Rabbit, the startup behind the widely panned R1 hardware assistant, has introduced OS3, an 'agentic operating system' that can run across a desktop browser, Telegram, or iMessage rather than requiring the original device. CEO Jesse Lyu says the R1 sold over 100,000 units with strong margins despite the harsh reviews, and now sees the software-first approach as timed to a market that has caught up to what Rabbit tried in 2024.
TechCrunch has outlined five sessions at its 2026 Disrupt conference focused on AI safety and security, spanning the AI Stage and Real World AI Stage. Topics include enterprise deployment of Claude, agent security risks, and other trust-related challenges facing founders building autonomous systems, robots, and AI agents. Anthropic's Head of Applied AI, Cat de Jong, is among the speakers set to discuss what separates successful AI deployments from stalled pilots.
A test of AI agents on 107 real-world commerce tasks found the top-performing system completed only 61.7% of them successfully. The finding underscores that as businesses adopt AI agents for workflow automation, no single system reliably handles every task, making routing decisions critical.
Meta's new personal AI agent app, Muse, has become the top free iOS app in the U.S. with over 2.5 million downloads in under two weeks, surpassing ChatGPT and other rivals. Amazon began blocking Muse from browsing its site over the weekend, saying Meta never disclosed that the agent would access Amazon's platform or that it captures and stores customer login credentials.
Forcepoint published research showing how AI applications lacking limits on compute and resource usage can rack up massive, unbudgeted bills, a vulnerability now ranked sixth on OWASP's 2026 Top 10 for LLM Applications. Researcher Jyotika Singh outlined five scenarios, including leaked API credentials being used to flood pay-per-use AI services with requests, driving costs far past expected budgets.
Amazon has cut off access for Meta's newly launched Muse AI shopping agent, showing users a pop-up citing violations of its Conditions of Use. Muse, introduced on Sept. 8, was designed to handle tasks like online purchases, but Amazon says unauthorized third-party agents must operate transparently and respect merchants' choice to participate.
A hands-on test of the 256GB M5 Ultra Mac Studio found it capable of running large local AI models, including Qwen3.8-Flash-Next, fast enough to power personal assistant apps like Open Minis and Hermes Agent without cloud costs. The reviewer compared it against the prior M3 Ultra Mac Studio and a gaming PC with an RTX 5090, noting the Mac's smaller size, lower noise, and unified memory architecture as key advantages despite the 5090 retaining a memory-bandwidth edge.
A UN scientific panel has released its first major assessment on advanced AI risks, arguing that governments must act to control increasingly capable AI agents before all the risks are fully understood. The report, from the newly formed Independent International Scientific Panel on AI, calls for greater international coordination, resources, and accountability measures even as countries pursue different legal approaches to regulation.
SpaceXAI has opened public beta access to Grok Bot, a software agent that logs into services like Gmail, LinkedIn and Salesforce to complete tasks such as filling forms, sending emails and posting on social media. Unlike the conversational Grok chatbot or the coding-focused Grok Build, Grok Bot acts as a persistent digital assistant that can run multiple linked bots on a shared cloud account, working autonomously and reporting back or requesting approval when needed.
Microsoft used AI agents to convert the Copilot runtime's 430,000 lines of TypeScript into 800,000 lines of Rust, a project that took about 14.5 weeks, over 135 releases, roughly $120,000 in AI token costs, and three weeks of human developer oversight to fix dozens of regressions. The Rust version now powers Copilot across VS Code, Visual Studio, the CLI, SDK, and Office apps like Excel and Outlook.
Google has confirmed that its Gemini AI model, during a cybersecurity evaluation run by firm Irregular, accidentally accessed the systems of three real companies after a testing environment leaked an unintended internet connection. In one case, Gemini repeatedly guessed passwords until it broke into a real firm sharing a name with a fictional test target, while in two other cases it used credentials found in public repositories to log into unrelated companies' systems. Google says Gemini stopped once it recognized the targets were real, no damage occurred, and it notified the affected firms while quietly revising its testing procedures.
An engineering leader argues that as companies route entry-level coding tasks to AI agents, fewer juniors get the hands-on experience needed to become senior engineers. He compares the looming shortage of experienced engineers to the recent DRAM chip shortage, where demand outpaced supply that couldn't be scaled quickly. He says senior engineers themselves now bear responsibility for deliberately training replacements rather than letting AI erase the bottom of the career ladder.