
Agent security gap: 54% of enterprises already hit
AI agent security incidents are now widespread. 54% of enterprises have had a confirmed agent incident, yet most still let agents share credentials instead of scoped identities.
43 stories on ai from the Data Today newsroom.

AI agent security incidents are now widespread. 54% of enterprises have had a confirmed agent incident, yet most still let agents share credentials instead of scoped identities.
The AI agent evaluation gap shows 50% of enterprises shipped an agent that passed internal evals then failed in production. Only 5% fully trust automated evaluation. The gap is structural misalignment, not missing coverage.
Inkling is Thinking Machines Lab's first open-weights model. At 975B parameters with 41B active and Apache 2.0 licensing, it targets fine-tuning, not frontier benchmarks.
Kimi K3 is a 2.8 trillion parameter open-weight model from Moonshot AI that matches top US closed models on key benchmarks. Weights arrive July 27.
1-bit quantization is a compression trick that shrinks AI models by storing each parameter as one bit. Bonsai 27B uses it to fit a 27 billion parameter model in 3.9 GB, running on an iPhone.
Cloudflare AI agent crawler rules block ad-supported pages by default from September 15. Agent builders face degraded coverage and need negotiated access, not user-agent tricks.
VultronRetriver is a family of embedding models built for on-device retrieval. The 8B variant tops the MTEB leaderboard while running fully offline on an iPhone for Q&A.
GPT-5.6 is OpenAI's newest model family in three sizes: Luna, Terra, and Sol. It claims big efficiency gains for long-running agent tasks at a fraction of competitor costs.
GPT-Live is OpenAI's new voice model that listens and speaks at once. It delegates hard questions to GPT-5.5 mid-conversation while keeping the flow going.
MTPLX v2 uses multi-token prediction to run local AI on Apple Silicon Macs up to 2.24x faster. Here is what beginners need to know.
Hy3 is Tencent's 295-billion-parameter open-weights model with 21 billion active parameters per token. It uses a Mixture-of-Experts architecture to rival larger models at lower cost, cutting hallucination to 5.4 percent.
MCP, the Model Context Protocol, is an open standard that lets AI models discover and call tools at runtime instead of you hardcoding an API for each one.
China AI companion rules took effect July 15, 2026, forcing ByteDance and Alibaba to shut down companion agent features rather than retrofit compliance.
LongCat-2.0 is a 1.6 trillion parameter AI model from Meituan that activates only 48 billion parameters per token. Its weights are now open under the MIT license.
GenieX is Qualcomm's runtime for running LLMs locally on Snapdragon laptops and phones. Early users report 20 tokens per second on a 26B model.
The AO3 Claude detector is a fan-made skin that catches one specific paste path from Claude into Archive of Our Own, and fandom communities are already treating its red screen as a verdict. The tool's false negative rate is enormous by design.
LLM groupthink is the tendency of models to converge on similar answers. Flint scores 7.47 distinct replies out of 10 in Springboards tests.
Claude Science is Anthropic’s beta workbench for researchers, with 60-plus curated skills and connectors. Treat it as lab infrastructure first.
Japan AI robots plan targets 10 million machines by 2040, making shared factory data and stage gated delivery the near term test.
Claude on GB300 is now generally available in Microsoft Foundry, giving Azure teams more inference headroom but a tighter cloud bet.
AI peer review is moving into production workflow. Google's PAT found 89.7% of tested math errors, but review power remains human.
Novel Search Space breaks an LLM out of its prior by ranking 80,000 dictionary words by embedding distance, banning the obvious neighbours, and forcing the model to brainstorm only from a surprising-but-related band.
Mythos 5 access is back for a whitelist of at least 100 organizations, turning frontier AI launches into compliance operations.
GPT-5.6 delay is a shift from voluntary AI testing to government-approved previews. Treat model access as a supply-chain risk now.
AI music training data now has a searchable trail: The Atlantic surfaced four datasets with more than 21 million tracks, raising build risk.
The AI trust gap is the split between adoption and confidence: 49% of U.S. adults use chatbots, while 63% say AI moves too fast.
MLPerf Training 6.0 shows Blackwell leading all seven tests, but the useful signal is scale: 8,192 GPUs and MoE training pressure.
AI content labelling becomes an EU product requirement on August 2, 2026. Audit chatbot, deepfake and public-interest text flows now.
SearchLeak is a one-click M365 Copilot exploit chain. It shows why agent security has to move below prompts, into render and egress controls.
AgentPerf is a benchmark for concurrent AI agents. Its first results put NVIDIA GB300 NVL72 at up to 20x Hopper efficiency.
Amazon data centers used 2.5 billion gallons of water in 2025. Treat that disclosure as a roadmap risk for AI products.
Generative engine optimization (GEO) is the practice of getting your content cited inside AI answers from ChatGPT, Perplexity and Google's AI Overviews. Here is what earns a citation and what to change on your site.
VS Code Autopilot is now enabled by default, giving coding agents more autonomy. Treat the new default as a policy change, not a shortcut.
Claude Fable 5 guardrails are now visible after backlash. Builders should log fallback events, cost, and retention before trusting runs.
Multi-agent safety is the problem of keeping interacting AI agents from amplifying failure. Google’s $10 million bet starts small.
Siri AI is Apple’s rebuilt assistant, but its strongest model jump is Gemini-built: AFM 3 Cloud won 64.7 percent of text tests.
An AI plateau is mostly an illusion: old benchmarks maxed out and the AGI goalposts keep moving, even as the frontier capability curve keeps climbing.
Claude Fable 5 and Claude Mythos 5 are the same Anthropic weights; a runtime classifier, not the model you call, decides which capability you actually get.
Seattle data center moratorium is a 365-day pause on new large facilities. Treat 369 MW as the warning label for AI roadmaps.
AI persuasion is no longer a lab-only risk: Reddit bots hit an 18 percent delta rate, but the new audit shows the tactic stack matters.
Google AI opt out rules in the UK give publishers control over AI Search, but the hard choice is whether to trade traffic for leverage.
Vibe coding dominates AI discourse, but most professional developers still avoid it. The 2025 survey data shows why: the output is almost right too often.
Frontier AI capability reaches consumer hardware in about eight months. The shrinking gap turns today's hosted-only features into tomorrow's on-device default.