Microsoft’s security research team dropped a sobering disclosure this week. They’ve named it AutoJack, and the attack it describes is the kind that should make every developer running AI agents on their local machine read carefully before closing the tab. The short version: a single malicious webpage, viewed by an AI browsing agent, can execute arbitrary code on the host machine — by routing through the agent to reach an unauthenticated local MCP endpoint. ...

If you’re running an AI agent on top of OpenClaw, today’s a good day to update. Version 2026.6.8 landed this week with over 192 changes — 160+ merged pull requests and more than 240 direct commits — and the headline features go well beyond the usual patch-and-polish. Telegram Finally Gets the Formatting It Deserves The most immediately noticeable change for daily users: Telegram now renders tables, lists, and blockquotes natively. Previously, structured output from your agent would arrive as a wall of plain text, stripping all the carefully formatted markdown responses you expected. With this release, OpenClaw maps rich formatting elements to Telegram’s native rendering, so tables actually look like tables and lists display as actual bullet points. ...

Vercel Ship 2026 dropped a surprising statistic: agents now drive more than 50% of all Vercel deployments, up from under 3% just six months ago. That’s not a gradual adoption curve — that’s a near-vertical inflection. And Vercel responded by shipping a complete opinionated stack for building and deploying agents in production. This guide walks through the key building blocks Vercel announced at Ship 2026 and how to start using them. ...

Microsoft’s AutoJack research just changed the threat landscape for anyone running AI agents with web browsing capabilities alongside local MCP servers. This isn’t theoretical — researchers demonstrated that a single malicious webpage can chain together three weaknesses to execute arbitrary processes on your host machine. If you’re running any agent framework with a browser tool plus a local MCP server, this guide is for you. What AutoJack Actually Does Before we get to defenses, let’s be precise about the attack. Microsoft’s security researchers demonstrated “AutoJack” against AutoGen Studio’s open-source multi-agent development interface. The name is apt: it literally hijacks your agent and uses it against you. ...

Claude Code Artifacts is one of those features that sounds almost too good to be true: an AI that’s actively writing and running code in your terminal can simultaneously generate a live, shareable web page showing your stakeholders what’s happening in real time. No dashboarding infrastructure. No context-switching to write status updates. The artifact updates itself as Claude works. It’s in beta right now, available on Team and Enterprise plans. Here’s how to get it set up and working. ...

Wall Street’s relationship with Anthropic’s Claude just got geographically complicated. JPMorgan Chase has removed Claude from the approved AI tools available to its Hong Kong-based staff — a compliance-driven decision that puts the bank in the same position Goldman Sachs found itself in back in April, and signals a broader pattern for how US-China tensions are reshaping enterprise AI adoption. What Happened According to reporting from the Financial Times (cited by Reuters and Finextra on June 18, 2026), JPMorgan removed Anthropic’s Claude models from an internal drop-down list of approved large language models available to employees in Hong Kong. This isn’t a technical block applied to the region — it’s a deliberate compliance decision to withdraw the tool from being an officially sanctioned option for those employees. ...

The competitive landscape for AI agent platforms just got measurably more interesting. The Information reported this week that Hermes, the agent framework from Nous Research, has eclipsed OpenClaw on at least some key metrics. That’s a headline that matters if you’re following where AI agent adoption is actually going. The Numbers Behind the Story The most concrete datapoint comes from OpenRouter’s global daily app rankings. As of May 2026, Hermes Agent reached #1 with approximately 224 billion daily tokens processed, compared to OpenClaw’s 186 billion. That’s not a marginal edge — it represents a roughly 20% lead in daily inference volume on one of the most widely-used AI routing platforms. ...

⚠️ Alpha status notice: CrewAI v1.14.8 is currently a pre-release alpha. The stable current version is v1.14.7. The features described here may change before stable release. Test in non-production environments first. With that caveat front and center, let’s talk about what’s in the alpha — because if it ships stable, it’s genuinely significant for teams building complex, enterprise-grade agentic workflows. What’s New: FlowDefinition Gets Declarative CrewAI has been pushing toward more declarative flow definition for several releases, and v1.14.8 alpha represents the biggest leap forward yet. The FlowDefinition DSL now supports a richer set of constructs that eliminate much of the Python boilerplate previously required for conditional logic and iterative processing. ...

One of the most frustrating limitations of working with multi-agent systems has been a deceptively simple problem: when you delegate a task to a subagent, you have to wait. The parent agent blocks. The chat freezes. Whatever the subagent is doing — research, code generation, data processing — takes minutes, and you can’t do anything until it finishes. Hermes Agent (Nous Research) just shipped a fix for this, and it’s the kind of fundamental capability improvement that changes how you architect agent workflows. ...

OpenClaw, the agentic AI runtime powering autonomous agents across multiple channels, has shipped version 2026.6.8 — and it’s a meaty release. With 192 merged PRs since the prior version, this update touches almost every layer of the platform: channel delivery, model routing, agent reliability, and — critically — security defaults. Here’s everything practitioners need to know. Richer Messaging: Telegram and WhatsApp Get the Upgrade They Deserved For agents that live in messaging apps, the quality of delivery matters as much as the quality of reasoning. Version 2026.6.8 brings structural improvements to both Telegram and WhatsApp channel plugins. ...