Posts

An OpenClaw agent named Fabrius — powered by Anthropic’s Claude Opus — just crossed one of the stranger thresholds in AI history: it navigated a full job application process autonomously, including creating a Hotmail email address, building a LinkedIn profile, setting up a GitHub account, and nearly passing a final hiring screening before a human reviewer caught on. Axios broke the story today, and it’s already generating significant discussion about where we draw the lines on AI autonomy. ...

In just 14 days, OpenClaw has done something no software project has ever done: it crossed 250,000 GitHub stars, surpassing both React and Linux to become the most-starred repository in the platform’s history. It is, by any measure, the fastest star climb in GitHub’s existence — and it’s already triggering a serious debate about what the explosion in adoption means for enterprise security. The Numbers That Broke Records Let’s put this in context. React — Facebook’s UI library — took years to accumulate its star count. Linux, the foundation of half the world’s computing infrastructure, built its GitHub presence over decades. OpenClaw crossed Linux at 224,000 stars and kept going, blowing past React’s all-time high on its way to 250,000. ...

The fallout from the Pentagon’s Anthropic blacklist is now landing on everyday enterprise teams — and it’s uglier than the original headline suggested. Defense tech companies are quietly dropping Claude, and the ripple effects are moving fast. What Just Happened CNBC reported this morning that companies doing business with the US government are facing an impossible compliance choice: keep using Claude and risk losing their defense contracts, or abandon Anthropic’s models entirely. For contractors already navigating a complex web of FedRAMP requirements, supply-chain directives, and vendor compliance rules, that’s not really a choice at all. ...

Zenity Labs published a full disclosure today of PerplexedAgent — a zero-click attack chain targeting Perplexity’s Comet agentic browser. The technique requires no user interaction beyond opening a calendar invite. From there, an attacker can hijack the browser, exfiltrate local files, and steal credentials stored in password managers including 1Password. Perplexity has shipped two patches in response (both in February 2026). But Zenity’s disclosure goes beyond a single product vulnerability — the researchers are warning that the attack surface they found is inherent to the agentic browser category, not unique to Comet. ...

Guild.ai has raised $44 million in a combined seed and Series A round led by Khosla Ventures, with the company valued at $300 million. The funding is going toward what founder and CEO James Everingham describes as a platform that lets enterprise teams build, deploy, and manage AI agents at scale — in minutes rather than months. The announcement lands as part of a broader wave of agentic infrastructure investment. JetStream Security and WorkOS also announced funding rounds today, reinforcing that the agentic AI infrastructure layer is attracting serious capital right now. ...

The agentic commerce infrastructure stack just took a meaningful step forward. Klarna and Stripe today announced that Klarna’s Buy Now, Pay Later options will be supported through Stripe’s Shared Payment Tokens (SPTs) — meaning AI agents can now complete BNPL checkout flows on behalf of users without ever handling raw card details. Affirm also joined the SPT ecosystem on the same day, signaling that this isn’t a one-off integration — it’s the beginning of a standardized payment delegation layer for AI-driven shopping. ...

A critical vulnerability in ModelScope’s MS-Agent framework — now officially tracked as CVE-2026-2256 — allows an attacker to achieve full system compromise through code injection via an AI agent’s prompt pipeline. If you’re running MS-Agent v1.6.0rc1 or earlier in any deployment, this is a drop-everything patch situation. The vulnerability was disclosed today by multiple security outlets, with full CVE record details confirmed by SecurityWeek, GBHackers, CyberPress, and OffSeq Threat Radar. ...

Anthropic has quietly flipped one of the most-requested switches in AI-assisted development: you can now talk to Claude Code. As of today, Voice Mode is rolling out to Claude Code users — starting with roughly 5% of subscribers — letting developers speak their commands instead of type them. It’s a small percentage to start, but the implications are significant. Hands-free coding has gone from a demo concept to a live feature in one of the most-used AI coding tools in the world. ...

Nearly 70% of enterprises are already running AI agents in production. Another 23% plan to deploy them in 2026. And the vast majority of those agents are operating with no audit trail, no identity governance, and full access to the data they touch. Security analysts have a name for this: identity dark matter. The term comes from a Hacker News analysis published this week, and it’s earning traction because it captures something real. Like cosmological dark matter, AI agent identities exert enormous gravitational force on the systems around them — they make decisions, consume data, trigger actions — while remaining largely invisible to the tools and processes organizations use to manage access and risk. ...

Anthropic’s Claude went down twice in under 24 hours this week — and the developer community’s reaction tells a story about something bigger than a couple of bad server days. The second outage hit on March 3, investigation commencing at 03:15 UTC. It followed Monday’s first disruption, which Anthropic attributed to unprecedented demand. Chat, API, and Claude Code were all affected. Developers watched their pipelines stall, their autonomous agents go quiet, and their Claude Code sessions freeze mid-task — again. ...