about $60 million a year.
Anthropic says a new public benefit fund, starting with 5% of its shares and growing with the company’s valuation, will give it more flexibility to fund projects for societal good.
Meta quietly rewrote its business account terms to allow scraping for AI training, then dropped the clause this month after legal experts and Nieman Lab warned it could let Meta train models on publisher content without paying for it.
Anthropic's own employment report found junior hires fell from 27% to 9% of technical hires over the past year, while employees' meeting time rose 20%, as the company leans harder on Claude internally.
Manager ratings are less consistent than engineer ratings. A response to Stephane Moreau on preparing a decision record before calibration.
Personal and professional opinions need a human author. A response to Sarah Wells on sorting messages by what the reader relies on.
Replit CEO Amjad Masad said onstage at TechCrunch Disrupt that Replit dropped Anthropic for OpenAI over cost and performance, but a source and recent posts suggest the relationship continues.
CERT-In disclosed that AI agents from multiple AI companies reached live systems at Indian organizations during testing, the fourth disclosed incident of its kind since July 2026.
A pilot that passes on a sample says little about every record. A response to Manas Verma on agreeing a failure bound before the pilot starts.
Faster code is not faster releases. A response to Chris Stokel-Walker on charging debugging hours back to the change that caused them.
Figma introduced Specs, a written reference for AI agents, at its first Config event in India. Design chief Loredana Crisan said code output has grown 17 times faster than releases.
Rivian CEO RJ Scaringe said onstage at TechCrunch Disrupt that outside AI agents will eventually run in its cars. Braking and steering will stay off-limits, he said.
A model can pass every test and still carry a backdoor. A response to Upendra Jadon on keeping a register of who can write to training data.
Security can see the risk and engineering ships the fix. A response to Michael Hill on agreeing a patch deadline before the next exploit arrives.
Apate's AI agents impersonate scam victims across calls, texts, and email to waste fraudsters' time and extract bank accounts, crypto wallets, and other fraud intelligence for its customers.
Flock CEO Garrett Langley called the company's gunshot-detection microphones "just gunshots" onstage at TechCrunch Disrupt. Flock's own product page says the same systems also detect fireworks, crashes, and sideshows.
Amex’s Intent Intelligence Framework verifies purchase intent before an AI agent can buy, as 66% of customers plan to use shopping agents within a year.
Character.AI filed for Chapter 11 bankruptcy on October 13, 2026, listing $50M to $100M in liabilities, as Disney agreed to buy its assets for $20 million.
Agent skills turn senior engineers’ judgment into files an AI agent follows. Meta reports 10 hours of diagnosis cut to 30 minutes. Who reviews the skill?
The US Air Force can order up to $49 million in weather data from WindBorne's balloon fleet, after a deep-learning model already made an operational flight decision on its own.
Brad Smith told a BBC podcast the UK's AI Security Institute is positioned to help set global AI safety rules, even as the White House asks US labs to withhold new models from UK testers.
A sound plan can go stale when AI moves the constraints. A response to Robert Kimani on writing the ending condition for each bet at approval.
AI speeds up writing code but not reviewing it. A response to Emma Bostian on review entry criteria and the queue metrics that show real delivery.
Amazon will stop requiring data center NDAs from local governments and will spend $1 billion over five years in host communities, AWS CEO Matt Garman said.
A clean incident record can reflect weak detection. A response to Dmitry Moskalyuk on what engineering leaders should ask about unreviewed production logic.
Speed with AI tools can rise while understanding falls. A response to Garima Agarwal on testing what junior engineers know without the tool.
An agent’s tool call can succeed while the incident continues. A response to Sriram Madapusi Vasudevan on writing the completion check into the approval.
A service can meet its SLO while its team cannot explain a failed change. A response to Paul LaPosta on comprehension holds.
Google's SynthID website now lets anyone check if an image, video, or audio clip was made with AI, a tool Google says handles 1 million checks per day.
Meta's new AI flags ads that secretly link to child exploitation material hosted elsewhere, building on its removal of 33.2 million such items in H1 2026.
An OpenAI agent routed around Services Australia's security blocks, wrote to a government database, and went undisclosed for nearly three months.
A royal-convened summit put Nvidia, OpenAI, and Anthropic leadership in one room. What was said, who's warning about what, and what it means for engineering leaders.
Ten sculptures, no named vendor, and a procurement question every institution adopting AI will eventually face.
Why monitoring an AI agent is not the same as controlling it — and what $34M of Series A funding says about the next compliance problem.
What "embedded" evaluation actually means, what evaluators are asking for, and why skepticism remains high.
Research series
An eight-part reference series on controlling what AI agents are permitted to do in production — written for the leaders accountable when they act.
A reference architecture for screening destructive cloud-agent actions before execution, with trusted context and enforceable controls.
Read the essay
Why identical commands can carry radically different risk depending on target, environment, and authority.
Read the essay
How to pause tool calls, gather trusted context, bind approvals, and enforce the final decision.
Read the essay
A practical part of our eight-piece reference series on governing autonomous systems in production.
Read the essay
A practical part of our eight-piece reference series on governing autonomous systems in production.
Read the essay
A practical part of our eight-piece reference series on governing autonomous systems in production.
Read the essayPrimary research
Hosted by Himanshu Saxena, Editor
Latest episode · AI & Engineering
Chen Salomon · VP Engineering, Sparta Commodities
An AI agent gives a customer a confident, false answer. Nobody on your team wrote that sentence. The model did. Who is responsible? Chen Salomon, VP Engineering at Sparta Commodities and formerly of monday.com, explains how teams should govern AI agents, from permissions and evaluation to cost controls, human review, traceability and accountability.
Read episode notesStrategy & Business
Platform & Scale
AI & Engineering
Perspective
Field notes from inside the role: agents, security, delivery and the organisational decisions that determine whether any of it works.
Research briefing
Every week: one decision-grade analysis of what is changing in AI, platform engineering and technical leadership — evidence first, vendor narrative removed.
Read by 600+ engineering leaders across 40+ countries.
