AI Agents - Page 2

Google Cloud has announced the Gemini agent, a single agent for knowledge work, media and code that can spin up sub-agents and "coworker" agents with their own identities. The Financial Services and Legal versions are in preview; Google gave no general-availability date. What it does, how Google says it is fenced in, and what is still unproven.

Three agent-security stories from 8 October. Zenity says one prompt to an exposed AWS AgentCore agent could lead to control of every agent in the same account and region, and AWS disputes it. Claude Code adds an option that blocks an action when a safety hook fails. Cisco Talos finds malware that writes to AI analysts. What each shows, and what it does not.

Hugging Face's FineEnvs team has released an open framework that turns unmodified coding-agent harnesses such as Claude Code, Codex and OpenCode into reinforcement-learning environments. In its own tests, one small model scored 62% in one harness and 33% in another. What a harness is, how the training works, and what the results do and do not show.

An NVIDIA tutorial shows OpenAI's Codex coding agent turning a Jetson Orin Nano into a self-starting kiosk that captions a live webcam feed with Google's small Gemma 4 E2B model, running on the device. What the demo shows, what "No Mac required" means, and why local inference matters.

Cognition has given its Devin coding agent a memory: short notes kept in a Git repository and tidied each night by a "dreaming" session, with the format open-sourced. Separately, Hark has released Hark Pro, a free assistant built on a model trained to use computers. What each launch is, and which claims are the companies' own.

A critical Langflow flaw let MCP server settings run any command. Researchers say GitHub's Copilot CLI followed encrypted instructions that it refused in plain text; GitHub says that is not a vulnerability. Meanwhile Atlassian has split its 220+ agent tools into read, write and destructive tiers, and OpenAI has made Codex Auto-review free. What each one confirms.

A hijacked release of the tensorlake npm package stole tokens and AI-tool config files, and booby-trapped the stolen GitHub token so that revoking it wipes the victim's home folder. The same week, GitHub made local sandboxing for Copilot generally available, Bitdefender released a free agent guard for macOS, and Citadel AI opened early access to agent monitoring. LangChain and past.dev shipped agent tooling with access controls built in. What each one confirms.

Microsoft made its Execution Containers generally available on Windows 11 as it rebuilds Windows for local and cloud "hybrid" AI, and opened Surface Laptop Ultra pre-orders from $2,599. AWS open-sourced Strands Box, a sandbox that enforces rules such as "no git push" whatever the agent decides. What an enforced sandbox does, in plain words.

Nous Research has raised $90 million to build Hermes for Businesses, a company version of its MIT-licensed Hermes agent. The raise is confirmed; the valuation is reported, mostly at $1.5B, with one $1.2B figure in circulation. Nous's "2.5% of global token usage" is its own estimate.

Step-by-step how-tos for Personal Bots, Marketplace templates, Team vs Template choices, group-chat handoffs, skills and routines, and a newsroom Research→Writer→Reviewer pattern—plus the full Marketplace catalog with implementation ideas as of 7 October 2026.