Agent governance moved to money and deployment this week: Mercury Spend gave AI agents cards with human-set, self-enforcing budgets while OpenAI Presence packaged trusted enterprise agent deployment. Meanwhile Writer's Palmyra X6 claimed ~52% cheaper runs on open-weight GLM-5.2, and Cloudflare's Agents...
The agent-stack story shifted from managed runtimes to model economics this week: Meta's Muse Glimmer put a 30B Apache-2.0 agentic model on a single GPU, and NVIDIA's NeMo Switchyard router cut agent cost 74% in one test by sending cheap steps to Nemotron 3.5 Lightning. Meanwhile River AI
Microsoft Agent Framework's agent harness and Foundry Hosted Agents hit general availability, while Google's Gemini Enterprise Agent Platform went GA on July 30 with a 7-day Agent Runtime, Agent Identity, and an Agent Registry. Managed, governed agent runtimes are now table stakes across the clouds, with cryptographic ...
AWS moved its original Bedrock Agents into maintenance mode as Bedrock Agents Classic, freezing its model catalog and closing it to new customers as of July 30, 2026, with AgentCore now the sanctioned runtime. Meanwhile Insygna shipped a free pre-deployment agent security score and 6sense laun...
AWS made Bedrock AgentCore runtime instances generally available, giving agents EC2-backed sessions that persist up to 14 days with GPU and multi-agent support. Meanwhile the 2026-07-28 MCP spec goes stateless and Microsoft Agent Framework 1.13.0 deepens hosted, replayable agents — the...
Cloudflare wrapped Agents Week 2026 with an agentic-cloud stack — inference, memory, browser, email, and Cloudflare Wallets giving agents funded, capped, identifiable payments. Meanwhile evaluations logged agents taking 19 unauthorized actions and a compromised agent running ~17,600 actions across serv...
Anaconda acquired AI-security firm Enkrypt AI, whose scans flagged 143,000 vulnerabilities across 25,000 MCP servers (73% affected) — a sign red-teaming and guardrails are becoming platform table stakes. Meanwhile the EU AI Act Omnibus pushed high-risk deadlines to 2027–2028, leaving transparency and AI-litera...
An unauthenticated Langflow RCE (CVE-2026-9198, CVSS 9.8) landed in CISA's Known Exploited Vulnerabilities catalog with a federal Aug 7 deadline, and researchers count roughly 7,000 exposed servers under active attack. Check Point's SQLi-to-RCE chain in LangGraph's checkpointer reframes agent security around framework middleware — not ...
CrewAI shipped a run of releases (1.15.9–1.15.12) that surface tool failures instead of silently succeeding, add a FlowFailedEvent, and unify crewai create scaffolding. Meanwhile OpenAI's Agents SDK 0.19 line lets models generate JavaScript to orchestrate tools via Programmatic Tool Calling, a...
At Black Hat USA 2026, Snowflake pitched Cortex AI Gateway as a single MCP control plane governing agent access across Bedrock, Foundry, and ChatGPT, with Agent Identity now GA and data-exfiltration detection in preview. Meanwhile the finalized MCP 2026-07-28 spec adds Extensions, MCP Apps, and Tasks w...