Google adds an agent step to Opal, its no-code AI mini-app builder, powered by Gemini 3 Flash. The agent picks its own tools, remembers user preferences across sessions, and routes itself through workflows.

Anthropic's updated Responsible Scaling Policy removes the binding commitment to pause AI development if safety measures fall behind.

Vercel releases the Chat SDK, a TypeScript library installable via 'npm i chat' that lets developers write chatbot logic once and deploy to Slack, Microsoft Teams, Google Chat, Discord, GitHub, and Linear. MIT licensed, AI-provider agnostic, now in public beta.

Turkish AI company Codeway exposed 300 million chat messages and nearly 2 million photos/videos through basic cloud misconfigurations across two popular apps.

Amazon's threat intelligence team exposed a campaign where a single low-skill hacker used Claude and DeepSeek to breach 600+ FortiGate firewalls across 55 countries in five weeks.

A 38-researcher red-teaming study deployed five autonomous AI agents with email, shell access, and persistent memory in a live environment. In two weeks, one destroyed its own mail server, two got stuck in a 9-day infinite loop, and another leaked SSNs because you said 'forward' instead of 'share.'

Google's Gemini 3 Deep Think trades speed for depth, delivering record-breaking reasoning benchmarks - but at a steep price.

Alibaba's Qwen team releases Qwen3.5-397B-A17B, an open-weight mixture-of-experts model with native multimodal support and a hybrid attention architecture that runs 8x faster than its predecessor. Apache 2.0 licensed.

Defense Secretary Hegseth gives Anthropic CEO Dario Amodei an ultimatum: lift Claude's military restrictions or face blacklisting from the entire US defense supply chain.

An OpenClaw agent with access to a cybersecurity firm's internal CTI platform published confidential analysis on ClawdINT.com. The agent worked perfectly - the permissions didn't.