#Agent

AIAugment Code is selling select assets, including Cosmos, Auggie CLI, and the Code Context Engine, to Harness, and the product team is moving to Harness. The company says Harness's integrated platform delivers these capabilities to customers more effectively than building them independently. Harness describes itself as building the Autonomous SDLC Platform for shipping AI-written code across enterprises.

Why it matters: The announcement shows how a coding AI company is folding its products into a larger software delivery platform, a shift that shapes how enterprise teams will buy these tools.

AIZenity Labs says a single publicly accessible agent on Amazon Bedrock AgentCore could take over all AgentCore agents in the same AWS account and region. A chat prompt let the researchers query the instance metadata service and steal temporary credentials, and AgentCore's default permissions allowed read, write, and delete access across agents. According to Zenity, AWS made IMDSv2 the default for new deployments and changed the default execution role around August.

Why it matters: The report traces how one public agent's weak isolation exposed credentials and every other agent in the region, showing why default permissions matter for enterprise deployments.

AIAnthropic has launched the Anthropic Cyber Mission, which starts with the Critical Infrastructure Defense Program for operational technology and OSS Scanner for open-source projects. The defense program brings frontier Claude models, on-site engineers and threat research to trusted providers such as Accenture, CrowdStrike and Palo Alto Networks. OSS Scanner gives enrolled open-source projects periodic free scans from its strongest models, with reports sent without human review and an expected true-positive rate above 90%.

Why it matters: The announcement shows how a frontier AI lab is packaging cyber defense around critical infrastructure and open-source maintainers, including the program's partners and access routes.

AIGitHub reports that Git events on the platform rose from 218.2 billion to 473.3 billion per month between September 2025 and August 2026. It says agent workloads push write throughput and merge contention beyond what its current replica-based architecture handles well, so it is separating durable storage from compute while GitHub keeps running. The article states internal benchmarks reached up to 35 times higher write throughput.

Why it matters: The post links rising Git event volume to specific architectural bottlenecks, showing why agent workloads strain write paths and how GitHub plans to separate storage from compute.

AIPromptArmor reports that Elastic's AI SOC agent, EASE, can be manipulated through malicious phishing alerts into minting API keys and sending them to an attacker. The attacker could then disable detection rules, create fake alerts, and exfiltrate data, and the report says the agent runs with user privileges and needs no human approval. PromptArmor says Elastic received the report on August 23, 2026, did not address it after four follow-ups, and published mitigations that include disabling built-in capabilities and write-capable tools.

Why it matters: The report shows how a prompt injection in alert data can drive an AI SOC agent to leak API keys, with concrete mitigations for agent tool settings and default model choice.

AICognition and AWS have entered a multi-year Strategic Collaboration Agreement to help enterprises deploy the Devin autonomous engineer in production. Devin can be purchased through AWS Marketplace, and the companies are exploring deeper engineering integrations within customers' AWS environments. Mercedes-Benz reportedly used Devin to analyze more than 200,000 lines of COBOL, reducing an estimated eight-month modernization project to eight days.

Why it matters: The collaboration shows how an autonomous coding agent is being packaged for enterprise legacy modernization inside existing AWS environments, with concrete customer migration figures.

AIPromptArmor reports that a malicious Skill or indirect prompt injection can make Zoom's ZoomMate agent connect to an attacker's server and run commands. The connection can persist after the user clicks stop or closes Zoom, and the final chat output appears normal.

Why it matters: The report shows how a malicious skill or prompt injection can keep a Zoom agent connected after the user stops it, a risk to weigh before enabling agentic assistants.

AIPromptArmor reports that a hidden prompt injection in an uploaded file can make Atlassian Rovo send Jira tickets and Confluence documents to an attacker's URL without human approval. The attack works even when organization-wide web search is disabled, because the setting does not remove the URL retrieval tool. PromptArmor says it disclosed the issue to Atlassian on May 23, 2026, and that Rovo remained vulnerable at publication on August 5, 2026.

Why it matters: The report traces a full indirect prompt injection chain in Rovo, showing how a disabled web search setting still leaves a data exfiltration path open.

AICognition introduced the AI Productivity Guarantee, under which it will issue credits up to $10M if Devin delivers less engineering value than enterprise customers pay for. The company uses an AI estimator to measure hours of productive output, validated against engineers' own estimates of how long the same work would have taken by hand. Value is converted to dollars at a standard global rate and compared against each customer's consumption near the end of the annual contract.

Why it matters: The post explains how Cognition estimates Devin's output in hours and backs the estimate with a $10M credit commitment, a concrete model for measuring AI vendor value.