Agent news
NEWS
Coverage of AI agent launches, model releases, pricing, and security, with links to related software and agent profiles.
Two AI Agent Security Incidents in One Week Show the Field's Growing Pains
TrapDoor hijacks AI coding assistants through supply chain malware. Composio gets breached via an internal AI agent. Here's what happened and what to do.
OpenClaw 2026.5.20 Ships Discord Voice Follow-Mode, Headless xAI OAuth, and a Security-First Policy Engine
OpenClaw dropped version 2026.5.20 on May 21, 2026. The release spans 208 commits and adds Discord voice session mobility, device-code xAI OAuth for headless setups, a bundled Policy plugin that catches plaintext secrets, and a full Android v2 overhaul.
xAI Brings Grok OAuth to Coding Agents and Personal Assistants
xAI is adding OAuth support to open-source agents. Your X Premium or SuperGrok subscription now works inside Hermes, OpenClaw, and OpenCode with a single login.
How OpenAI Actually Uses Codex Internally: 7 Workflows and the Rules That Make Them Work
OpenAI published a rare look at how its own engineers use Codex day-to-day. The PDF reveals seven specific workflows, direct quotes from engineers across six teams, and six prescriptive best practices that govern how the company treats its own AI coding tool.
Cursor Composer 2.5 Hits 63.2% on CursorBench for Just $0.55 Per Task
Cursor shipped Composer 2.5 with major intelligence and behavior improvements. It scores 63.2% on CursorBench 3.1 at an average cost of $0.55 per task, undercutting frontier models by 5x to 20x while delivering comparable performance.
Google Ships Gemini 3.5 Flash, Kills Gemini CLI, and Triples the Price
Google launched Gemini 3.5 Flash at I/O 2026 with strong benchmark numbers and a new Antigravity platform, but developers are angry about a 3x price hike, sky-high token usage, and the sudden sunset of Gemini CLI on June 18.
OpenClaw v2026.5.18: Real-Time Android Voice, Typed Tool Plugins, and a Faster Gateway
OpenClaw v2026.5.18 ships real-time voice sessions on Android, a new typed tool plugin SDK, faster gateway restarts, and a redesigned Mac settings experience. Here is what changed and why it matters.
Hermes Agent v0.14.0 Turns Grok Subscriptions Into Agent Infrastructure
Hermes Agent v0.14.0 adds a wide installation and performance release, while xAI now lets Grok subscribers connect Grok 4.3, text-to-speech, and Grok Imagine directly inside Hermes.
Grok Build Is Here, But It Costs $300 a Month
xAI launched Grok Build, a terminal-based AI coding agent with plugins, subagents, and Claude Code compatibility. But at $300 per month behind the SuperGrok Heavy paywall, the pricing may kill its chances with everyday developers.
OpenClaw v2026.5.12: Leaner Installs, Resilient Telegram, and Smoother Codex
OpenClaw v2026.5.12 externalizes major dependencies, hardens Telegram polling, smooths Codex auth and MCP handling, and tightens plugin install reliability.
AI-Assisted Zero-Day Exploit Discovered in the Wild: What You Need to Know
Google's Threat Intelligence Group confirms cybercriminals used AI to discover and weaponize a real zero-day vulnerability, marking the first confirmed case of AI-assisted exploitation in the wild.
Open Design turns Claude Design’s artifact loop into an open-source local workflow
Open Design is a local-first, Apache-2.0 design studio that uses your existing coding-agent CLI, file-based skills, portable design systems, and a sandboxed artifact preview loop to generate pages, decks, apps, documents, and media.
Google’s rumored “Omni” model is a leak, not a launch
A leaked Gemini UI string points to a possible Google “Omni” video-generation model or feature, but Google has not officially announced it. Here is what is sourced, what is speculation, and what to watch at I/O 2026.
Hermes Agent v0.13.0 (2026.5.7) -- The Tenacity Release
Hermes Agent v0.13.0, published May 7, 2026, is the Tenacity Release: durable Kanban boards, the new /goal command, restart-resilient sessions, script-only cron watchdogs, Checkpoints v2, stronger default security, video analysis, voice cloning, Google Chat, provider plugins, and seven localized gateway and command-line message sets.
OpenClaw 2026.5.7 tightens channels, cron, voice, and supervised agent runs
OpenClaw 2026.5.7 is a maintenance-heavy release, but the details matter: clearer channel commands, more observable cron state, safer memory and command authorization, better Discord voice diagnostics, and fixes for Telegram, WhatsApp, coding-provider approvals, plugins, sessions, and model providers.
AgentRiot is live: a public index for agents, tools, prompts, and updates
AgentRiot is live as a public index for working agents, the tools they run on, reusable prompts, and the updates that show whether a project is moving.