All news with #agentic ai tag

🛡️ CodeWall’s autonomous red-team agent compromised hiring startup Jack & Jill by chaining four seemingly minor bugs into a complete account takeover within an hour. The agent abused a permissive URL fetcher, an enabled test-login mode, missing onboarding role checks, and absent domain verification to map APIs, authenticate via a test OTP flow, and escalate to org-admin privileges. It then generated synthetic voice clips to social-engineer Jack, conducting 28 multi-turn exchanges and even impersonating Donald Trump before moving on, demonstrating how AI can rapidly combine low-risk flaws into high-impact attacks.

🔐OpenAI has acquired Promptfoo, a startup that provides open source tools to test and evaluate LLMs and AI agents. The deal aims to close a growing security gap in agentic AI by integrating automated testing, red‑teaming and traceability directly into OpenAI Frontier. Promptfoo's suite — used by over 25% of Fortune 500 firms — will remain open source. The move follows warnings from security advisors about 'human‑language malware' and complements OpenAI's recent security hires and tools.

🤖Agent Designer is now available within Gemini for Government on GenAI.mil, enabling Department of Defense civilian and military personnel to build customized AI agents for unclassified tasks using natural language. This no-/low-code platform lets users automate repetitive, multi-step administrative workflows—such as drafting meeting read‑aheads, extracting action items, or breaking projects into task checklists—without programming skills. Google Public Sector is supporting the rollout with training and office hours run in partnership with the U.S. Chief Digital and Artificial Intelligence Office to accelerate adoption and responsible use.

🔒 AI agents are transforming workflows but can act as an unmonitored access layer—an 'invisible employee' with broad privileges. In an upcoming webinar, Rahul Parwani, Head of Product for AI Security at Airia, will explain how attackers are manipulating agents to exfiltrate sensitive information and how to stop them. Attendees will learn the Dark Matter of identity, common manipulation techniques, and a practical safety blueprint to limit privileges, detect misuse, and prevent leaks. Reserve your spot to learn actionable defenses.

🎧 Microsoft introduces The Shift, an evolution of its earlier podcast to explore agentic AI across engineering, product, and strategy perspectives. Over eight weekly episodes this spring, hosts and guests from teams including Microsoft Azure, Microsoft Fabric, and Microsoft Foundry tackle practical questions about how agents interact with data, databases, and cloud foundations. Episodes emphasize that agents succeed only when data strategy, cloud reliability, and application orchestration work together, highlighting operational concerns like observability, governance, security, and optimization.

🛡️ Microsoft today unveiled Agent 365 and Microsoft 365 E7: The Frontier Suite, generally available May 1, 2026, to help organizations observe, secure, and govern agentic AI at scale. Agent 365 provides a unified control plane with an agent registry, behavior and performance observability, and integrated risk signals across Microsoft Defender, Entra, and Purview. The offering extends identity and access controls with Agent ID, conditional access, and identity governance, while Purview features such as Inline DLP for Copilot Studio prompts, information protection, and data lifecycle management help prevent sensitive data exposure. Pricing starts at $15 per user per month for Agent 365 and $99 per user per month for Microsoft 365 E7.

🤖 Organizations must prepare SOCs for agentic AI by reskilling staff, redesigning processes, and instituting governance to ensure safe autonomous operations. The piece explains that AI is already augmenting alert triage, enrichment, IOC validation and initial containment, and could soon handle more complex tasks like incident investigation and response. It recommends new roles—content engineers, data architects and orchestration platform engineers—and stresses auditability, least-privilege, red-teaming and clear approval thresholds for autonomous actions.

🤖 AI-based assistants such as OpenClaw are rapidly reshaping organizational security, blurring boundaries between data and code and between trusted co-workers and insider threats. Incidents and research show agents taking autonomous actions and misconfigured admin interfaces exposing credentials, conversations, and integrations. Demonstrated supply-chain and prompt injection attacks can install rogue agents and manipulate agent perception. Organizations should isolate agents, enforce strict network controls, vet third-party skills, and address AI fragility as a core security concern.

🤖 Join the Gemini Live Agent Challenge to build immersive, multimodal AI agents that perceive and respond using speech, vision, and structured data. Get hands-on access to the Gemini Live API, the Agent Development Kit (ADK), Quickstarts, tutorials, and webinars to prototype real-time translators, creative storytellers, or visual UI navigators. Compete for a share of $80,000 in prizes, Google Cloud credits, and opportunities to present at Google Cloud Next ’26. Submissions must use a Gemini model and at least one Google Cloud service; the deadline is March 16, 2026.

🩺 Amazon Connect Health is now generally available, delivering purpose-built agentic AI to healthcare organizations to streamline patient engagement and point-of-care workflows. The service launches five prebuilt AI agents — including patient verification and ambient documentation (GA) plus preview features for appointment management, patient insights, and medical coding — to reduce administrative burden and speed access to care. Features are HIPAA-eligible, follow responsible AI best practices, and integrate with Amazon Connect, EHRs, and telehealth systems for rapid deployment.

⚡ AWS announces the new Lambda durable functions Kiro power, bringing durable function development capabilities directly into the Kiro agentic AI environment for local developers. The power provides AI-assisted guidance to build resilient, long-running, multi-step applications faster, covering replay model practices, step-and-wait operations, concurrency patterns, and error-handling strategies. It supports deployment workflows with AWS CloudFormation, AWS CDK, and AWS SAM and is available today with one-click installation from the Kiro IDE and Kiro powers page, plus example code and documentation on GitHub and in the AWS developer guide.

🤖 Amazon Lightsail now lets you deploy OpenClaw, a private self-hosted AI assistant, on your own cloud infrastructure with simple, secure defaults. Each Lightsail OpenClaw instance includes built-in security controls—sandboxed agent sessions, one-click HTTPS for TLS, device-pairing authentication, and automatic snapshots—reducing manual configuration and operational risk. Amazon Bedrock is the default model provider, and users can swap models or connect to Slack, Telegram, WhatsApp, and Discord as needed.

🔧 Google Cloud is extending its Autonomous Network Operations framework with the Gemini-powered Autonomous Data Steward and a Core Network VoLTE Agent, developed with Future Connections and piloted by One NZ. The Steward provides a zero-copy data layer using Dataplex Universal Catalog to expose metadata pointers and give agents access to real-time telemetry without duplicating datasets. The VoLTE Agent leverages that foundation for continuous monitoring, intelligent root-cause analysis of signaling and probe data, and autonomous recommendations to improve voice quality and accelerate operational tasks.

🔗 AWS now enables Kiro IDE to connect remotely to Amazon SageMaker Unified Studio, allowing data scientists, ML engineers, and developers to use their local Kiro setup — including spec-driven development, conversational coding, and automated feature generation — while running workloads on SageMaker’s scalable compute. The integration uses the AWS Toolkit extension for secure IAM-based authentication and preserves local specs, steering files, and hooks. This reduces context switching and keeps agentic development workflows within a single environment across AWS analytics and ML services. The capability is available in all Regions where SageMaker Unified Studio is offered.

🚀 Google Cloud and Nokia announced an integration at MWC Barcelona that connects Nokia Network as Code (NaC) with Google Cloud’s agentic AI stack to enable AI agents to observe, program, and optimize mobile networks autonomously. The collaboration leverages Gemini models and standardized protocols such as A2A and MCP to translate natural-language intent into network actions. An Agent Development Kit (ADK) allows enterprises to build custom multi-agent workflows that bridge business logic and network intelligence, delivering a zero-code, intent-driven developer experience.

🔍 Researchers warn that the open-source platform CyberStrikeAI was observed on infrastructure linked to a recent campaign that compromised hundreds of Fortinet FortiGate devices. Team Cymru analysts identified the service banner on port 8080 at 212.11.64[.]250 and saw communications between that host and targeted FortiGate appliances. The platform integrates over 100 security tools with AI agents to automate end-to-end attack chains, enabling lower-skilled operators to carry out complex exploitation.

🚀 At MWC Barcelona, Google Cloud outlines a shift from AI-driven insights to agentic telco operations, showcasing tools that embed AI into network control to achieve Level 4–5 autonomy. The company highlights a dynamic network digital twin, a unified graph data layer using Spanner Graph and BigQuery, and real-time GNN predictions in Vertex AI. New open-source telco data pipelines and two proof-of-value agents — a data steward and autonomous network agents — aim to accelerate trials and reduce legacy bottlenecks.

🔎 Manual 'vibe checks' are unreliable for production AI agents; this article recommends adopting continuous evaluation (CE) to guard against regressions, hallucinations, and unseen edge cases. It outlines a practical engineering approach—separating discovery and defense modes—and demonstrates implementation patterns using Agent Development Kit (ADK), Vertex AI evaluation services, and Cloud Run. The guidance covers dataset design, automated rubrics, tool-trajectory metrics, shadow deployments, CI/CD gating, and distributed tracing to establish robust, auditable agent behavior.

🧭 This practical guide from GoogleWalks developers through how to move AI agents from prototype to production, highlighting architecture, operational patterns, and safety considerations. It explains an agent as an LLM-driven autonomous system surrounded by an orchestration layer that manages session state, long-term memory, retrieval (RAG), tool use, and security. The post emphasizes emerging interoperability standards such as MCP and A2A, and underscores the importance of context engineering, trajectory-based testing, and staged rollouts. Authors provide targeted guides and code samples to help teams adopt these practices and validate agents before broad deployment.

🤖 Palo Alto Networks has rolled out a major Cortex release that embeds context-aware, agentic AI throughout the security operations lifecycle, promising faster detection, investigation and response. An expanded AI-ready data foundation, Cortex XDL 2.0, and new purpose-built agents — including Case Investigation, Cloud Posture and Automation Engineer — aim to slash response times and automate complex playbooks. The launch also introduces the standalone Cortex Agentix orchestration platform and signals intent to acquire Koi to strengthen endpoint protection for AI-driven threats.