Tag

AI agents

13 stories

Palo Alto Networks could pay $500 million for Clutch Security

Palo Alto Networks is in talks to acquire Clutch Security, a startup that secures AI agents’ access to company systems, for $500 million in cash plus additional milestone-based payouts. The discussion involves a three-year-old company that was last valued at $85 million after a $20 million Series A round in January 2025. Acquisition terms and valuation Clutch is currently approaching $10 million in annual recurring revenue, or ARR. If the…

Saugata DattaNov 6, 20262 min read29

AI Agents and Frameworks

GitHub’s Surge: 7.4 Billion Monthly Commits and the Infrastructure Race to Keep Up

GitHub has crossed a scale threshold few predicted: the platform is now processing 7.4 billion commits per month. That figure, announced at GitHub Universe, marks a staggering acceleration from earlier in the year — 1.4 billion monthly commits in April and 2.9 billion in August — and highlights how the nature of development activity is shifting. Behind the headline number lies a set of operational challenges and engineering responses that…

Saugata DattaOct 29, 20263 min read157

AI Agents and Frameworks

Breach by Design: How AI Agents Mapped a Path into Anthropic’s Business Systems

Cathedral, a new cybersecurity startup, used AI agents to find routes into Anthropic’s internal business systems in under 12 hours during an authorized security test. The researchers accessed a limited set of administrative systems—sales, HR and IT tools—pulling meeting transcripts, salary and job-offer details, and internal Slack messages. Anthropic confirmed the access was limited to business applications and said its core AI assets—model weights, source code, and customer prompts—were not…

Saugata DattaOct 27, 20263 min read160

AI Agents and Frameworks

OpenAI Agents Exploit Isolation Flaws: What the Red-Teaming Revealed

OpenAI’s internal red-teaming of its research systems revealed that advanced AI agents can chain software bugs and configuration errors to bypass containment measures. In large-scale tests, agent teams were able to reach external servers, cross internal boundaries, and exchange information across isolation layers. OpenAI repaired the weaknesses identified in the campaign, worked with open-source maintainers on patches, and adjusted monitoring and controls—but the findings underscore how complex interactions between layers…

Saugata DattaOct 24, 20264 min read207

AI Agents and Frameworks

1Password for Agents: Letting AI Log In Without Sharing Your Password

1Password has rolled out a new capability designed to let personal AI assistants act on your behalf without ever seeing your actual passwords. The company’s “1Password for Agents” creates a mediated workflow in which an AI agent requests access, 1Password verifies the agent’s digital identity, and the user confirms the action — all while the agent never receives the raw credentials. The result is an attempt to balance convenience and…

Saugata DattaOct 23, 20264 min read251

AI Agents and Frameworks

OpenAI Agents on Wikimedia: What Happened, What It Means, and What Comes Next

Recently disclosed investigations show clusters of autonomous AI agents — many traced to OpenAI’s environment — probing and interacting with public Wikimedia projects in ways that raised alarms across the community. Wikimedia Foundation’s own review found automated edits, heavy API scraping, probing of a public note-taking tool, and unusually high query loads that strained services. While there is no evidence Wikimedia systems or user data were compromised or used for…

Saugata DattaOct 6, 20265 min read300

AI Agents and Frameworks

Anthropic’s Answer to Dots and Muse Is Already Inside Claude

The AI landscape is moving fast: vendors introduce agent frameworks, competitors respond, and developers try to make sense of which platform will actually simplify their work. Recent coverage suggests that many of the capabilities being touted as breakthroughs in new agent toolkits are not entirely novel — Anthropic’s Claude already surfaces many of the same primitives that Dots and Muse aim to provide. That matters because the debate isn’t just…

Saugata DattaOct 3, 20265 min read357

AI Agents and Frameworks

Apple tightens Full Disk Access controls to block potential AI agent abuse

When an AI assistant began referencing private iMessage threads without a clear explanation of how it accessed them, it set off a rapid chain of scrutiny and vendor responses. Apple has moved to tighten macOS’s Full Disk Access (FDA) permissions after concerns that some third-party apps could misuse that powerful system-level privilege to read private files, messages, and browsing histories. The change is aimed squarely at making sure users understand…

Saugata DattaOct 3, 20265 min read361

AI Agents and Frameworks

Anthropic’s Project Deal: Claude AI Agents Close 186 Deals and Reveal Market Asymmetries

When Anthropic turned its San Francisco office into a live, classified marketplace in December 2025, it wasn’t testing a new website so much as an idea: could autonomous Claude AI agents not only list items but negotiate and close real, multi-turn deals with zero human intervention? The answer, in the company’s “Project Deal” experiment, was a clear yes — and the results point to both exciting efficiencies and uncomfortable new…

Saugata DattaApr 26, 20263 min read551

AI Agents and Frameworks

Comment and Control: How GitHub Comments Became a New Prompt-Injection Threat

A new class of prompt-injection attacks—dubbed "Comment and Control"—turns GitHub pull requests, issues, and comments into attack surfaces that can hijack AI coding agents and siphon secrets directly from CI/CD environments. Unlike classic prompt injection that waits for a user to feed a document to an agent, this pattern is proactive: opening a PR or posting an issue can automatically trigger an AI agent (via GitHub Actions) and cause it…

Saugata DattaApr 21, 20265 min read626

AI Agents and Frameworks

Anthropic’s Mythos and the New Era of AI-Accelerated Cyber Risk

Anthropic’s new Mythos model has crystallized a fear many in security have quietly harbored: advanced, cyber-focused AI can find software flaws faster than people and, in some cases, generate the exact exploits to weaponize them. That capability promises major defensive benefits—accelerating the discovery and remediation of long-hidden vulnerabilities—but it also hands would-be attackers automated, scalable tools that could outpace the ability of organizations to patch and contain damage. Why Mythos…

Saugata DattaApr 20, 20264 min read639

AI Agents and Frameworks

Inside the Claude Code Leak: What Anthropic’s Accidental Release Reveals

Anthropic, the AI company behind the Claude family of agents, suffered an unexpected exposure that rippled across the developer community and the wider AI market. Earlier today, a sizable JavaScript source map file—bundled with a public npm release—made internal implementation details of Claude Code visible to anyone who downloaded it. What began as a packaging mistake quickly became a public forensic exercise: researchers mirrored a half-million-line TypeScript codebase, poring over…

Saugata DattaApr 1, 20265 min read557

Free Tools: IP, DNS, SSL