AI news
Security
1Password launches 1Password for Agents so AI agents sign in without seeing passwords
An agent requests a login, the person approves it on their own device and 1Password fills the form. Claude Duet, ChatGPT, Meta's Muse and Grok Bot are named partners, a safer route than pasting credentials into an agent.
Security
AI-assisted research uncovers PHP2Shell flaws in PHP 5.4 to 8.5.11
2 critical remote-code-execution bugs hit the language behind about 70% of websites, so any firm with a PHP site should move to a patched release now. OpenAI expects AI-found flaws like these to rise sharply.
Agents
Anthropic opens Claude Duet, a proactive agent app, in US research preview
Duet sends a morning brief, watches connected apps and works in its own cloud browser, asking approval before it sends, pays, signs or deletes. Small firms get an assistant that starts the conversation, within existing Pro and Max limits.
Language
ElevenLabs launches Eleven Realtime Translation for live two-way voice calls
Each person speaks and hears their own language across 90-plus languages, in alpha for enterprise API customers, with Deutsche Telekom building it into calls. Contact centres can cover more languages without an interpreter on the line. Follows the 21 Oct Eleven Realtime launch.
Agents
Google Cloud announces Agent Compute Engine, isolated microVMs for running AI agents
The service already runs Gemini's work agents and reaches customers in preview in the coming months, with wider agent governance controls. It gives companies a managed, hardware-isolated sandbox for agents that run code and drive browsers.
Language
HeyGen Voice Turbo tops cloned-voice TTS leaderboard at $4 per million characters
Faster, cheaper speech for cloned brand voices now ranks above models listed at up to 20 times the price, with a free tier until 30 November. Follows the 10 Oct HeyGen Voice filing.
Language
IBM releases Granite Speech 5.0 2B, an open transcription and speech translation model
Apache 2.0 model for 6 languages, with keyword lists of up to 2,000 terms to steer names and product terms. It runs on local hardware, so sensitive recordings need not leave the building.
Security
LiteLLM 1.107.0 release shipped a credential stealer for about 2 hours
The widely used LLM gateway library was pushed to PyPI and Docker with malware that took cloud keys, AI provider keys and coding-tool configs. Any machine that installed it on 21 Oct should be treated as compromised and its keys rotated.
Models
Recursive releases Flint, an open-weight coding model built to run on a laptop
Flint has 40bn parameters with 2.5bn active and an Apache 2.0 licence, so teams can run coding agents on their own machines with code kept local. Recursive reports 89.7% on SWE-bench Pro v2.
Agents
Walmart opens an MCP Agent Gateway beta and agent profiles with spending limits
Approved AI agents can search and buy through a structured interface instead of the website, and shoppers will set approval rules per agent next month. Amazon is blocking third-party shopping agents, so large retailers now differ on agent access.