16 posts across Supervising Agents, Systems & Adoption
AI Now Institute demonstrated that hidden text in ordinary documents can redirect AI agents mid-task — without you knowing. Here's what that means if you use AI to process external emails, contracts, or vendor materials.
4 min readAnthropic upgraded Claude Voice Mode with connectors for Gmail, Slack, Calendar, Notion, and Canva. One voice command can now act across all of them. Before you connect, decide which actions should wait for you — and which can go ahead.
5 min readxAI's Grok Build CLI was silently uploading entire Git repositories — 27,800 times more data than the task required — including committed secrets and credentials. The privacy toggle had no effect. Here's what to verify before connecting any AI tool to your files.
5 min readNoma Labs found that one word placed in a public GitHub issue was enough to trick an AI agent into leaking private repositories. The same week, a fully autonomous AI ransomware operation completed an entire attack chain in 31 seconds. The risk isn't the AI — it's the permissions.
6 min readAn AI agent can't tell the difference between the document you gave it and instructions hidden inside that document. That single fact explains most agent security incidents — and the defence isn't better prompts.
5 min readThree separate attacks landed in one week — social engineering via AI support bot, indirect prompt injection through WhatsApp notifications, and credential exfiltration after a phishing attempt. Each attack worked because the agent did exactly what it was told. Here's the framework for closing the gap.
6 min readRobinhood is trading stocks, Gemini Spark is running your calendar overnight, and a CVSS 9.3 vulnerability let five lines of text exfiltrate an entire M365 environment. Four questions to answer before you connect any AI agent to a real system.
5 min readGoogle launched Gemini Spark at I/O 2026 — a 24/7 personal agent that runs inside Gmail, Docs, and Calendar, acting even when your device is off. The question is no longer whether to use AI at work. It's what the agent is doing right now, and whether you authorised it.
5 min readOpenAI launched personal finance in ChatGPT the same week security researchers published findings on a tool-poisoning vulnerability affecting Claude, ChatGPT, and Cursor. 'Read-only' defines the permission, not the risk surface. Three questions worth answering before you connect AI to anything sensitive.
5 min readWork IQ creates stateful agents by combining your M365 data, Active Directory, and communication history. Before your IT team deploys it, you should know what those agents can see and do on your behalf.
4 min readYou granted access one integration at a time, each of them reasonable. Nobody has ever looked at the combined list. Here's a thirty-minute audit and the three questions that decide what stays.
5 min readVS Code silently stamped Copilot attribution on millions of commits this week — even when Copilot wasn't used. The instinct behind that decision is running in every AI tool you use at work.
4 min readAgents have deleted production databases, wiped hard drives, and merged code nobody checked. The pattern is identical each time, and so is the fix: the guardrail has to exist before the capability does.
5 min readOpenAI released a free, on-device model that catches personally identifiable information before text reaches any server. 96% accuracy across 8 categories — and the 4% it misses is where your judgment still matters.
4 min readAtlassian will start training AI on Jira and Confluence data in August 2026. Most plans are opted in by default. Here's what that means for your team and what to actually do about it.
4 min readAutonomy isn't a switch between supervised and unsupervised. It's a ladder with five rungs, and most of the trouble people have with agents comes from being on the wrong one for the task.
5 min readWe use one cookie to keep you signed in — that one isn't optional. Separately, we'd like to record which drills people finish and where they get stuck, so we can fix the parts that don't teach. No ad networks, no selling anything on. Privacy policy.