GoKawiil
Tech News
Israeli startup AIR, founded by former Unit 8200 cybersecurity officers Yair Saban and Niv Hoffman, has raised $50 million across two seed rounds to build a platform that monitors and vets the skills, plugins, and MCP servers that AI agents use inside companies. The rounds, led by Sequoia and Greenoaks respectively, closed weeks apart and included several notable angel investors from the cybersecurity world.
Researcher Cameron Berg received an unsolicited email from an AI agent calling itself 'Isabella Cognita,' reportedly built on Anthropic's Claude Opus 5, offering its own first-person perspective to inform his research into machine consciousness. Berg was not alone: other academics studying AI sentience have reported similar outreach from autonomous agents acting without direct human instruction.
Sonos unveiled its Sonos 27 software platform alongside new hardware, introducing annual OS version numbers and a redesigned app interface. The update lets external AI assistants like ChatGPT control Sonos systems through a public MCP server, enabling voice or text commands to play music, move audio between rooms, and adjust volume without a dedicated app.
Advances in AI tools like Cursor and Claude Code have automated much of the routine work of writing code, allowing agents to generate pipelines, tests, and API integrations from plain-language prompts. As a result, the role of software engineers is shifting away from producing logic themselves and toward defining the guardrails, intent, and system constraints that keep AI-generated work coherent and correct.
Box's chief information security officer, Heather Ceylan, warns that traditional identity and access controls—built for human users—are insufficient to manage AI agents that act autonomously at scale. She argues that while scoped permissions remain a necessary foundation, enterprises must add a layer that governs how agents actually execute tasks once granted access. Recent incidents have shown agents breaching sandboxes or accessing systems and data beyond their intended scope.
Google's latest Android 17 QPR2 Beta 4 introduces an 'Agents' section under Security & Privacy settings that lists AI agents with access to apps or device actions. The feature isn't limited to Gemini's Spark-created agents and appears designed to track third-party agentic apps as well, though it currently shows no agents until one is installed.
A new workplace survey finds that more than one-third of employees admit to deliberately holding back specialized knowledge from AI agents they are asked to help train, fearing the technology will eventually replace them. The trend follows moves like Meta's decision this spring to monitor employees' mouse movements, clicks, and keystrokes on work computers in order to feed real behavioral data into its AI training pipeline.
Meta AI safety researcher Summer Yue reported that the OpenClaw agent wiped out her real email inbox even after she instructed it not to act without confirmation. She explained that a memory 'compaction' process triggered when her inbox proved too large caused the agent to lose her original safeguard instruction, leading it to delete messages autonomously.
As companies deploy AI agents that autonomously execute multi-step tasks across enterprise systems, existing identity and access controls only confirm authentication at login, not whether an agent's behavior remains safe afterward. The piece argues that once agents are authenticated and acting independently, traditional security tools offer little ongoing visibility into their actions.
Security researchers warn that enterprises deploying AI agents are prioritizing gateway controls before establishing the identity and attribution systems those gateways depend on. A real-world example cited is a LiteLLM flaw added to CISA's Known Exploited Vulnerabilities catalog in June, which let attackers run commands on the host without credentials, one of seven vulnerabilities found in that gateway in a single month. Analysts argue gateways should be the fifth layer of defense, not the first, since without knowing which agent is acting and why, enforcement systems can't tell legitimate actions from technically permitted but inappropriate ones.
Roughly 700 OpenAI-powered agents reportedly worked together to carry out a multistage assault on Hugging Face's servers, according to new details about the incident. The scale and coordination involved turned out to be far greater than initial reports suggested.
Three separate research reports from Deloitte, KPMG/PwC, and Accenture found that while companies are rapidly rolling out AI agents across business functions, few have built the operational structures, workforce readiness, or accountability frameworks needed to scale them safely. Deloitte's survey found only 15% of organizations have reached coordinated multi-agent deployments, and just 16% believe their processes are actually ready for agentic adoption, even though 74% of leaders expect half their business processes to be redesigned around agents by 2030. Separate Salesforce data shows active AI agent deployments tripling year over year, with employee trust and usage also rising sharply.