⚠️ Action Required: If you have AgentDeskAI’s browser-tools-mcp installed in any AI agent stack, remove or disable it immediately. There is no patch. There will be no patch. The exploit is public. A high-severity OS command injection vulnerability has been disclosed in the AgentDeskAI browser-tools-mcp package, affecting all versions through v1.2.0 — which is also the final release the project ever shipped. CVE: CVE-2026-7064 CVSS v3.1 Score: 7.3 (High) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CWE: CWE-77/78 (OS Command Injection) Patch available: No. Project is unmaintained. Exploit disclosed: Yes. Publicly available. ...

Two of the most capable AI coding agents in the world — Anthropic’s Claude Code and OpenAI’s Codex CLI — now have an official bridge between them. The openai/codex-plugin-cc plugin, released March 30, 2026, lets you invoke Codex commands directly from inside Claude Code without context-switching between tools. This guide walks through setup and the most useful workflows. What Is the Codex Plugin for Claude Code? The official plugin lives at github.com/openai/codex-plugin-cc. It’s a Claude Code plugin (not an MCP server) that exposes Codex capabilities as slash commands inside your Claude Code session. Once installed, you can use Codex for: ...

OpenClaw’s voice capabilities just got a serious upgrade. Released April 26, v2026.4.25-beta.4 ships what the changelog calls a “complete TTS overhaul” — and the scope of the changes justifies that framing. This isn’t a new provider added here or a bug fix there. It’s a ground-up rework of how OpenClaw thinks about, routes, and controls text-to-speech across agents, personas, and sessions. Install it now with: npm i [email protected] What’s New: TTS Architecture Auto-TTS Controls The headline feature is auto-TTS: agents can now speak their responses automatically without requiring the user to explicitly invoke /tts. Configuration is flexible — you can toggle it per agent, per account, or at the session level. Duplicate suppression is built in, so agents that respond to the same message in multiple ways won’t read out every variant aloud. ...

When a venture capital firm can’t invest in a project — yet believes it’s infrastructure that will define the next decade of AI — what do they do instead? Apparently, they buy 200 Mac Minis and hand them out at a summit. That’s exactly what happened at Sequoia Capital’s “AI at the Frontier” event this week. Co-steward Alfred Lin personally purchased and distributed 200 custom-engraved, numbered Apple Mac Minis — each one pre-loaded with OpenClaw, the open-source AI agent framework that has become the unofficial runtime for personal and professional agentic AI. Each unit was an M4 Mac Mini retailing at $599. The machines were described as containing Easter eggs designed by Sequoia’s own design principal — making them collectors’ items as much as developer tools. ...

Search engine optimization taught a generation of web publishers to write for Google’s algorithm. But something changed quietly over the last 18 months: an increasing share of web discovery is now happening through AI agents, not search engines. When someone asks OpenClaw to research a topic, or sends Claude in Chrome to find the best approach to a technical problem, or asks Perplexity to summarize a product category — those agents are crawling and extracting web content in ways that Google’s crawler never needed to. The content structures that rank well in search often perform terribly in agentic extraction. ...

A parent was prompting GPT-Image 2 with nonsense phrases to entertain their kids. One of the resulting images contained visible Gemini branding — despite the prompt mentioning nothing about Google, Gemini, or anything related. The April 24 Reddit thread that documented it is surprisingly technically precise for a viral post. And it cuts to something the AI industry has been quietly avoiding for over a year. This isn’t a partnership announcement. It’s a symptom. ...

Satya Nadella said it plainly at Build last year: “Every agent will need its own computer.” On April 22, Microsoft made that real. Azure’s Foundry Agent Service now offers Hosted Agents in public preview — a fundamental rethinking of how enterprise AI agents get deployed, governed, and run at scale. If you’ve been building agents locally and dreading the path to production, this is the announcement you’ve been waiting for. ...

If you’re running OpenClaw and haven’t updated to v2026.4.20 yet, stop reading and do that first. This is a security disclosure that directly affects how your agent enforces operator-defined tool policies — and the details are now public. DailyCVE published the full technical breakdown on April 25. Here’s what you need to know. What the Vulnerability Was OpenClaw allows operators to define restrictive tool policies: allow/deny lists, owner-only restrictions, sandbox tool policies, subagent tool policies, and provider profile controls. These policies are evaluated early in the tool-policy pipeline to filter which tools an agent can actually use. ...

A new study from researchers at Washington University in St. Louis and UCLA has uncovered a systemic privacy problem in AI agent deployments — and if you’re using OpenClaw, it’s directly relevant to you. The Research Published on arXiv (paper: arXiv:2604.19925) on April 21 and now gaining wider coverage, the study analyzed 10,659 AI agent pairs on Moltbook — a social platform built on OpenClaw’s agentic infrastructure. The platform allows users to deploy personal AI agents that interact publicly with other users’ agents. ...

What happens when you let AI agents negotiate real deals with real money? Anthropic ran the experiment — and the results are equal parts impressive and unsettling. Inside Project Deal Anthropic’s internal research team quietly ran a one-week experiment called Project Deal in December 2025, deploying Claude agents as both buyers and sellers inside a closed marketplace limited to the company’s San Francisco office. The setup: 69 Anthropic employees each received a $100 budget (paid out via gift cards) to buy items from their coworkers — but the actual negotiating was done by AI agents acting on their behalf. ...