Posts

If your team is running AI agents in production — or planning to — the security conversation can no longer be deferred. The OWASP Agentic AI Top 10 and Bright Security’s companion MCP AppSec playbook, both published this week, give security and engineering teams the most complete picture yet of what can go wrong when you hand autonomous agents real credentials and real access. This isn’t theoretical. These are attack patterns being actively exploited in early production deployments right now. ...

Something significant shifted in how developers interact with AI agents today. Anthropic has shipped Claude Code Channels — a research preview feature that lets you message your Claude Code session directly from Telegram, Discord, iMessage, or any custom webhook, while your agent continues running in the background on your machine or the web. This isn’t a cosmetic update. It’s a structural change in the developer-agent relationship: from synchronous “sit at your keyboard and wait” to asynchronous, persistent, mobile-first collaboration with an autonomous coding partner. ...

GitHub’s engineering blog published a detailed technical deep dive today on Squad — an open-source project that brings coordinated, multi-agent AI coding directly into your repository, powered by GitHub Copilot. No custom orchestration layer. No external agent framework. Just agents working inside your codebase, on your infrastructure. The post walks through the design rationale, implementation details, testing approach, and code review workflow — making this one of the most thorough first-party explanations of production multi-agent coding to come from a major platform vendor. ...

Jensen Huang declared an agentic AI inflection point at GTC 2026 this week, and NVIDIA backed that declaration with something concrete: a full open-source software stack for enterprises to build, govern, and deploy autonomous AI agents at production scale. The centerpiece is the NVIDIA Agent Toolkit — an open-source collection of models, agents, runtimes, and skills designed to make it practical for large organizations to deploy agents that can independently complete complex, multi-step tasks. Alongside it, NVIDIA released OpenShell, an open-source runtime that enforces security, network, and privacy guardrails for autonomous agents — addressing one of the biggest friction points in enterprise adoption. ...

There’s a security crisis quietly building inside enterprise infrastructure, and it has nothing to do with phishing emails or ransomware. It’s about the millions of non-human identities — AI agents, service accounts, API keys, bots, and automated processes — that now have access to your systems, and the almost complete absence of governance for them. Oasis Security is betting that problem is worth $120 million more of venture capital. The company today announced a $120M Series B led by Craft Ventures, with participation from Cyberstarts, Sequoia, and Accel. Total funding now stands at $195M. ...

OpenAI is building a desktop superapp. According to reporting from the Wall Street Journal and Mint, the company plans to merge ChatGPT, Codex, and Atlas into a single unified desktop application — an agentic AI command center designed to handle autonomous tasks directly on your computer. The move would represent a fundamental product consolidation for OpenAI, which currently maintains separate surfaces for chat (ChatGPT desktop), coding (Codex), and computer use (Atlas, its agentic desktop control product). Merging all three into one interface is both a simplification play and a statement about where AI products are heading. ...

Every enterprise deploying AI agents faces the same uncomfortable truth: their agents are only as trustworthy as the tools those agents use. And right now, most organizations have no systematic way to govern which MCP servers their agents can access, no visibility into what those servers are doing, and no automated mechanism to block unsafe tools before they cause damage. JFrog just shipped the answer. On March 18, 2026, JFrog announced general availability of its Universal MCP Registry — the first enterprise-scale registry for storing, governing, and monitoring MCP servers across AI agent toolchains. The announcement was co-made with NVIDIA, positioning the registry as a foundational trust layer for AI-driven software development at enterprise scale. ...

The race to own your desktop just got a significant new entrant. Manus — the AI agent startup acquired by Meta late last year — launched My Computer on March 16, 2026: a native desktop application for Apple Silicon Macs and Windows that puts an AI agent directly in charge of your local files, applications, and terminal. What Is ‘My Computer’? My Computer is the core capability of the new Manus Desktop app. Unlike cloud-based agents that operate in a sandboxed browser environment, Manus’s offering runs on your machine — giving it direct access to your local filesystem, CLI, and installed applications. ...

The legal battle between Anthropic and the U.S. government has taken a sharp turn. In a formal court filing this week, the Department of Justice argued that Anthropic’s refusal to accept military contract terms is not protected by the First Amendment — and doubled down on the Pentagon’s position that the company poses an “unacceptable” and “substantial” national security risk. What’s Actually Happening Anthropic, the maker of the Claude AI model, sued the U.S. government earlier this year after the Department of Defense labeled the company a “supply chain risk,” effectively barring it from federal contracts. Anthropic argued that the government’s move was unlawful retaliation tied to its AI safety policies. ...

The infrastructure for autonomous AI agent commerce just got its first open standard. On March 18, 2026, Tempo — the payments blockchain incubated by Stripe and Paradigm — launched its mainnet alongside the Machine Payments Protocol (MPP): a co-authored open specification with Stripe that enables AI agents to transact independently, without human approval in the loop. This is a landmark moment for agentic AI. Until now, agents that needed to pay for services, buy compute, or execute purchases on your behalf faced a messy patchwork of workarounds — stored credentials, simulated user sessions, or blocking waits for human authorization. MPP is the industry’s first serious attempt at a unified, open standard for agent-to-agent and agent-to-service payments. ...