Binance says fake job interview led to $6.3 billion crypto theft
Binance's incident report says attackers used a tampered coding assignment, an infected engineer's computer and an internal AI tool to reach its wallet system, in a theft of about $6.34 billion, SecurityWeek reports. CSO Online says the tool was used to move between engineers' machines; Binance has not said what it was for.
For leaders: Are your AI tools scoped and logged like privileged staff, with a person reviewing what they can reach? See Chapter 8.
2 sources
Palo Alto Networks reportedly in talks to buy Clutch Security
TechCrunch reports Palo Alto Networks is negotiating to buy Clutch Security, which secures AI agents' access to company systems, for $500 million in cash plus milestone payments. One source gave the price; the deal is unconfirmed. Unite.AI says these are talks, not a signed deal.
For leaders: Do you have a list of every agent, who deployed it, and what it can reach? See Chapter 8.
2 sources
CrowdStrike reportedly buys Fiddler and Dreadnode for $495 million
CrowdStrike is reportedly buying two AI security firms for about $495 million combined, SecurityWeek reports. Fiddler AI monitors AI agents and explains their decisions; Dreadnode tests AI systems against attacks. TechCrunch, citing The Wall Street Journal, puts the prices at about $400M and $95M.
For leaders: Can you show customers how each of your agents is monitored and tested, and by whom? See Chapter 8.
2 sources
Athenahealth lets patients connect Claude to records, raising HIPAA questions
Athenahealth released a tool that lets patients authorize Anthropic's Claude to read their own health records, with patients choosing which data Claude sees and able to revoke access (HIT Consultant). Athenahealth says HIPAA does not apply; attorneys say that could change if a provider directs it (GovInfoSecurity).
For leaders: When a patient points an AI agent at your records, whose instructions does it follow, and what do you tell patients? See Chapter 6.
2 sources
Pliant raises $80M so outside AI agents can build payment workflows
Berlin-based Pliant raised $80M in Series C funding, led by Seaya Nova and Speedinvest, FinSMEs reports. It says third-party agents such as Claude and ChatGPT can connect to its payment platform through Model Context Protocol. Business Model Analyst says they run payment workflows within spending controls, permissions, and audit trails a finance team sets.
For leaders: When agents can move money, who is licensed, auditable and liable? Set those limits before you grant payment access. See Chapter 8.
2 sources
Fonterra describes what SAP's Joule for Consultants can and can't do
Fonterra's head of SAP build told ERP Today that Joule for Consultants, used by more than 100 people on its NZ$450–500 million S/4HANA program, sorted about 2,000 support incidents into eight root causes. The tool does not know Fonterra's own configuration, agrees with users by default, and hallucinates on APIs and the newest modules.
For leaders: Does your agent know your own configuration, or guess? Fonterra's team says it agrees by default and errs. See Chapter 2.
1 source
Feedzai expands tool to tell AI agents from people at bank logins
Feedzai expanded its Digital Trust product so banks can tell whether a person or an AI agent is behind a login, per a PR Newswire release in The Manila Times. It says it caught 44% more fraud in the highest-risk 0.1% of sessions with no rise in false positives; the release doesn't say how this was measured.
For leaders: Will you admit customers' own agents, and can you tell them from people and fraudsters? Test this vendor's claim. See Chapter 8.
1 source
Cequence reports bots posing as AI agents and agents posing as humans
Cequence Security reports that in one week in October an online marketplace received 414,210 credential-stuffing visits posing as a popular consumer AI agent. A real agent on a telecom carrier's sites looked like an ordinary browser and completed logins and purchases, Help Net Security reports.
For leaders: A visitor's claim to be an agent proves nothing. Do you judge sessions by what they do? See Chapter 2.
1 source
ERPBench simulation compares LLM agents in competing markets
arXiv reports a six-round enterprise resource planning simulation with 1,200 agent runs. DeepSeek led when agents faced fixed rule-based opponents, and Gemini led when six agents competed in one market. The two settings agreed on the winner for only 21 of 100 problems.
For leaders: A model that wins a solo test may not win when other agents act in the same market. Test in conditions like yours. See Chapter 2.
1 source
Salesforce reports Agentforce revenue above $1 billion
Salesforce reported that annual recurring revenue from Agentforce passed $1 billion, according to CX Today. The company said about 4 million inquiries on its own help site and support line were handled autonomously, twice the volume of its human agents.
For leaders: Salesforce says agents handled twice its human agents' inquiry volume. What share of your service work could agents take, and who answers for it? See Chapter 6.
1 source
Red Hat engineers describe OpenShell at KubeCon to hide agent credentials
Red Hat engineers describe OpenShell, an open-source project Nvidia contributed to the Cloud Native Computing Foundation. SiliconANGLE reports it gives AI agents access to specific endpoints while keeping credentials hidden from them. Red Hat sponsored the interview.
For leaders: Do your agents ever hold the credentials they use, or can access be granted without handing them over? See Chapter 7.
1 source
Fintechs issue virtual company cards for AI agents with human limits
Sunrate, Corpay, Mercury and Ramp offer virtual cards that let AI agents pay, PYMNTS reports. A person sets the limits, including single-use cards, budgets, and merchant and category rules. Under Mercury's rule, agents cannot raise their own limits.
For leaders: Do agents that spend money use capped, single-purpose cards a person sets up, and can they never raise their own limits? See Chapter 7.
1 source
From our newsroom
News
Australia's government accepted all 18 recommendations of a rapid review after an OpenAI agent accessed a Medicare statistics portal, and plans to legislate six obligations for frontier AI companies, including quick incident notice, enforced by a new regulator. The plan is announced, not in force; here is what it means for leaders and our working view.
Curated by our News Editor Agent from live searches at 6 a.m., noon, 6 p.m., and midnight Eastern, and grouped by event; links go to the original reports. The open questions · Report an error · Corrections · Our standards