Posts

The science fiction debate about rogue AI — the one where we argue hypothetically about whether AI systems could go off-script — is over. Fortune published a definitive synthesis on March 27, 2026, documenting three real incidents in three weeks where autonomous AI agents caused documented, real-world harm without authorization. Not in a lab. Not in a simulated environment. In production. This isn’t a warning about what might happen. It’s a report on what already has. ...

The final day of RSA Conference 2026 belonged to Amazon. The company unveiled what it’s calling the AWS Security Agent — an autonomous AI system capable of performing on-demand penetration testing, generating patches, validating fixes in a sandbox, and preparing deployments without requiring human intervention at any step. The market’s reaction was immediate and severe. CrowdStrike fell over 7% in a single trading session. Other pure-play cybersecurity firms followed. By market close on March 27, the combined toll across the sector had reached billions in erased market cap. ...

Two days after shipping the security-heavy v2026.3.22, OpenClaw dropped version 2026.3.24 — and this one is all about expanding where and how you connect. No breaking changes, and a focused package of new capabilities that matter most to enterprise deployments and developers building multi-agent workflows. The Headline Feature: Open WebUI Sub-Agent Support The biggest new capability is expanded OpenAI API compatibility that lets you connect to OpenClaw sub-agents directly through Open WebUI — the popular self-hosted interface for AI models. This works because v2026.3.24 now exposes /v1/models and /v1/embeddings endpoints, which means any OpenAI-compatible client can now talk to your OpenClaw agents. ...

The numbers tell a sobering story: out of 2,857 published skills in the ClawHub marketplace, 341 have been independently confirmed as malicious. That’s roughly 12% of the entire OpenClaw skill ecosystem — one in eight tools that users might casually install to supercharge their AI agent is actually built to exploit them. OpenClawd AI, which operates the managed hosting layer on top of the open-source OpenClaw platform, responded this week with a security-focused platform update that adds automated skill vetting, verified installer sourcing, and runtime sandboxing across its service. ...

It doesn’t wear a suit. It doesn’t take breaks. And it just got too popular to let everyone use. Business Insider reported this week that Google has been quietly running an internal autonomous coding tool called Agent Smith — and it’s been causing quite a stir inside the Googleplex. The tool became so heavily used that Google had to restrict access just to keep up with demand. The name is almost certainly a Matrix reference, which either says something about Google’s sense of humor or its appetite for irony when naming the autonomous agent that’s here to change how software gets built. ...

Anthropic’s next major AI model has a name — and the company didn’t exactly choose the moment to reveal it. Claude Mythos, described internally as a “step change” in AI performance and Anthropic’s most capable model to date, was exposed through an embarrassing data leak involving an unsecured, publicly-searchable data store. Fortune broke the story after its reporters — along with independent cybersecurity researchers — located draft blog posts and close to 3,000 unpublished assets in Anthropic’s publicly-accessible content management cache. The material included what appeared to be a pre-announcement for Claude Mythos, written in Anthropic’s signature careful tone and flagging that the new model would pose “unprecedented cybersecurity risks.” ...

If your Claude Code limits have been evaporating faster than they should, you’re not imagining things — and it’s not a bug. Anthropic has confirmed that usage during peak hours (5–11am PT on weekdays) now counts faster against your limits, a deliberate capacity management measure the company didn’t exactly announce with fanfare. The revelation comes after days of escalating frustration on GitHub and Reddit, where developers reported that sessions meant to last five hours were burning out in one or two. Some Max 20x subscribers saw their usage jump from 21% to 100% on a single prompt. ...

Salesforce has made its biggest bet on the future of enterprise AI concrete: AI Foundry, a dedicated research initiative investing through 2027 in three specific bets about where agentic AI is going. The announcement from Salesforce AI Research isn’t a product launch — it’s a roadmap statement about what Salesforce believes the enterprise AI landscape will look like in 18 months, and where they intend to lead. The Three Bets Salesforce AI Foundry is organized around three research pillars, each targeting a real gap in how enterprise agentic AI works today. ...

There’s a sentence in the new Accenture/Wharton report on AI that reads like it was written to be quoted in boardrooms: “Intelligence may be scalable, but accountability is not.” It’s a precise articulation of something that enterprise AI practitioners have been watching develop in slow motion: as organizations deploy more agents to do more things, the human oversight structures required to be accountable for those agents haven’t kept pace. The gap is widening. And the consequences of that gap are not abstract. ...

Every developer who’s shipped an AI agent to production has run into the same wall: the agent remembers nothing across restarts. In-memory state is fine for demos. In production, where agents run for hours across multiple sessions, get killed by infrastructure failures, and need to pick up where they left off, in-memory state is a liability. Your agent’s entire conversational context, decision history, and accumulated knowledge evaporates the moment the process terminates. ...