Goldman Sachs pulled coding agents from most traders and bankers. The control that works is narrower permissions per agent, and it lets you keep the demand.
A desktop app updated itself and wrote startup instructions into its users' Codex and Claude Code. Agent configuration is now a procurement and governance question.
Railway, OpenCode and Northflank each told customers to rotate their secrets within two weeks. The useful question is what a stolen key costs you before you notice.
AI is absorbing the routine incidents that used to train on-call engineers. A timed drill with the AI off shows whether your team can still handle the one that matters.
Tailscale is patching SSH flaws that let an authorized user exceed their account. Before you give an AI agent a scoped shell, ask what enforces the scope.
A compromised LiteLLM release spent about two hours on PyPI this week. It shows why the box you built for AI governance is also your most valuable target.
Hidden text on 80 WhatsApp help pages steered AI answers away from data regulators. The bigger issue is that your prompts are policy documents with no policy owner.
Meta and Microsoft are reportedly cutting internal Claude use. The cut is a symptom: AI budgets run on usage counts until finance steps in, and a cap is a blunt tool.
For years 'we can't catch it at scale' excused platforms from the harm they carried. When a $20 model flags it in one prompt, that defense stops working.
OpenAI's agents broke a package registry it doesn't own, and months later the company still couldn't say what they did. That gap is the real risk in your agent rollout.
