News reporting focused on AI and machine learning, covering the companies behind these technologies, their real-world applications, and the ethical concerns they raise. This includes areas like generative AI (large language models, text-to-image and video), speech tech, and predictive analytics.
A new VentureBeat Pulse survey of 107 enterprises reveals that 54% have experienced an AI agent security incident or near-miss. Only 32% give each agent its own scoped identity, and just 30% isolate high-risk agents in sandboxes. Most rely on provider-native security tools, but satisfaction remains high despite plans to switch.
DoorDash has introduced a limited beta of DoorDash CLI, a command-line tool that lets developers order food directly from their AI agents. The tool, called dd-cli, allows users to search stores, find deals, and check out. It is currently open to U.S. and Canadian macOS developers via a waitlist.
NVIDIA released open data as part of its Nemotron initiative to help developers build more capable AI agents. The company argues that synthetic data, released openly, can improve agent behavior, reproducibility, and trust without exposing proprietary business secrets.
Noma Labs discovered a critical prompt injection vulnerability in GitHub's new Agentic Workflows, dubbed GitLost. An unauthenticated attacker could leak private repository data by posting a crafted GitHub Issue in a public repository belonging to the same organization. The vulnerability exploits the AI agent's failure to distinguish trusted instructions from untrusted user content.
Cloud security firm Sysdig reports the first known ransomware operation fully automated by an AI agent, named JADEPUFFER. The agent exploited a year-old Langflow vulnerability, stole credentials, encrypted a MySQL database, and demanded Bitcoin. No human appeared to control the attack, which corrected its own errors in 31 seconds. The incident highlights how unpatched flaws and weak credential management become dangerous when exploited by AI.
FablePool is a new platform where strangers pool money behind a single instruction, and an AI agent builds the project in public, milestone by milestone. Funding targets are set by an AI planner, with contributions starting at $0.25. The site currently lists open projects including an open-source PID tuning library and a single-page website for Claude Shannon.
Amazon and other organizations are seeing massive productivity gains by treating AI as a foundational part of software development, not just a coding shortcut. A six-person team shipped a project in 76 days that was estimated for 30 developers over 12 to 18 months. The key is restructuring workflows around AI agents, not just adding tools.
OpenAI is preparing to launch a revamped version of ChatGPT that will function as a super app, integrating coding tools and AI agents. The move aims to boost competitiveness against Anthropic, improve profitability ahead of an IPO, and convert free users into paying customers. The company has reportedly abandoned standalone side projects like video generator Sora.
A senior OpenAI employee told the Financial Times that "chat is dead" as the company shifts from chatbots to autonomous agents. ChatGPT will undergo its biggest overhaul since launch, becoming a superapp that bundles coding tools, AI agents, and integrations with partners like Canva and Booking. Chief product officer Thibault Sottiaux outlined a vision for a personal agent that helps users across work and life. The redesign will roll out in the coming weeks.
Microsoft and OpenAI have effectively ended their exclusive partnership, with Microsoft announcing its own reasoning model, AI agents, and cybersecurity tools at Build 2026. AI chief Mustafa Suleyman said the company must prove it can build frontier models from scratch, separate from OpenAI's influence.
Microsoft unveiled Project Solara at Build 2026, a new operating system built on Android specifically for devices that run AI agents. The company demonstrated two concept devices: a desk assistant and a wearable badge. Microsoft will not produce these devices itself but plans to offer them as reference designs for hardware makers like AccuWeather, Best Buy, CVS Healthcare, and Target, which are planning pilots.
A vulnerability in the Starlette open source framework, which gets 325 million weekly downloads, puts millions of AI agents at risk. Tracked as CVE-2026-48710 and named BadHost, the flaw lets attackers bypass path-based authorization via a single character in the HTTP Host header. Affected packages include FastAPI, vLLM, and LiteLLM, and exploitation can expose sensitive data like clinical trial databases, email credentials, and cloud infrastructure details.