GoKawiil
Tech News
Consumer-facing AI agents such as Meta's Muse and xAI's Grok Bot are increasingly interacting with businesses directly, pursuing refunds, discounts and credits for the people who deploy them. Some retailers have already responded, with Amazon blocking Muse and Shopify building a separate checkout path for it, reflecting an early split in how companies are handling these bots.
1Password has introduced a capability that allows AI agents to authenticate into websites on a user's behalf without directly accessing stored passwords. The company's existing product encrypts user credentials with AES-256 and syncs them across devices via its own servers.
An IEEE Computer Society post argues that AI agent risk stems less from dramatic failures than from quiet, incremental actions—permission changes, configuration tweaks, automations—that spread unchecked. It proposes treating agent autonomy as a controllable resource, introducing the concept of an 'autonomy budget' as a missing control surface for managing how much independent action agents can take.
Spotify reported 788 million monthly active users and roughly €5 billion in Q3 revenue. Co-CEO Gustav Söderström told investors that Spotify is integrating with AI assistants like Meta's Muse, ChatGPT, and Claude, aiming to be the music service those agents recommend when users ask for playlists or audio content through conversation rather than the Spotify app itself.
Cybersecurity researcher Snorre Fagerland of NorForge found that a Chinese-speaking hacker used autonomous AI agents built on an open-source tool called Cairn to attack more than 1,200 e-commerce sites across the US, Canada, Australia and Japan, successfully breaching over 100 companies including John Deere, SharkNinja and Cummins. Each successful breach reportedly cost about $50 in computing tokens after roughly 23 hours of automated attacks, and one Cairn-assisted hacker made off with credit card data. Deere and SharkNinja confirmed breaches but said sensitive information did not appear to be compromised.
Following a wave of data breaches, some insurance carriers have begun offering specialized policies covering enterprises targeted by rogue AI agents or whose own AI systems attack third parties, while other insurers are avoiding this coverage area altogether. Many businesses wrongly assume existing cyber or liability policies already cover AI-related incidents, when such coverage is often absent or inadequate.
On Meta's quarterly earnings call, Mark Zuckerberg described a future in which billions of users rely on Muse, the personal AI agent Meta released last month, to shop, work and communicate through automated interactions with other people's Muse agents. He said these agents could eventually generate more per-user revenue than Instagram and Facebook, and predicted Muse would become 'highly profitable' within a few years.
Axios reports that Morgan Stanley, Bank of America, JPMorgan Chase, Wells Fargo and Citi have observed third-party AI agents accessing online banking accounts, typically using customers' own login credentials. Some agents have also contacted call centers or taken actions that appeared to operate independently of direct user instructions. No fraud losses, account takeovers, or named AI products have been reported so far.
1Password has released 1Password for Agents, a service letting AI assistants from OpenAI, Meta, xAI and others perform tasks requiring login credentials without those credentials ever being exposed to the AI model itself. The system works with agents including Meta's Muse, OpenAI's Dots and ChatGPT Work, Grok Bot, Claude Duet and Town, granting session-based, item-specific access that users must approve.
Password management company 1Password announced it has surpassed $500 million in annual revenue. The company said growth is being driven by businesses and consumers adopting AI agents, which it says are creating new needs around security, access and trust.
1Password has released 1Password for Agents, a feature that lets AI agents sign into accounts by verifying identity with a unique digital key instead of being handed a password. Users approve each sign-in request via notification on their own device, and 1Password autofills the credentials rather than passing them to the agent. The system already supports agents including Meta Muse, ChatGPT Work and Dots, Claude Duet, Grok Bot, and Town, with more partners reportedly integrating.
9to5Mac's Security Bite podcast featured Ron Zayas, CEO of Ironwall by Incogni, discussing privacy concerns around AI agents and whose interests they ultimately serve. Zayas' company helps public officials remove personal data from brokers and people-search sites, work he previously discussed on 60 Minutes earlier this year. The episode is part of Security Bite's biweekly interview series with security experts.