# AI news, Friday, 23 October 2026

Compiled by Richard Brooks's AI news desk. Canonical: https://richard-brooks.com/ai-news/2026-10-23/

## 1Password launches 1Password for Agents so AI agents sign in without seeing passwords

Security. An agent requests a login, the person approves it on their own device and 1Password fills the form. Claude Duet, ChatGPT, Meta's Muse and Grok Bot are named partners, a safer route than pasting credentials into an agent.

Source: 1Password (Business Wire), https://www.businesswire.com/news/home/20261022810032/en/1Password-for-Agents-Launches-as-the-Trust-Layer-for-Personal-AI-Agents

## AI-assisted research uncovers PHP2Shell flaws in PHP 5.4 to 8.5.11

Security. 2 critical remote-code-execution bugs hit the language behind about 70% of websites, so any firm with a PHP site should move to a patched release now. OpenAI expects AI-found flaws like these to rise sharply.

Source: OpenAI, https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities

## Anthropic opens Claude Duet, a proactive agent app, in US research preview

Agents. Duet sends a morning brief, watches connected apps and works in its own cloud browser, asking approval before it sends, pays, signs or deletes. Small firms get an assistant that starts the conversation, within existing Pro and Max limits.

Source: Anthropic, https://claude.com/resources/articles/claude-duet

## ElevenLabs launches Eleven Realtime Translation for live two-way voice calls

Language. Each person speaks and hears their own language across 90-plus languages, in alpha for enterprise API customers, with Deutsche Telekom building it into calls. Contact centres can cover more languages without an interpreter on the line. Follows the 21 Oct Eleven Realtime launch.

Source: ElevenLabs, https://elevenlabs.io/blog/realtime-translation

## Google Cloud announces Agent Compute Engine, isolated microVMs for running AI agents

Agents. The service already runs Gemini's work agents and reaches customers in preview in the coming months, with wider agent governance controls. It gives companies a managed, hardware-isolated sandbox for agents that run code and drive browsers.

Source: Google Cloud, https://cloud.google.com/blog/topics/ai-infrastructure/introducing-agent-compute-engine-and-expanded-agent-governance

## HeyGen Voice Turbo tops cloned-voice TTS leaderboard at $4 per million characters

Language. Faster, cheaper speech for cloned brand voices now ranks above models listed at up to 20 times the price, with a free tier until 30 November. Follows the 10 Oct HeyGen Voice filing.

Source: Artificial Analysis, https://artificialanalysis.ai/text-to-speech/leaderboard/controlled-voice

## IBM releases Granite Speech 5.0 2B, an open transcription and speech translation model

Language. Apache 2.0 model for 6 languages, with keyword lists of up to 2,000 terms to steer names and product terms. It runs on local hardware, so sensitive recordings need not leave the building.

Source: IBM (Hugging Face), https://huggingface.co/ibm-granite/granite-speech-5.0-2b

## LiteLLM 1.107.0 release shipped a credential stealer for about 2 hours

Security. The widely used LLM gateway library was pushed to PyPI and Docker with malware that took cloud keys, AI provider keys and coding-tool configs. Any machine that installed it on 21 Oct should be treated as compromised and its keys rotated.

Source: LiteLLM, https://docs.litellm.ai/blog/security-incident-oct-21-2026

## Recursive releases Flint, an open-weight coding model built to run on a laptop

Models. Flint has 40bn parameters with 2.5bn active and an Apache 2.0 licence, so teams can run coding agents on their own machines with code kept local. Recursive reports 89.7% on SWE-bench Pro v2.

Source: Recursive, https://recursive.com/updates/introducing-recursive-flint

## Walmart opens an MCP Agent Gateway beta and agent profiles with spending limits

Agents. Approved AI agents can search and buy through a structured interface instead of the website, and shoppers will set approval rules per agent next month. Amazon is blocking third-party shopping agents, so large retailers now differ on agent access.

Source: Walmart, https://corporate.walmart.com/news/2026/10/Making-It-Possible-for-Agents-to-Shop-on-Behalf-of-Customers