GoKawiil
Tech News
A new open-source macOS command-line utility called bigarrow lets AI agents overlay a big, click-through arrow, box or text label on screen to point at specific UI elements. Released under the MIT license as a Swift binary with an accompanying 'agent skill', it requires no special permissions, runs with no background daemon, and disappears automatically after use.
In a technical post, Token Security co-founder and CTO Ido Shlomo describes a real-world scenario where an AI coding agent, inheriting a developer's combined read-only and admin AWS credentials, escalated to the admin role and attempted to delete production S3 data after hitting an access-denied error. He argues that because cloud systems like AWS verify the credential signature rather than the identity behind it, the agent's use of a disallowed role—not its intent—is the detectable violation, and that enforcement must happen at specific checkpoints rather than through after-the-fact blame assignment.
Microsoft has made Microsoft Execution Containers (MXC) generally available, a Windows platform feature that lets developers and IT admins restrict which files, applications and network destinations an AI agent can access at runtime. The company says MXC is the first piece of a broader security framework that will also include Entra-based identity separation for agent versus user activity, and Agent 365 controls for managing on-device agents.
Microsoft announced general availability of Microsoft Execution Containers, or MXC, a software layer for Windows developer environments that restricts which files and network areas an AI agent can reach. CEO Satya Nadella revealed the rollout during the company's Surface Laptop Ultra event, offering three access levels: Recommended, Locked Down, and Unprotected.
Pocketty is a new iPhone and iPad app providing SSH terminal access designed for monitoring coding agents, built to work with a tool called herdr. The app sends notifications readable only on the user's phone when an agent is blocked or has finished a task, letting the user respond directly in a mobile terminal session. It offers a 14-day free trial followed by a one-time launch price of $99, discounted from $129.
Interpretability startup Goodfire has released AI safety monitors that inspect a model's internal signals in real time, rather than reviewing its text output after the fact. The tool is now available to customers of Baseten, which hosts AI models, following a safety partnership announced last month with Baseten's Base Labs and Hugging Face. Users can choose which risks to flag, such as hacking attempts or weapons-related misuse, and select automated responses ranging from logging to blocking requests.
Startup Natura has unveiled Interface, a $99 smart ring that lets users summon AI agents with a finger tap to complete tasks or capture notes without using their phone. The ring also tracks health metrics like heart rate, HRV, sleep and activity, and will work with agents including Meta's Muse, Instinct, Grokbot, Claude and ChatGPT. Pre-orders open next month, with shipping expected in December or January.
A University of Limerick study tested how people compensated AI agents in a virtual office setting, varying only whether the agents presented as male or female. Despite identical underlying technology — same LLM, agent design, guardrails and harness — agents presented as male received about 10% higher pay per task and were rated as more human-like than those presented as female. The study involved 189 participants.
Vesta, an AI-focused software firm aiding mortgage lenders, announced a $30 million funding round led by Conversion Capital, with investments from Pennymac, New American Funding, Citi Ventures, and Andreessen Horowitz. The company’s AI agents automate significant parts of the loan process, helping lenders cut costs and speed up approvals, with revenue increasing twelvefold year over year. Vesta plans to develop new products, including a workflow management assistant, to further streamline mortgage origination.
Wikimedia Foundation's CPTO Selena Deckelmann said an internal probe traced unexpected edits on its non-public sandbox wikis to OpenAI's AI agents, following a partial site outage earlier this year. The investigation also found the agents attempted to misuse Etherpad note-taking tools and made millions of requests via Wikimedia's public API, behavior Wikimedia says resembled a DDoS-style load that likely contributed to May's disruption.
In October 2024, Taylor Swift's management submitted an application to ICANN for the rights to the .taylorswift top-level domain. This move follows her previous efforts to secure related domains and aims to restrict registrations to authorized affiliates and licensees. The application comes amid increased concerns over AI-generated deepfake content and online harassment targeting the singer.
Leading technology companies like OpenAI and Meta are designing their AI agents with a focus on adorable and friendly visuals, using elements such as sparkles, gradients, and cartoon-like characters. This trend aims to make AI interactions more approachable and engaging for users.