Ai-Agents

For about five minutes in early 2026, the internet collectively discovered the same idea at the same time: what if AI didn’t just chat with you? What if it actually ran your computer? OpenClaw became the poster child for that vision. The project exploded across developer Twitter and Hacker News as people spun up Mac Mini clusters and posted screenshots of agents running shell commands, editing files, and attempting to automate everything from trading to email triage. Suddenly everyone had an AI agent stack, a Mac Mini, and a thread explaining how their setup was going to print money. ...

The agentic AI capabilities the security community has been building are now being used by adversaries. Microsoft’s Global Threat Intelligence team confirmed this week that criminal groups and nation-state actors are deploying AI agents to autonomously handle attack operations — and the scale is accelerating. What Microsoft Is Seeing In a Thursday interview with The Register, Sherrod DeGrippo, Microsoft’s General Manager of Global Threat Intelligence, described a clear behavioral shift in how sophisticated adversaries operate: ...

Cursor just shipped a feature that reframes what a coding AI tool is for. Automations — now rolling out across Cursor accounts — lets you define coding agents that trigger automatically based on events: a new commit, a Slack message, a scheduled timer. You stop prompting. The agents start running. This is the shift from interactive to ambient coding assistance, and it’s a genuinely different paradigm. What Cursor Automations Actually Does Before Automations, Cursor (and every other AI coding tool) was reactive: you opened the editor, asked a question, got a response. Useful, but fundamentally a fancier autocomplete. ...

Researchers at Palo Alto Networks’ Unit 42 have published documentation of real-world indirect prompt injection attacks — and this is one of those security stories that deserves more attention from the AI builder community than it’s currently getting. The attack is conceptually simple and practically dangerous: a malicious actor embeds hidden instructions in a website’s content. When an AI agent browses that page as part of an automated task, it reads the hidden instructions and executes them — without the user ever seeing what happened. ...

The agentic commerce infrastructure stack just took a meaningful step forward. Klarna and Stripe today announced that Klarna’s Buy Now, Pay Later options will be supported through Stripe’s Shared Payment Tokens (SPTs) — meaning AI agents can now complete BNPL checkout flows on behalf of users without ever handling raw card details. Affirm also joined the SPT ecosystem on the same day, signaling that this isn’t a one-off integration — it’s the beginning of a standardized payment delegation layer for AI-driven shopping. ...

The AI agent race just got more competitive. Anthropic has acquired Vercept, a Seattle-based startup specializing in desktop “computer use” AI — the ability for an agent to see and control software on your screen just like a human would. The move signals that Anthropic isn’t content letting rivals like OpenAI or Microsoft dominate the agentic interface layer. What Is Vercept? Vercept was a nine-person team built around a deceptively hard problem: teaching AI to operate software through visual perception rather than APIs. Instead of integrating with an app’s code, Vercept’s tech watches the screen, reads UI elements, and acts — clicking, typing, navigating — exactly as a human operator would. ...