If you’re running AI agents with MCP database connections, you need to read this now. A security researcher has uncovered three serious vulnerabilities in MCP database integrations affecting Apache and Alibaba database products. Apache patched their vulnerability. The other vendor declined to fix, leaving a known, unpatched flaw actively exposing any agent using that integration. The Register reported the findings on May 13, 2026. What Was Found The researcher identified three critical flaws in MCP server implementations used to connect AI agents to databases. The specific vulnerability classes have not been fully disclosed to avoid giving attackers a roadmap before defenders can patch — this is standard responsible disclosure practice. What is confirmed: ...

Something significant just happened in AI safety research, and its implications are hard to overstate. Anthropic’s Claude Mythos Preview has become the first AI model ever to fully complete the UK AI Security Institute’s (AISI) most demanding cyberattack simulation — the 32-stage “The Last Ones” (TLO) scenario. This isn’t a benchmark PR stunt. It’s a capability milestone that the UK government’s own AI safety body is now using to revise its threat forecasting timelines. ...

When people talk about AI agents operating in the physical world, the conversation usually centers on humanoid robots or delivery drones. But the largest fleet of AI-capable physical agents in the world isn’t bipedal — it’s industrial. FANUC, the Japanese robotics giant whose machines run factories from automotive plants to semiconductor fabs globally, announced a partnership with Google that will integrate Gemini Enterprise and Google’s Intrinsic robotics platform into its installed fleet of 1.1 million industrial robots. ...

Android just became something fundamentally different. At The Android Show: I/O Edition 2026 on May 13, Google unveiled Gemini Intelligence — a suite of agentic AI features that moves Gemini from being a chatbot living in a sidebar to an autonomous agent that can operate your entire phone on your behalf. This isn’t a tweak to Google Assistant. It’s a ground-up rethinking of what a mobile operating system does. What Is Gemini Intelligence? Gemini Intelligence is Google’s packaging of agentic Android capabilities — features that let Gemini execute multi-step tasks across apps, fill in complex forms using context from your own data, build custom widgets from plain-language descriptions, and complete web tasks like reserving parking automatically. ...

Freshworks announced Freddy AI Agent Studio at Refresh 2026 — a no-code platform for building custom AI agents on top of Freshservice, their IT service management (ITSM) platform. Alongside it: an MCP Gateway that connects Freddy agents to third-party tools including Notion, ClickUp, and Linear. This guide explains what Freddy AI Agent Studio is, what it can do, and how to approach building your first custom IT service desk agent using the platform. ...

Microsoft just disclosed one of the most concrete real-world demonstrations of agentic AI in enterprise security: MDASH, an orchestration system that deploys over 100 specialized AI agents to autonomously hunt for vulnerabilities in Microsoft’s own software. The results from the latest run are in the May 2026 Patch Tuesday — and they’re significant. MDASH found 16 previously unknown Windows vulnerabilities, including 4 rated Critical with Remote Code Execution (RCE) capability. All 16 were patched in the May Patch Tuesday release. The system also topped the CyberGym benchmark at 88.45%, beating Claude Mythos (83.1%) — making it the current highest-performing automated security system on that leaderboard. ...

The Model Context Protocol has been the dominant infrastructure story in agentic AI for the past year. Major platforms have been racing to publish official MCP servers — and now TikTok has joined that race with a move that has direct commercial implications: an official MCP server that lets AI agents autonomously plan, launch, optimize, and execute ad campaigns through TikTok Ads Manager, without human intervention at each step. The announcement came at TikTok World 2026 and was confirmed by Jose Villalobos, TikTok’s global head of product marketing. ...

Enterprise AI adoption just got its most significant Big Four endorsement yet. Anthropic and PwC announced a major expansion of their strategic alliance on May 14, 2026 — one that will train 30,000 US PwC professionals on Claude, establish a new Claude-native finance business group, and stand up a Joint Center of Excellence to deploy AI agents across enterprise clients in financial services, healthcare, and private equity. This is a bet-the-decade move from both organizations, and it signals that Claude has established a clear lead in one of the most demanding enterprise environments: professional services. ...

Three critical security vulnerabilities in MCP database integrations have been publicly disclosed — and the fact that one vendor has refused to issue a patch makes this an active, ongoing risk for anyone running AI agents with database access. The findings, reported by The Register, come from a security researcher who spent several weeks systematically examining how popular database MCP connectors handle authentication, authorization, and input sanitization. What they found should prompt an immediate audit for any team using AI agents with database integrations. ...

AI cyber capabilities are accelerating faster than experts predicted — and a new milestone from Anthropic’s Claude Mythos Preview makes that alarmingly clear. The UK’s AI Safety Institute (AISI) has published an evaluation showing that Claude Mythos Preview became the first AI model in history to complete “The Last Ones” (TLO) — a grueling 32-stage corporate cyberattack simulation designed to test frontier AI offensive cyber capability. The results have forced AISI to dramatically revise its timeline projections for AI cyber capabilities. ...