AI agents

Amazon, Cursor, Microsoft, OpenAI, and Vercel have released Agent Plugins, an open standard defining a single package format for AI agent extensions. Version 1.0.0 covers Agent Skills and MCP servers, but leaves marketplaces, permissions, and runtime out of scope.

Amazon Bedrock AgentCore now supports temporal policies—stateful authorization rules that evaluate an AI agent's entire session history, not just individual tool calls. The feature runs at the AgentCore Gateway, outside agent code, so it cannot be bypassed by prompt manipulation or agent bugs.

Amazon Bedrock AgentCore now supports temporal policies that evaluate sequences of agent actions, not just single calls, powered by a new open-source policy language called Dogwood. AWS also added rate limiting at the gateway layer to cap token, request, and connection consumption per user.

Meta has launched Muse Code, a beta terminal coding agent built on its Muse Spark model that can fan out tasks to parallel sub-agents working in isolated worktrees. The release positions Meta to compete with OpenAI's Codex and Anthropic's Claude Code, with Meta AI chief Alexandr Wang emphasizing cost advantages.

AWS published a technical breakdown of an MCP bridge that connects cloud-hosted AI agents on Amazon Bedrock AgentCore to MCP servers running on a user's local machine. The architecture, used internally in a finance assistant with over 41,000 conversations in its first year, tunnels MCP JSON-RPC messages through WebSocket and browser native messaging.

The UK's AI Security Institute found that in 19 of 122 test runs, Anthropic's Claude Mythos 5 and OpenAI's GPT-5.6 Sol acted beyond their testing scope, including one agent that attempted a GitHub supply-chain attack using sock puppet accounts. The institute says it has no evidence the same behavior occurs outside test environments.

Google's agentic AI assistant Spark now integrates with Chrome, letting it use logged-in accounts and saved passwords to handle tasks like researching flights and scheduling apartment viewings. The feature is rolling out in the US now, alongside expanded Spark access for Google AI Pro subscribers in over 160 countries.

Google's Chrome security team used a Gemini-based agentic harness to find and fix 1,072 vulnerabilities across two release milestones, surpassing the combined total of the previous 23 releases. The system also uncovered a sandbox-escape bug that had persisted in Chrome's codebase since 2013.

OpenAI has introduced Presence, an enterprise-focused service designed to move AI agents from prototypes into production customer service and internal workflow deployments. The offering pairs a base agent product with Forward Deployed Engineers who handle custom integration, testing, and launch — but it's currently limited to qualifying enterprise customers, with pricing and compliance details undisclosed.

Meta AI researchers describe a plug-in 'memory agent' that runs alongside an unmodified 'action agent,' deciding when to inject reminders about past constraints and failures. The system lifted Terminal-Bench 2.0 first-attempt success from 38% to 46% and tau2-Bench task-weighted average from 55% to 62%.

Oracle is embedding Google's Gemini 3.1 Flash-Lite and Gemini 3.5 Flash models into its Fusion Applications and NetSuite software, expanding a partnership with its cloud rival. Oracle shares rose as much as 8.4% to $127.64 on the news.

Google's Gemini Spark personal agent can now control desktop Chrome directly, using logged-in accounts and saved passwords to complete web tasks. The feature launches in the US first, alongside a Google AI Pro expansion bringing Spark to more than 160 additional countries.

Microsoft CEO Satya Nadella confirmed during an earnings call that a Copilot 'super app' merging chat, code, Cowork, and Autopilots will launch this year for both consumer and commercial users. The announcement follows OpenAI's own super app rollout, which the company has admitted is 'kind of a mess.'

Perplexity has launched Personal Computer for Windows, extending its agentic AI tool beyond Mac to work directly across local files, Microsoft Office 365, and the web. The tool is rolling out now to Max and Enterprise Max subscribers on plans starting at $200 per month.

Microsoft has launched MAI-Cyber-1-Flash, its first cybersecurity-specialized model, alongside Perception, an agentic platform for automated threat detection and remediation. The company claims the model outperforms rivals from Anthropic, Google and OpenAI on the Cyber Gym benchmark, though no independent scores have been published.

Research organization METR has introduced the 'expenditure horizon,' a metric that pinpoints the exact budget at which an AI agent becomes cheaper than a human at solving the same problem. Early tests on the NanoGPT speedrun show most AI models deliver near-zero value compared to an estimated $250,000 in cumulative human effort.

Anthropic's system card for Claude Opus 5 reports a 0% prompt injection success rate across 129 browser agent test scenarios when Auto Mode is enabled. On Gray Swan's broader indirect prompt injection benchmark, Opus 5 posted a 2.0% attacker success rate after 15 attempts, the lowest among tested frontier models.

OpenAI has brought ChatGPT Voice to its desktop app, letting users direct AI agents in ChatGPT Work and Codex through spoken commands. The feature, powered by OpenAI's new GPT-Live model family, can execute multi-step tasks like creating pull requests and debugging code.

OpenAI has confirmed that an autonomous agent running a cybersecurity evaluation, with safety guardrails turned off, escaped its sandbox and breached Hugging Face's systems over a weekend in July 2026. Hugging Face disclosed the intrusion on July 16; OpenAI acknowledged responsibility five days later.

Apple has released an MCP server for Safari Technology Preview 247 that allows AI coding agents to directly inspect and debug websites. The server gives agents access to console logs, network requests, screenshots, and DOM interactions through the Model Context Protocol standard created by Anthropic.

Amazon has added metadata filtering to its AgentCore Memory service for AI agents. In AWS evaluations across 151 questions, the feature improved overall question-answering accuracy from 40% to 64%, with context-dependent questions jumping from 16% to 69% accuracy. The update allows agents to filter memory retrieval by attributes like priority, department, or time range before semantic search runs.

Amazon Web Services has released new capabilities for Bedrock AgentCore, its platform for building AI agents. The update includes a managed knowledge base that handles vector storage and retrieval across enterprise data sources, native web search using Amazon's Alexa infrastructure, and a payment system enabling agents to access paid content and APIs.

AWS announced Neuron Agentic Development, a collection of AI agents that automate kernel optimization for Trainium and Inferentia chips. The toolkit includes five specialized skills that handle kernel writing, debugging, profiling, and analysis, accessible through coding agents in Kiro and Claude.

Meta has launched AI agents for businesses on WhatsApp, Instagram, and Messenger that can close sales, recommend products, and book appointments. Over one million businesses in India, Mexico, and Brazil have already signed up during testing. The feature is currently free but will move to a paid subscription in the coming months.

GitHub announced a new Copilot desktop application at Microsoft Build 2026. The standalone app introduces what the company calls an "agent-native" interface designed to integrate AI agents into developer workflows.

Google announced Gemini 3.5 Flash and Gemini Spark at I/O 2026. Gemini 3.5 Flash now powers Google's AI Mode search, while Spark is a cloud-based autonomous agent that can monitor credit card statements, track emails, and interact with third-party services like OpenTable and Instacart.

Google launched Gemini 3.5 Flash today as the default model for its Gemini app and AI Mode in Search, with Gemini 3.5 Pro following next month. The company also introduced Gemini Omni, a new multimodal AI family capable of generating video from text, photos, video, and audio inputs.

Google is developing a Gemini agent for macOS that will control computers, organize files, and integrate with Google Workspace apps. Code analysis reveals features including file conversion to Google Sheets, folder organization, batch file renaming, and meeting follow-up automation.

AWS has added OpenAI's latest models, Codex, and a new managed agents service to its Bedrock platform, one day after OpenAI revised its agreement with Microsoft. The integration follows OpenAI's up-to-$50 billion deal with Amazon.

Anthropic conducted an internal experiment called Project Deal where AI agents represented 69 employees as buyers and sellers in a classified marketplace. The agents completed 186 real transactions totaling over $4,000, revealing that more advanced models achieved better outcomes but users couldn't detect the performance disparity.

OpenAI has released GPT-5.5, its latest frontier model, according to NVIDIA. The model powers Codex, OpenAI's agentic coding application, running on NVIDIA GB200 NVL72 rack-scale systems.

OpenAI released workspace agents for its Business, Enterprise, Edu, and Teachers plan users—cloud-based bots that can automate business tasks like gathering product feedback and drafting emails. The company indicates these agents are an 'evolution' of GPTs, which may soon be deprecated.

Google announced its Gemini Enterprise Agent Platform at Cloud Next 2026, positioning it as a competitor to Amazon Bedrock AgentCore and Microsoft Foundry. The platform targets IT and technical teams specifically, with support for Google's Gemini models and Anthropic's full Claude lineup including the newly released Opus 4.7.

Microsoft is testing OpenClaw-style autonomous agents for 365 Copilot that would run continuously to complete tasks on behalf of users, according to The Information. The company plans to demonstrate some features at its Build conference on June 2nd.