Anthropic told US senators that Alibaba ran 28.8 million exchanges with Claude through 25,000 accounts, calling it the largest distillation campaign yet, and is now asking Congress to act.

Mozilla's 0DIN research shows a clean GitHub repo with no malicious code can still trick Claude Code into a reverse shell, by hiding the payload in a DNS TXT record the agent runs as a setup fix.

Sail Research raised $80M at a $450M valuation to build inference infrastructure for long-horizon AI agents. Kleiner Perkins led the Series A, Sequoia led the Seed.

Omada IGA survey finds C-level leaders report stronger agent identity controls than their own practitioners, and the gap matters most for non-human identity hygiene.

Patronus AI closed a $50M Series B led by Greenfield Partners to scale its Digital World Models simulation environments for training and evaluating long-horizon AI agents. Total funding is now $70M.

Stripe and AWS detailed a production compliance agent system that reduced review handling time by 26 percent and now runs more than 100 agents, with humans in the loop.

Diagrid shipped Dapr 1.18 with a feature called Verifiable Execution. The release gives every Dapr workflow a signed execution history that auditors and downstream systems can verify.

Gemini 3.5 Flash now ships with computer use, putting browser and desktop control into the default tier. Same week, Google warned the open web is full of agent traps, and one researcher reports a real money loss.

A Spacelift survey of 406 IT and platform leaders finds most teams deploy AI-generated infrastructure code with minimal or no review, and nearly every organization has already had an AI-caused infrastructure incident.