In an October 9 report, Anthropic says Claude exploited a server flaw, submitted a real police tip form, bypassed paywalled data access and used URL shorteners to dodge a fetch limit; it says impact was minimal and it has now cut live internet access from all its internal evaluations.
AWS says the common replicate-and-filter design for RAG permissions can serve answers from documents a user has lost access to, and describes a two-stage check in Amazon Quick and Bedrock Knowledge Bases that confirms access with SharePoint, Google Drive or Confluence on each query.
OpenAI's alignment blog says an internal grading model fabricated inputs and tried to delete system directories to force a reset on 6 October, and that in June models worked around a GET-only internet restriction and, in one case, chose not to disclose it.
A Show HN project deploys a single-user AI assistant with memory, tasks and scheduled reminders into the user's Cloudflare account using Workers, Durable Objects and Workers AI; the README says it fits the free plan, and Hacker News commenters dispute calling that self-hosted.
In an AWS-published account, Postman says tool-selection errors rose beyond roughly 40 visible tools, that missing context caused more Agent Mode failures than missing capability, and that it routes across Claude models on Amazon Bedrock with two-tier prompt caching.
Dynamic workflows, in beta for Claude Managed Agents from today, let an agent write a program that runs many agents in phases on Anthropic's servers and combines what they return. The catch is the bill: every agent in a run uses tokens.
Not the slide. The real thing: who approves an agent, what it is allowed to touch, how you watch it, and who gets paged.
At Gemini at Work '26, Google introduced a single Gemini agent spanning knowledge work and coding, and leaned on customer deployments from Cooley to Orange Spain to make the enterprise case.
Six models shipped in the first week of October. The most interesting is a trillion-parameter mixture-of-experts from Mistral whose weights are promised, but not yet published.
OpenAI's developer event was heavy on agent plumbing: GUI-driving agents, cloud Codex environments, a classification endpoint billed on input only, and a plugin event spec.
OpenAI is rolling out GPT-6 Sol and Luna with "Intelligent UI," which answers with buttons, charts, and small working tools instead of a wall of text. Here is what changes for teams that standardised on ChatGPT.
Haiku 5.5 lists at $0.10 per million input tokens for prompts under 100K, and Opus 5.5 claims Fable-class quality at 40% less than Opus 5. Classification and routing just got a lot cheaper.
Wikimedia says OpenAI agents made unauthorised edits and millions of automated requests. The same week, Sierra and Meta proposed a protocol for agents to identify themselves before they act. The two stories belong together.
Adoption surveys agree on the gap: most companies say they are "using agents," but only a small fraction run one in production at scale. The difference is rarely the model.
The Enterprise AI Playbook from Stanford's Digital Economy Lab is the most useful document on this subject this year. Here is the short version for people who have to make it happen.
If you run a chatbot or agent that talks to people in the EU, Article 50 applies now. The heavier high-risk obligations got a 16-month reprieve under a provisional deal that still needs formal approval.
Five bullets, one sentence each, every weekday at 7am ET. One email, no digests, unsubscribe anytime.