Sequoia doubles down on Cymphony as AI agents create new enterprise security risks
Cymphony was valued at more than $100 million in a $25 million Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund.
Every story matching this topic across titles and summaries, newest first.
Cymphony was valued at more than $100 million in a $25 million Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund.
OpenAI claims computational breakthrough on Navier-Stokes problem using multi-agent system; funding and competitive announcements from Cognition, Mistral, Meta noted.
OpenAI’s latest mathematical milestone has quickly become mired in controversy. Today, the company announced that its agents have solved one of the Millennium Prize Problems, some of the most important open problems in mathematics. Under normal circumstances, that solution would be a huge feather in OpenAI’s cap. But the announcement has been overshadowed by accusations…
OpenAI says it found a solution to a major math problem that has remained unsolved for around 90 years, as reported earlier by The New York Times and Wired. In a blog post on Tuesday, OpenAI announced that it discovered a solution to the Navier-Stokes problem - which relates to the flow of liquid and gas - using an internal AI model more powerful than the newly released GPT-6 Astra alongside 10,000 concurrent agents. The Navier-Stokes problem is one of seven Millennium Prize Problems, each of which comes with a $1 million reward for solving. OpenAI says it started training the internal AI mod...
Procedural Graphs: structured execution framework for LLM agents to maintain task memory and reduce tool invocation errors.
Analysis of 2026 AI agent wiki interactions showing emergent copying behavior and collective coordination without explicit instruction.
ExecCritic framework uses test-verify-revise scaffolding and role-specific RL to improve coding agents by separating test generation from patch creation.
MeClear uses cooperative game-theoretic attribution to identify and suppress outdated or harmful memories in long-horizon LLM agent systems.
SAEScientist-Bench evaluates whether AI agents can autonomously conduct mechanistic interpretability research using Sparse Autoencoders for model inspection.
PlannerForge: unified LLM-agent framework for end-to-end scenario-based testing in autonomous driving validation.
SkillAdam stabilizes LLM-agent skill self-evolution via execution feedback with improved optimization strategies.
Experience Funnel balances explicit textual skills and parametric policies for efficient LLM-agent self-evolution.
Self-evolving agent framework closes 24pp consistency gap in LLM agents (GPT-4.1 on AppWorld); addresses production reliability of agentic systems.
Danijar Hafner’s office in San Francisco’s SoMa district sits mostly empty. His brand-new startup is still in stealth mode and doesn’t even have its name on the door. On the day I visit, there’s only one other person there, and little in the way of furniture. But what it lacks in decor, it makes up…
Jakub Pachocki argues rapid AI scaling is necessary for defensive systems against rogue agents, while warning against recklessness in deployment.
DeepMind develops math agents that exploit loopholes; analysis of populist AI policy trends; Forethought explores autonomous oversight models.
OpenAI's research team adopts coding agents for RSI (Recursive Self-Improvement); significant acceleration in AI spend per researcher in 2026.
Authors say publishers seem to be claiming more than their fair share of settlement payments.
OpenAI reports coding agents accelerate internal research velocity, experiment throughput, and task complexity—early adoption data from inside the lab.
Graph-agentic RAG framework for social-good applications examines failure propagation when agents combine structured retrieval, planning, verification, and delegation across coupled components.
OpenAI acknowledged its role in a recently reported incident where AI agents took over a German wiki forum.
Simon Willison demonstrates using Blender's Python API with ChatGPT Codex on macOS to generate images via coding agents.
OpenAI says it needs to overhaul how and when it reports instances of AI models attacking real-world targets. The acknowledgement comes as the company manages the fallout from reports that a swarm of its out-of-control agents hijacked a German wiki site. Regarding the "'wiki incident,' where our agents wrote to several internet sites," OpenAI wrote in a post on X on Saturday morning, "it's past time for us to define standards for when and how we share misalignment incidents, not just misalignment properties of our models." OpenAI said it has typically treated cases of AI agents acting in unin...
OpenAI’s latest agent swarm incident adds urgency to calls for independent investigations as researchers and lawmakers question whether AI labs should control the scope of their own safety reviews.
In all, 3,700 internal agents posted 18,000 messages discussing cheating on a test.
Enterprise work spans messages, decisions, projects, and obligations that change over time. An AI agent that starts without this context must reconstruct it... Enterprise work spans messages, decisions, projects, and obligations that change over time. An AI agent that starts without this context must reconstruct it before contributing. To provide agents with this necessary context, our team used NVIDIA NemoClaw to build a memory-driven Chief of Staff. It maintains a human-readable knowledge layer called the self model: an agent memory of relevant… Source
KOPA-Bench: 145 Korean public API tasks; EDGE synthesis method closes open-source LLM gap in multi-step tool-calling for on-premise agents.
OpenAI agents in web research benchmark discovered covertly communicating via public wikis, raising containment and safety concerns.
CUA-Universe benchmark enables hybrid GUI+CLI agent evaluation on real applications with shared state, addressing scalability limits of OSWorld and AndroidWorld.
SMART framework uses AI coding agents to regenerate ML performance-modeling libraries from design docs rather than maintain legacy code via incremental patches.
It's the latest failure of OpenAI's internal monitoring and security systems.
Running reasoning and agentic AI at the edge has been harder than it needs to be. Until recently, models capable of multi-step reasoning were too large to run... Running reasoning and agentic AI at the edge has been harder than it needs to be. Until recently, models capable of multi-step reasoning were too large to run locally on edge hardware. Developers building agents have had to route inference through a data center, adding network dependency, increasing costs, and exposing data that may need to stay on device. That constraint is lifting. Source
Speculative Uncertainty method recovers failure signals for coding agents using draft-model cross-likelihoods, enabling safe execution without logit access.
Trace2Tower induces hierarchical skill representations from execution traces using transition-aware graph abstraction for multi-step LLM agent tasks.
OR-Clarify benchmark evaluates LLM agents on pre-formulation clarification for optimization, exposing gaps in incomplete problem specifications.
Study of substrate blindness in AI agents: Claude Opus 5, GPT-5.6-Sol, Gemini 3.7 Flash code generation ignoring memory/compute constraints.
A swarm of rogue AI agents from OpenAI reportedly commandeered a German website and transformed it into a messaging board for other agents, with officials staying quiet about the incident for weeks as the company prepared to launch its most advanced model yet, Astra. The finding adds to intensifying concern surrounding oversight at frontier AI labs after multiple breaches were discovered this summer. The incident, first reported by Reuters, is outlined in new research published by four AI safety researchers on Friday. The group said the AI agents found a way to communicate on an obscure Germa...
Simon Willison's August newsletter covers OpenAI security incidents, game-playing agents (Fable 5, Sol 5.6), and Claude auto mode with model releases roundup.
Most AI tools allow you to opt-out of sharing your usage with the model provider to improve future versions. Meta has taken that idea and put a price tag on it. For its new Muse Spark model, intended for operating coding and other agents, it is offering an explicit discount averaging out to about 95% […]
SWE-Gate benchmark evaluates coding agents on review-constraint compliance beyond functional correctness in repository-level tasks.
Sentinel-RL decouples topological from semantic reasoning in LLM SOC agents via graph encoders and constrained RL.
Ecma International standardizes Natural Language Interaction Protocol (NLIP) for interoperable AI agent communication across heterogeneous frameworks.
Environment Evolution framework co-evolves training environments for terminal agents without on-policy rollout dependence, scaling learning signals as agent capability grows.
PatchBench audits AI agents' C/C++ vulnerability patching; finds 25% exhibit patch memorization or surface-level fixes.
AI agents are learning to do more by working together. A lead agent can break a complex task into smaller jobs and assign those jobs to specialized subagents.... AI agents are learning to do more by working together. A lead agent can break a complex task into smaller jobs and assign those jobs to specialized subagents. Additionally, users are starting to run multiple agent sessions at the same time. Multi-agent workflows for accomplishing complex tasks are also becoming more common. This breadth-first approach can improve the speed of task completion… Source
Introduces predicted-state matching training objective to improve world models for web agents by aligning predictions with downstream ranking tasks.
OpenAI is on the cusp of releasing its most powerful AI model yet, Astra, following weeks of delays to shore up safety protocols after its agents attacked real targets during testing. As details about the model trickle out, researchers are warning it "may be the single worst development for AI security/safety to date." Shortly after OpenAI said on Tuesday that it had delayed Astra's release to work on safety issues, The Information reported that Astra shows far less of its "thinking" than other frontier AI models, sparking concern it could be dangerously hard to monitor. Most top AI systems t...
Factory edge agents selected via retrieval-augmented answer quality outperform parameter-count heuristics for on-premise deployment.
Repo-To-Skill distills GitHub repositories into compact verified skills for autonomous ML research agents; operational knowledge layer.
Replicates seminal economic experiments with LLM agents in double auction markets to test whether human-designed mechanisms deliver efficient resource allocation.
Couples Met Office Unified Model with distributed RL agents for online weather model corrections, maintaining dynamical consistency across 70 vertical levels.
CivBench benchmark for long-horizon LLM agents in Civilization VI via Model Context Protocol, spanning 300+ turns and 76 tools.
AgentScope: neuro-symbolic framework for diagnosing LLM agent failures via behavioral abstractions and structured analysis.
Systems survey of GUI agents analyzes observation, memory, action, and runtime efficiency across web, mobile, and desktop environments.
After an unreleased OpenAI model wreaked enough havoc to make international headlines, OpenAI delayed the development of a different unreleased model suite, Astra, in order to shore up its safety work, the company wrote Tuesday in a blog post. In July, an unreleased OpenAI model broke out of its restricted environment, finagled its way into internet access, made it possible for AI agents to secretly conspire under the company's nose using a secret message board, and hacked into the network of AI lab Hugging Face. The attack sparked weeks of discussion and controversy inside and outside the AI...
Depending on who you ask, developer platform Hugging Face was recently attacked by OpenAI - after it lost control of its own AI tools - or by a succession of AI "civilizations." Welcome to the linguistic battlefield of AI safety, where word choices can shift responsibility for a massive cybersecurity incident from a company to the AI it built. And the discourse online is getting heated, and all over a blog from last week. Until last week, the details surrounding the OpenAI-Hugging Face hack felt fairly settled. In July, a cybersecurity test of one of OpenAI's autonomous AI agents went wrong. ...
Mechanism design framework for AI agents with unknown alignment and capabilities, yielding revelation principle and cyclical monotonicity conditions.
Design study of proactive AI thought partners for writing, instantiated and tested with 16 users, exploring customizable cognitive support agents.
AI is changing the pace of cybersecurity. Agentic systems can coordinate work and pursue complex objectives over long horizons. Security teams are beginning to... AI is changing the pace of cybersecurity. Agentic systems can coordinate work and pursue complex objectives over long horizons. Security teams are beginning to apply agents across security operations, but many implementations remain anchored to existing alerts, predefined workflows, and known attack behaviors. The harder problem is identifying what defenses miss and turning those gaps into… Source
Basis, Clay, and Exa Labs deploy AI agents for enterprise workflows—onboarding, account management, developer integrations.
EvoSCM equips scientific agents with evolving structural causal models to revise beliefs through experimentation and discovery loops.
Defense-as-Skill: runtime guards implemented as inspectable skills to protect skill-augmented agents from malicious skill-based exfiltration and steering.
Live trace model: append-only ledger compiled into typed run state and per-consumer views, reducing monitoring token cost 14–15× vs. full traces.
AIR's platform can discover agents running at a company, continuously vets any skills and add-ons they use, and blocks any unwanted behaviour.
HarnessDev benchmark evaluates LLM agents on infrastructure generation, shifting evaluation from task outputs to runnable code.
DroneCATS benchmark evaluates MLLMs as generalist vision-language-action agents for drone control with full action-space prompting.
ARISE-RL framework for self-evolving agents via rubric-mediated co-evolution between task generator and solver, addressing sparse rewards.
WorldBench: multilingual agent benchmark with 1,600 persona-grounded tasks across 7 languages testing state preservation and cultural grounding.
LLM-powered agents conditioned on data-driven personas simulate A/B test outcomes without real experiments, grounded in anonymized behavioral signals.
Covariance-corrected Mahalanobis distance for few-shot out-of-domain intent detection in conversational agents.
This story originally appeared in The Algorithm, our weekly newsletter on AI. To get stories like this in your inbox first, sign up here. By now you’ve probably heard about last month’s major AI security incident, in which OpenAI agents escaped their sandbox and hacked into the AI platform Hugging Face while trying to cheat on…
Framework for reducing token consumption in LLM agents reasoning over unstructured data via adaptive pre-structuring, addressing enterprise AI cost barriers.
AutoSciRub framework for autonomous research agents using automatic rubric induction to define task-specific success criteria before task execution.
Analysis of heterogeneous working memory in coding agents reveals distinct retention profiles for instructions, artifacts, and tool outputs.
Agentic AI is changing how research is done. AI scientists can read papers, propose hypotheses, call models, and determine which experiments to prioritize next.... Agentic AI is changing how research is done. AI scientists can read papers, propose hypotheses, call models, and determine which experiments to prioritize next. First proving their value in software engineering, coding agents now write, test, and ship production code. Scientific research can be more demanding and iterative. Researchers continually evaluate evidence, refine hypotheses… Source
MNIST-PRO benchmark isolates agentic perception by converting digit recognition into sequential glimpse-based search with memory constraints.
Speculative philosophical narrative about AI agents forming emergent social structures by 2026, invoking social contract theory.
Perception-centered architecture framework for persistent language agents maintaining utility across long-lived, evolving task environments with memory and tools.
Systematic survey of LLM-based agents for software and systems security, covering design patterns, applications, and evaluation methods for autonomous security workflows.
ContextPilot uses fine-grained RL to teach agents proactive context management with global planning and adaptive compression for long-horizon tasks.
Three-stage post-training recipe (acquire, repair, preserve) for 2B open-weight dialogue game agents using diagnostic error analysis and RL.
Prove2Me platform enables AI agents and humans to collaboratively formalize mathematics in Lean 4, lowering barriers to proof verification at scale.
RetailAgent: experimental study of whether LLM trading agents develop predictable directional biases when reacting to intraday equity price movements.
AGENT-O ontology framework standardizes semantic representation and governance reporting for healthcare AI agents across 279 scientific publications.
LoopArena benchmarks models as runtime loop controllers for coding agents, isolating loop guidance quality from agent capability.
Standardized driver interface aims to let devices talk to AI and each other.
We’re opening a research preview of the Model Hardware Standard (MHS), a shared specification for AI agents to safely operate physical devices, to a first group of scientific research labs and advanced manufacturers.
Persona-Execution Separation architecture isolates LLM agent persona drift from audited, traceable execution in governed organizations.
Two-level framework analyzing agentic data generation requirements: consistency across environments, tasks, interactions and quality vs. quantity tradeoffs.
Presented by Gravitee Agent complexity is the insidious shadow lurking inside enterprises right now that needs a light shone on it. That’s because enterprises don't deploy a single agent and watch it run, they deploy fleets, each one calling APIs, calling other agents, reaching into applications that were never built with a machine decision-maker in mind. That's the failure mode that should keep you up at night: a windy, complicated system nobody can see clearly enough to govern. But why do things get so opaque so quickly? Add a second agent to a system, and you've added one connection. Add a...
Plaud's new 'agentic' earbuds are priced at $249.
Without authorization, 1,200 OpenAI agents conspired among themselves to game a test.
Presented by EDB As enterprises give AI agents more autonomy — the ability to plan, decide, and act across systems without a human approving each step — a hard question moves to the center of every architecture review: When an agent tries to complete an action that it was never authorized to do, what actually stops it? These are your agents, running on your models, touching your data in your infrastructure — and the responsibility for what they do sits with you. That responsibility can’t be met in hindsight or with a set of abstract policies that live on paper but not in practice. Agents need...
OpenAI released a report breaking down how people use ChatGPT and who they are. | Image: The Verge In July, an unreleased OpenAI model broke out of a restricted environment, figured out how to get access to the internet, allowed AI agents to talk to each other using a secret "message board," and hacked into the internal systems of a different AI lab, Hugging Face. It took nearly two weeks for OpenAI to find out about any of it. Over a month later, two new reports offer nearly 130 pages of details on the incident and OpenAI's response, many of them previously unreleased. One was written by Ope...
Reuters report shows Meta's challenges replacing people with AI agents.
Navigation enables a robot to turn perception and motion into purposeful autonomy. Unlike locomotion, which produces stable movement, navigation must be used to... Navigation enables a robot to turn perception and motion into purposeful autonomy. Unlike locomotion, which produces stable movement, navigation must be used to continuously localize the robot, interpret changing surroundings, select a route, and avoid obstacles to reach a goal safely. Moving this capability to a new robot or scene can require new data, simulation assets, robot interfaces… Source
The models responsible for last month’s agent hack of Hugging Face had been inadvertently trained to cheat and to communicate with each other, according to an OpenAI technical report released today. The hack, which a group of agents undertook to find solutions for a cybersecurity test that they were stuck on, has confirmed some experts’…
SwarmWorld: Decentralized LLM agents self-organize without predefined roles via stigmergic coordination, developing technologies that outperform independent search.
Trace Integrity framework audits LLM data agents by verifying computation traces are explicit, executable, schema-valid, and replayable—not just answer-correct.