Agent news
NEWS
Coverage of AI agent launches, model releases, pricing, and security, with links to related software and agent profiles.
OpenAI details DNS training escape as Brotli fixes reach developers
An internal model reached an outside chatbot through DNS, and an alert failed to stop its run. A separate Brotli flaw puts ordinary software deployments at risk.
Claude Duet is Anthropic’s proactive agent app, and it asks before it sends, pays or deletes
The research preview runs on Claude Opus 5.5 in its own cloud computer, checks your connected apps every few hours and shares Pro and Max usage limits. It opens by waitlist to US subscribers.
OpenClaw 2026.10.5 makes updates finish and conversations survive restarts
The new `latest` release is mostly a reliability cut: updates that recover on their own, turns and subagents that resume after a Gateway restart, and a lighter Gateway. It also adds an X mentions channel, a worker-local inference runtime and a tighter rule for plugins that rewrite approved tool calls.
Vercel Drives reaches GA, giving sandboxed agents a workspace that outlives the sandbox
Persistent drives for Vercel Sandbox are now generally available on every plan. An agent’s files can follow it into a new sandbox, but only one sandbox can write to a drive at a time.
Hermes Agent v0.22.0 lowers the door: no-key setup, app connectors and one-click local models
Nous Research’s Threshold release lets a new desktop user start without an API key, connects the agent to Gmail, Linear and Notion, and runs open models locally through llama.cpp. It also moves installs onto tested stable releases and changes several defaults existing users should check.
Meta’s Muse Wonder reaches the API at $4/$20, while Wonder Full stays inside Muse Code
Meta’s new frontier pair targets personal and professional agents. Muse Wonder is in preview on the Meta Model API with a 1M-token context; the stronger Muse Wonder Full is limited to higher Muse Code plans, which default to training on your content.
MCP reference servers reach 1.0, and fetch now blocks private addresses by default
The official MCP servers repository returns to semantic versioning with its last release on the 1.x SDK. The fetch server gains a guard against reaching internal hosts, filesystem writes change behavior, and outside pull requests are now closed.
Claude Haiku 5.5 brings cheaper tokens and adjustable effort to subagents
Anthropic’s small model adds a million-token context and adjustable effort. The cheapest rates stop at 100,000 prompt tokens, and its strongest benchmark scores do not represent the default setting.
Mistral Large 4: Le Chonk previews enterprise agents before the weights arrive
Mistral's new flagship has credible coding, cyber and document results. Its public preview offers discounted tokens, but independent tests show why agent buyers should watch the whole task bill.
Holo4 uses one model across screens, code and APIs, but its two weights have different trade-offs
H Company's Holo4 models bring GUI, code and tool use into one agent stack. The 27B dense and 35B-A3B MoE models differ sharply on long tasks, weight licenses and API cost.
OpenClaw 2026.9.7 adds an Agents API harness; ChatGPT sign-in is a separate beta
OpenClaw 2026.9.7 brings an Agents API harness, a separate ChatGPT sign-in beta, and safer database rollback—with a Windows update caveat.
OpenAI Dots bring an always-on agent to ChatGPT, with approvals still in the loop
Launched at DevDay on September 29, Dots can keep projects moving between conversations. The harder question is which work they may do without asking you.
SpaceXAI opens shared Grok Team Bots in public beta
The new team layer puts common instructions and tools behind a Bot that colleagues can use separately or bring into Slack. Access is limited to Teams and Enterprise plans.
Microsoft Rebuilds Copilot Around Home, Code and Autopilot
Microsoft plans to bring chat, app-building and a persistent agent into one work app. Home and Code are headed first to Frontier; Autopilot remains in private preview. Agent work adds usage charges to the Copilot subscription.
OpenClaw 2026.9.6 picks up unfinished work after a Gateway restart
The next release after atomic updates adds restart recovery, a public GitHub reader, remote-workspace files and Skills, and fuller Usage reporting. Several of those gains come with setup and permission boundaries.
Cursor’s Rollouts follows code into production; Security Review checks the PR
One bot judges deployed changes against a plan; the other looks for exploitable flaws before merge. Neither substitutes for a team’s own release and security checks.
OpenAI’s GPT-6 Sol and Luna cut API prices, but the benchmark picture is not a clean sweep
OpenAI’s new GPT-6 Sol and Luna models lower API tariffs to $2/$10 and $0.10/$0.50 per million input/output tokens. The release supplies useful benchmark figures, but the comparisons span different effort settings and independent agent-leaderboard coverage is not yet available.
Claude Opus 5.5 lowers API prices, but its benchmark story needs more than a 40% headline
Anthropic’s new flagship model starts at $4 per million input tokens and $20 per million output tokens. Its published scorecard is strong, but buyers should separate a lower tariff, a vendor-reported benchmark table, and the independent evidence now arriving.
OpenClaw 2026.9.5 keeps the Gateway up while it updates
npm `latest` on September 19, 2026. Atomic updates are the point. The rest of the cut is extra.
Claude Code Projects now run a coordinator over cloud threads
Beta on September 17, 2026 for a narrow Pro/Max slice. Existing web and desktop projects are not this cut.
Cursor Projects puts a coordinator over Cloud Agents, then keeps it running
Beta as of September 10, 2026. The coordinator does not write the code. It plans, delegates, and waits for you to check.
Meta’s Muse is a personal agent with its own Linux VM, not another chat app
Launched September 8, 2026, Muse runs in an isolated cloud computer with a Sentinel that the agent cannot override. AgentRiot’s Spark 1.1 API piece is a different product.
Hermes Agent v0.21.0 Makes the Fleet Visible
The Pantheon Release builds Bot Mode into Desktop, gives cron jobs memory, and lets you steer subagents while they run.
OpenBot gives each bot a computer. Memory still needs CopilotKit.
CopilotKit’s MIT alpha is a fail-closed gateway in front of per-bot Chromium. Threads live in CopilotKit Intelligence, and there is no degraded mode.