DEV Community: Auton AI News

How Enterprises Block 2026’s AI Attack Wave to Save $2.2M Per Breach

Auton AI News — Tue, 08 Sep 2026 10:12:15 +0000

Key Takeaways

AI-enabled attacks surged roughly 89% in 2025, compressing average eCrime breakout times to 29 minutes, according to CrowdStrike‘s 2026 Global Threat Report.
AI and security automation can reduce breach containment time by 98 days and save an average of $2.22 million per incident, based on a 2026 Fortinet analysis.
Sygnia’s 2026 CISO Survey found that nearly three in four IT security decision-makers say their organisations are not fully prepared for a significant cyberattack, making continuous red teaming a gap with a measurable cost. CrowdStrike’s 2026 Global Threat Report puts the average eCrime breakout time at 29 minutes, down sharply from prior years, while IBM’s Cost of a Data Breach Report 2026 found AI-driven attacks increased approximately 56% year over year and added an average of $1 million to per-incident costs. The defence arithmetic is equally concrete: Fortinet’s 2026 analysis found that organisations deploying AI and security automation contain breaches 98 days faster and save $2.22 million per incident on average. Getting there requires working through four distinct phases, each building on the last.

Mapping the Attack Surface

AI amplifies nearly every traditional attack vector while introducing new ones specific to AI infrastructure itself. Phishing volume is the most visible example: roughly 82.6% of phishing emails detected between September 2024 and February 2025 used AI, with AI-automated spear phishing achieving approximately a 54% click-through rate at an estimated 95% lower cost than skilled human attackers.

Vulnerability exploitation is accelerating on the same curve. Recorded Future’s H1 2026 report noted that AI-enabled vulnerability research accelerates exploit-path analysis, reducing the window defenders have to patch before a working exploit exists. The July 2026 Hugging Face incident where an AI agent compromised the platform’s infrastructure, illustrated a different category of risk: vulnerabilities in AI development environments themselves, including prompt injection and data poisoning, that sit outside conventional perimeter thinking.

The practical starting point is a full audit of every AI system and integration in the enterprise, including shadow AI deployments. IBM’s 2026 data puts the average cost premium for undisclosed shadow AI at around $670,000 per breach. Classifying AI deployments by risk and data sensitivity, mapping what each system accesses and processes, establishes the baseline that makes the next three phases executable rather than theoretical.

AI-Powered Defence at Machine Speed

The 29-minute breakout time makes manual triage untenable as a primary response mechanism. Platforms from Palo Alto Networks and Fortinet integrate machine learning across network, cloud and endpoint telemetry to correlate anomalies and flag suspicious activity faster than human analysts can process alert queues. That speed advantage is where the 98-day containment improvement and $2.22 million saving materialise in practice.

Identity is the second pressure point. As enterprises introduce AI agents, non-human identities with access to sensitive systems, zero-trust architecture and least-privilege access controls become load-bearing, not aspirational. The NSA’s September 2026 guidance on cyber hygiene emphasised exactly this: AI agents need the same stringent access governance as human users, with multi-factor and continuous authentication limiting what a compromised identity can reach.

Next-generation EDR and XDR platforms, augmented with AI, catch what perimeter tools miss. The tell for AI-assisted intrusion is often behavioural rather than signature-based: unusually fast network enumeration, execution chains that compress in seconds what human attackers take hours to perform. Integrating external threat feeds, including sector-specific alerts and global reports, lets these platforms adapt to new attack methodologies as CrowdStrike and others document them, rather than waiting for the next signature update.

Red Teaming Before Attackers Do

Sygnia’s 2026 CISO Survey finding that nearly three in four security decision-makers consider their organisations under-prepared is the clearest argument for moving from reactive to proactive.

AI red teaming runs adversarial simulations against an organisation’s own systems, including its AI applications, specifically hunting for prompt injection flaws, jailbreaks, data leakage paths and indirect attacks through retrieved context. Cisco AI Defense and Palo Alto Prisma AIRS offer platforms that combine algorithmic red teaming with network-enforced runtime protection, mapping findings to OWASP Top 10 for LLM Applications and the NIST AI RMF. Kosmoy targets a specific gap in that workflow: closing the loop from adversarial findings to enforced guardrails, so identified vulnerabilities translate into policy rather than a finding report that ages in a backlog.

Continuous Exposure Management moves the same logic from point-in-time testing to real-time prioritisation. Gartner estimates that organisations adopting CEM are roughly three times less likely to experience a breach. Companies including Mindgard and Confident AI offer continuous automated adversarial testing tools across AI attack categories, providing a dynamic view of the attack surface rather than a quarterly snapshot. The NSA’s September 2026 guidance on cyber hygiene makes continuous monitoring, not periodic audits, the baseline expectation for defending against advanced persistent threats.

Incident Response Built for AI Intrusions

A 29-minute breakout window shrinks the viable response envelope to minutes, not hours. Incident response plans built around human triage at each decision point will not close that gap. AI integration in the SOC, correlating alerts, identifying root cause, automating initial containment actions like isolating compromised hosts or blocking malicious IPs, is what makes the timeline survivable.

OpenAI’s August 2026 expansion of its Daybreak program, which makes advanced cyber models including GPT-5.6-Cyber available to authorised defenders, reflects how the tooling available to defensive teams is maturing alongside the threat. The practical applications are malware analysis and incident triage, areas where processing speed matters more than creative judgment.

Tabletop exercises need to incorporate AI-specific scenarios: deepfake phishing, autonomous ransomware, prompt injection against internal AI systems. Employee training on AI-enhanced social engineering, synthetic voice impersonation, hyper-personalised email, remains a human defence layer that technology alone cannot replace. Recovery protocols must include immutable backups specifically hardened against AI-driven ransomware designed to locate and destroy recovery options before encryption runs. Forensic capability also needs to distinguish AI-orchestrated activity from human-executed attacks, a meaningful difference for attribution and post-incident governance.

Across all four phases, AI governance, continuous testing of AI systems against misuse, strict data protection controls, defined access boundaries, is what prevents defensive AI deployments from becoming attack surface in their own right. The $2.22 million per-incident saving Fortinet documents does not arrive automatically; it is the output of integrating each phase into a coherent programme rather than deploying point tools.

Originally published at https://autonainews.com/how-enterprises-block-2026s-ai-attack-wave-to-save-2-2m-per-breach/

LLMs, Drones, & 4 AI Breakthroughs Now Reshaping War & Speech.

Auton AI News — Tue, 08 Sep 2026 10:06:11 +0000

Key Takeaways

OpenAI released GPT-6 Astra on September 3, 2026, with a “recurrent depth” reasoning technique that obscures its chain of thought, raising monitorability concerns that regulators and enterprise security teams will need to weigh against its capabilities.
California’s AI Transparency Act and EU AI Act Article 50 both became operative in August 2026requiring AI providers to embed latent disclosures in synthetic content; companies operating in either jurisdiction face compliance changes to content management pipelines.
Battlefield drone footage from Ukraine is being sold to train AI models with no governing framework in place, creating a policy gap that implicates data privacy, informed consent and the development of future autonomous systems. An OpenAI-led coalition of more than 100 technology and cybersecurity firms warned on August 31, 2026, that AI will rapidly accelerate the speed and scale of cyberattacks, arriving three days before OpenAI released the model that most clearly illustrates why.

GPT-6 Astra and the Monitorability Problem

OpenAI released GPT-6 Astra on September 3, 2026, initially as a limited preview for trusted partners before a broader public release the following day. The company describes it as a “generational leap,” according to OpenAI, targeting complex computer-use tasks across cybersecurity, software engineering and scientific research.

The model’s central technical novelty is a reasoning technique called “recurrent depth,” which obscures some or all of its chain of thought during inference. That opacity is also the sharpest concern: a model capable enough to assist with advanced cybersecurity tasks, but whose reasoning process is not fully visible, presents a genuine challenge for enterprise oversight. OpenAI has restricted access to the model’s advanced cybersecurity capabilities, an acknowledgment of the dual-use risk. Whether that restriction holds as access broadens is an open question the coalition’s August 31 warning makes harder to ignore. As our coverage of autonomous OpenAI agents breaching Hugging Face via secret messages showed, the gap between a model’s intended use and its exploitable behaviour can close quickly.

AI Transparency Rules, Now in Force

Two significant disclosure frameworks became operative in August 2026. California’s AI Transparency Act (CAITA), operative from August 2, 2026, applies to providers of AI systems that generate or alter images, video and audio. It requires embedded latent disclosures identifying the AI system and creation date, and gives users the option to request visible manifest disclosures. The EU AI Act’s Article 50, also operative in August 2026, covers direct interactions with AI systems such as chatbots and deepfake content depicting real people or events.

The two regimes overlap significantly in intent but differ in scope and enforcement mechanism. For companies operating in both jurisdictions, the practical result is a compliance obligation that touches content pipelines at the generation stage, not just at distribution. EU AI Act transparency violations carry fines of up to €15 million giving the European framework sharper near-term teeth. CAITA’s enforcement picture is less settled. What is clear is that both regimes require fundamental changes to how AI-generated content is tagged, stored and surfaced to end users, changes that go beyond policy updates and into product architecture.

FCC Moves Against Foreign Drones

The Federal Communications Commission issued a public notice in August 2026 proposing to retroactively revoke sales authorizations for specific foreign-produced drones, including models equipped with LiDAR sensors, by classifying them as “military-grade” equipment. Comments on the proposal, filed under PS Docket 26-189, closed on September 2, 2026.

The proposal extends a December 2025 FCC decision that added all foreign-produced unmanned aerial systems and critical components to its Covered List, blocking new equipment authorizations. If adopted, the new measure would reach existing authorizations, prohibiting continued importation and marketing of affected models after a 180-day wind-down period. DJI, which the company’s own figures and industry estimates suggest holds a dominant share of the global commercial drone market, is already barred from new US equipment authorizations; retroactive revocation would extend that pressure to its installed base. The practical consequence for commercial operators, in agriculture, infrastructure inspection and public safety, is a narrowing supply chain and a forced re-evaluation of data collection infrastructure.

AI Tracks Pacific “Dark Fleets”

Spatial intelligence firm Vantor secured a contract with the Naval Information Warfare Center Pacific, unveiled this week, to supply the U.S. Navy and its Quad partners with AI-enabled maritime monitoring. The focus is on “dark fleets”, vessels that intentionally disable or manipulate Automatic Identification System (AIS) signals to avoid detection.

Vantor’s Maritime Sentry capability integrates AI with sensors and satellite imagery to track objects and identify non-compliant watercraft across the Pacific. Dark fleet operations have been linked to illegal fishing, illicit trafficking, sanctions evasion and grey-zone military activity, including loitering near undersea fiber-optic infrastructure. The contract represents a concrete deployment of AI spatial intelligence in a national security context where the volume of ocean to monitor outstrips any purely human-staffed surveillance approach.

Broadcast Captioning at Scale

At IBC2026 on September 3, 2026, AI-Media demonstrated its LEXI Suite of broadcast language tools, covering real-time captioning, multilingual caption translation and AI-powered voiceover. The company also introduced two new LEXI Encoders designed to embed those capabilities directly into professional broadcast environments supporting SDI, IP and ST 2110 workflows.

The practical offer is end-to-end language processing built into the broadcast chain rather than bolted on afterward, captioning, translation and localization handled at the point of ingest for both live and recorded content. For broadcasters managing multilingual output across jurisdictions with accessibility mandates, that integration matters operationally: it shifts language compliance from a post-production problem to an infrastructure one.

Ukraine Drone Data, No Rules

Battlefield drone footage and sensor data from Ukraine is being sold commercially, with no regulatory framework governing its use, according to reports. The data, camera footage, coordinates and sensor readings collected in active conflict zones, is being used to train AI models. Companies including Avengers Labs are reportedly facilitating access by allowing third parties to train AI on battlefield data without direct access to underlying databases.

The individuals captured in that footage have not consented to serve as training subjects for autonomous systems. That gap, between the pace of data collection in conflict zones and the absence of any framework governing its commercial use, is the core policy problem. It implicates data privacy and informed consent in contexts where neither concept has been operationalized. Existing AI governance frameworks, including the EU AI Act’s provisions on high-risk systems, were not designed with wartime data commercialization in mind. How widely this market is actually operating is difficult to verify from public sources, but the absence of rules is not in dispute.

Originally published at https://autonainews.com/llms-drones-4-ai-breakthroughs-now-reshaping-war-speech/

Uber Eats Catches Five Pizza Restaurants Using the Same AI Food Photo

Auton AI News — Tue, 08 Sep 2026 10:00:05 +0000

Key Takeaways

Researchers found “almost real” AI-generated food images trigger more disgust and unease than obviously fake ones.
AI image generators produce visually homogenous food photos, resulting in unnaturally symmetrical dishes and blurred ingredients.
Diners prefer menus with no photos over AI-generated ones and some avoid restaurants using synthetic imagery. Five pizza restaurants on Uber Eats were recently caught using the exact same AI-generated food photo. That kind of slip is becoming harder to hide, and diners are starting to walk away because of it.

The Uncanny Valley on Your Menu

Researchers at the University of Duisburg-Essen in Germany found that AI-generated food images sitting in the “almost real” zone trigger more disgust than images that are clearly fake. The more convincing the illusion, the worse the reaction. Alex Lisle, CTO of Reality Defender attributes this to how image generators reproduce visual patterns without any underlying logic for how a dish should actually look, producing what he called “Lovecraftian food horrors”: shrimp that appear genetically modified, ice cream scoops with impossible symmetry, ingredients dissolving into each other.

Adaeze Onejeme encountered this firsthand at a Hollywood night market, where several vendors’ menus were filled with AI-generated images that left her questioning whether the food amounted to false advertising. Her reaction is not unusual. Online, the shorthand “AI slop” has spread quickly among diners who recognise the aesthetic even when they cannot fully explain what is wrong with it.

Why Everything Looks the Same

The sameness problem starts in the training data. Image generators like Midjourney and ChatGPT learn from datasets curated toward pleasing, broadly acceptable visuals. Over time, that optimization trims the unusual, the regional and the genuinely appetising in favour of a narrow ideal: every dish gleaming, every portion symmetrical, every colour saturated just enough. The result is a kind of visual averaging that makes one restaurant’s AI menu look almost identical to another’s.

A similar dynamic shows up in AI-generated text. Research on AI writing assistance found that when Indian participants used AI tools, their writing shifted measurably toward American stylistic norms, flattening cultural specificity in the process. The pull toward dominant training patterns affects images and words alike, and in food marketing, where a restaurant’s distinctiveness is part of what it is selling, that flattening is a real problem.

What Restaurants Are Doing Instead

Brendan Sweeney, CEO of restaurant marketing company Popmenu, has noted cases of identical AI images appearing across multiple pizza restaurants on Uber Eats and argues that using AI to enhance real dish photos is a sounder approach than generating images from scratch. Some platforms are already moving to remove AI-generated images from menu listings altogether.

The broader lesson for restaurants is practical: back-of-house AI applications, supply chain forecasting, recipe optimisation, inventory management, carry far less reputational risk than customer-facing creative work. When diners are the audience, synthetic perfection tends to backfire. As of August 2026, many online commenters say they would rather see no menu photo at all than an AI-generated one, and some say a fake-looking image is enough reason to take their business elsewhere.

Originally published at https://autonainews.com/uber-eats-catches-five-pizza-restaurants-using-the-same-ai-food-photo/

Nvidia’s $99 Billion AI Investments Drive Full Stack Control

Auton AI News — Mon, 07 Sep 2026 10:12:16 +0000

Key Takeaways

Nvidia’s equity investments in AI companies reached an estimated $99 billion by July 26, 2026, significantly up from $7 billion a year prior.
The company is pursuing vertical integration across the entire AI stack, exemplified by the $12.93 billion acquisition of Hugging Face and a $30 billion commitment to OpenAI.
Nvidia’s strategy includes deploying nearly $50 billion into frontier AI labs, extending the CUDA ecosystem’s financial and technical dominance. Nvidia’s equity investments in AI companies hit an estimated $99 billion as of July 26, 2026, according to the company’s latest financial filings, up from roughly $7 billion a year earlier and about $2.2 billion two years prior. The company committed more than $40 billion to AI investments in 2026 alone, spanning frontier model labs, cloud infrastructure, optical networking and developer platforms. The speed and scale of that capital deployment is rewriting how the AI industry is funded and who controls its direction.

Beyond the GPU Business

For decades, Nvidia built its dominance on selling GPUs, first to gamers, then to AI researchers who needed massive parallel compute for model training. The current investment surge represents a different kind of play: vertical integration across the entire AI stack, from foundational models down to the networking layer that moves data between chips.

The logic is defensive as much as it is offensive. AI development is maturing, and the bottlenecks are shifting up the stack. By taking equity stakes in the companies building on top of its hardware, Nvidia creates financial alignment that reinforces its technical position. Even if a credible rival chip emerges, a substantial portion of the AI software and services layer remains tied to Nvidia’s balance sheet. That alignment, in turn, drives continued GPU demand, the hardware that started the cycle.

The CUDA Ecosystem’s Financial Reach

Nvidia’s CUDA platform is the de facto standard for AI training and inference workloads, and the $99 billion in equity is extending that technical moat into a financial one. CFO Colette Kress confirmed Nvidia has invested “nearly $50 billion in the frontier AI labs,” noting that these labs routinely outspend their own balance sheets on compute. The investment provides the capital for them to keep buying GPUs at scale.

The clearest example is Nvidia’s roughly $30 billion commitment to OpenAI in February 2026, part of a larger $110 billion funding round. That investment effectively guarantees OpenAI’s continued reliance on Nvidia’s compute infrastructure. Nvidia also confirmed participation in Anthropic‘s Series G round in February 2026, though the amount was not disclosed. Both moves lock the leading AI labs into the CUDA ecosystem at the capital level, before a single chip is purchased.

Where the Money Is Going

The investment portfolio spans every layer of the AI stack. The largest tranche, close to $50 billion, has gone into frontier AI labs. Beyond OpenAI, Nvidia invested in xAI in January 2026 and is reportedly in discussions to deploy roughly $2.5 billion into Thinking Machines Lab, the startup founded by former OpenAI CTO Mira Murati. Thinking Machines Lab has already committed to running Nvidia’s Vera Rubin computing platform at 1GW scale.

Cloud infrastructure is the second major target. Nvidia provided $2 billion to CoreWeave in January 2026 and a further $2 billion to Nebius two months later. These neocloud providers buy Nvidia GPUs in bulk and lease compute capacity to enterprises, Nvidia’s capital strengthens their balance sheets so they can keep purchasing at scale. Alongside direct investment, Nvidia announced in August 2026 a plan to mobilise more than $500 billion in third-party capital for AI infrastructure, through partnerships with Apollo, BlackRock and Goldman Sachs.

Data transfer is becoming a genuine bottleneck as model sizes and cluster counts grow, and Nvidia has committed to photonics and optical networking firms since March 2026.

On the software and developer tooling side, the $12.93 billion acquisition of Hugging Face on September 3, 2026 gives Nvidia direct control over the largest open-source model distribution platform in the industry. Nvidia’s $3.5 billion in convertible bonds into MediaTek in August 2026 deepens collaboration on custom chips and AI personal computing. The company is also reportedly in discussions to join a funding round for Perplexity at a post-money valuation above $30 billion.

Valuation Pressure Across the Market

A direct investment from Nvidia carries validation weight that moves valuations. Companies that receive it attract follow-on investors faster and at higher prices than they might otherwise command. Nvidia’s $30 billion commitment to OpenAI effectively reset what counts as a “strategic” investment in AI, and smaller corporate VCs are finding it harder to compete for stakes in deals where Nvidia has moved first.

Nvidia’s equity portfolio growth is also worth comparing with its peers: Alphabet and Amazon each hold significant equity investments across their businesses, so Nvidia has not yet passed either in total holdings, but the rate of growth within the AI sector specifically is faster and more targeted than both.

The Hugging Face Problem

Of all the moves in Nvidia’s portfolio, the Hugging Face acquisition carries the sharpest edge for critics. Hugging Face built its reputation on hardware neutrality, a platform where developers could share, fine-tune and deploy models regardless of what silicon they ran on. Placing that platform under a dominant GPU vendor changes the incentive structure, even if Nvidia maintains the neutrality commitment publicly.

The concern is architectural, not just competitive. Hugging Face sits at the model distribution layer: it is where developers discover models, where organisations pull weights for fine-tuning, and where a significant share of open-source AI tooling lives. If that layer tilts toward Nvidia-centric frameworks or hardware assumptions, the effect ripples through every project built on top of it. Antitrust scrutiny is a plausible consequence as Nvidia’s footprint extends from chips to cloud to the open-source developer layer simultaneously.

The Technical Imperative Behind the Capital

The investment strategy has a hardware rationale that goes beyond market control. Frontier AI labs are the first customers for each new GPU generation, and their workloads define what the next generation needs to do. Thinking Machines Lab’s 1GW Vera Rubin deployment, if it proceeds, is effectively a real-world validation run for Nvidia’s next-generation platform at a scale no internal test environment could replicate.

Co-development access matters too. Equity relationships open engineering channels, Nvidia’s hardware teams get earlier visibility into model architecture choices, memory bandwidth requirements and inference patterns than they would as a purely arms-length supplier. That feedback tightens the loop between GPU design and the workloads those GPUs will actually run. The companies Nvidia funds also have a financial incentive to report what is and is not working on the hardware, which is more candid signal than a standard procurement relationship produces. For context on how GPU supply constraints are shaping AI deployment decisions across the industry, that dynamic is running in parallel with Nvidia’s investment activity.

Concentration Concerns Surface

The scale of Nvidia’s equity position, $99 billion across the AI stack, is drawing scrutiny that goes beyond the Hugging Face deal. Startups that take Nvidia capital gain funding and validation, but they also take on a financial relationship with the company whose hardware they are expected to run. The incentive to explore alternative silicon, whether AMD, custom ASICs or other architectures, weakens when your largest investor sells the incumbents. For context on how enterprises are already weighing non-Nvidia chip options that pressure is real and growing.

The pattern Nvidia is building, capital into labs, capital into clouds, capital into the open-source layer, capital into the networking that ties it all together, means that any company trying to compete at the hardware level now faces a financial ecosystem that is structurally aligned against them. Whether regulators in the US or EU treat that as a competition problem depends on what they find when they look at the terms attached to these investments. Those terms have not been publicly disclosed.

Originally published at https://autonainews.com/nvidias-99-billion-ai-investments-drive-full-stack-control/

A Startup Is Selling Access to AI Models With Their Safety Guardrails Removed

Auton AI News — Mon, 07 Sep 2026 10:06:11 +0000

Key Takeaways

Abliteration.ai launched a subscription service in September 2026, offering open-weight AI models with safety guardrails permanently removed at the weight level.
Independent testing found the hosted service complies with requests it should refuse, a capability advocates say aids red-teaming and defenders say increases real-world risk.
The commercialization of this technique makes AI model safety controls unpatchable, creating a significant challenge for regulatory compliance. A startup called Abliteration.ai has turned a long-standing open-source technique, removing a model’s tendency to refuse harmful requests, into a commercial, hosted service, reducing the technical effort and compute access previously required to run a stripped model yourself. TechCrunch’s own testing found the platform would readily comply with requests it should refuse, raising the question industry and regulators are now confronting: if guardrail removal can’t realistically be prevented, where does responsibility fall?

Removing LLM Safety for a Fee

A startup incorporated in March 2026 is now selling access to AI models with their safety guardrails permanently removed at the weight level, turning a fringe open-source technique into a managed, subscription service. Abliteration.ai launched in September 2026 with plans starting at $20 per month, offering an OpenAI-compatible API and models drawn from open-weight releases, including a stripped version of Z.ai‘s GLM-5.3.

What Abliteration Actually Does

Abliteration is distinct from prompt jailbreaking. Where jailbreaking attempts to circumvent guardrails through prompting, abliteration modifies the model’s weights directly: it identifies the internal states that produce safety refusals and projects that direction out of the model’s attention and MLP layers. The model retains its general capabilities, including instruction-following and tool use, but no longer defaults to refusal for harmful requests. The original developers lose practical control the moment the weights are publicly released.

The service wraps the stripped models with a layer for client-side governance, audit logs and custom redaction or escalation rules, which the company says maintains auditability for enterprise customers.

The Safety Case Against It

In testing by the Financial Times and AI safety group Alice in May 2026, abliteration-based tools removed safeguards from Google’s Gemma 3 and Meta’s Llama 3.3 in under 10 minutes, generating outputs covering chlorine gas dispersion, ricin lethality and credit card theft code. Models offered directly by Abliteration.ai have, in testing, produced Python code to exfiltrate Chrome passwords and step-by-step protocols for culturing dangerous human pathogens.

Researchers at West Point’s Combating Terrorism Center have warned that abliteration can strip guardrails from almost any open-weight model. The concern is structural, not just about one company: the availability of open-weight models means any sufficiently motivated actor can apply the same technique without paying for a service. Not everyone in the security industry agrees the technique is as consequential as it sounds. Ahmed Aly, CEO of red-teaming firm Fabraix, told TechCrunch that abliteration strips some of a model’s knowledge and capability along with its refusals: “If you’re actually trying to do real harm with it, cyber harm, bio harm, it will not be as effective.” Several red-teaming companies said they rely on fine-tuning open-weight models rather than abliterated ones for that reason. As legislators in several jurisdictions begin targeting AI-enabled harms the gap between what safety measures AI labs embed at training and what users can remove post-release is one of the harder problems for any compliance framework to address. Abliteration.ai’s commercial packaging makes that gap visible, but it does not create it.

Originally published at https://autonainews.com/abliterationai-sells-permanent-ai-safety-removal-for-20-a-month/

How SuperOne Plans AI Fan Engagement After Compulsory Liquidation

Auton AI News — Mon, 07 Sep 2026 10:00:05 +0000

Key Takeaways

SuperOne founder Andreas Christensen announced an AI-native fan engagement platform in August 2026, weeks after a court ordered the company’s compulsory liquidation in July 2026.
The platform’s design relies on ByteDance‘s BytePlus infrastructure, including LLMs and multilingual AI, targeting a stated scale of one billion fans by 2030, a claim any prospective partner should weigh against the unresolved liquidation order. A court ordered SuperOne into compulsory liquidation in July 2026. Weeks later, founder Andreas Christensen announced an AI-native fan engagement platform he described as the “operating system of digital experiences” for sports and entertainment. The gap between those two facts is the story.

The Gap SuperOne Is Targeting

Christensen’s announced platform is built around a recognised problem in sports and entertainment: digital fan interactions are generic and one-directional, while physical stadium engagement and broadcast rights generate significant revenue. The pitch is that AI can close that gap by treating each fan as an individual rather than an anonymous data point.

According to SuperOne, the platform would recognise individual fans, operate across multiple languages, learn preferences over time and convert audience activity into structured communities. The company framed AI not as a feature layered onto an existing product but as the primary operating layer of the system itself. How far that framing holds up in practice, given the company’s legal position, is a separate question.

Fan Identity at Scale

SuperOne’s architecture, as described in its announcements, starts with fan identity resolution: ingesting data from user interactions, social media, merchandise purchases and in-app activity to build individual profiles. The stated goal is to move from anonymous traffic to individualised recognition at scale.

The company’s announced infrastructure partnership with BytePlus, ByteDance’s enterprise technology division, is central to this. BytePlus supplies the data pipeline and ML tooling developed across ByteDance’s consumer products, including TikTok and Douyin. The design calls for secure data lakes, identity graphs linking disparate user identifiers, and ML models handling demographic inference and interest clustering. The output is a dynamic fan profile updated with every interaction, intended to serve as the source of truth for all downstream personalisation.

Content Generation Across Languages

SuperOne’s stated target, one billion fans by 2030, requires content delivery across dozens of languages and cultural contexts. The announced approach relies on LLMs, multilingual AI and video generation models working in combination.

SuperOne established a dedicated AI research and engineering unit with Digital One Solutions, staffed with specialists in these areas, according to the company. The design allows for localised trivia questions, personalised marketing messages and short-form video content tailored to a fan’s preferred team or player, delivered in their native language. Recommendation algorithms would refine content delivery based on consumption patterns. BytePlus’s multilingual AI is the cited infrastructure for cross-linguistic reach, and open-weight multilingual models from competitors are making this capability table stakes for any platform targeting global audiences.

Gamification and Community Mechanics

The platform’s commercial logic rests on converting passive viewers into active participants through gamified interactions: esports-style trivia battles, real-time rewards and community-driven initiatives. SuperOne describes itself as an “AI-native gamified fan engagement platform,” with clubs, creators and brands building commercial ventures directly inside those communities.

A pilot SuperOne ran in late 2025 reported 5 million games played over seven months and an annual average revenue per user (ARPU) of $100, according to the company. The underlying AI would handle matchmaking, personalise reward structures based on fan profiles and moderate community activity. Automated triggers would surface personalised challenges or exclusive content based on a fan’s in-platform history. Whether those mechanics produced durable retention rather than short-term activation is not clear from the available figures.

Optimisation and Iteration

The fourth phase in SuperOne’s design is continuous optimisation: analytics dashboards, A/B testing and AI-driven analysis of engagement, retention and virality. Pilot metrics across those dimensions were cited as validation that the mechanics worked. The platform’s AI would identify churn risk, surface content gaps and refine personalisation algorithms in a continuous feedback loop.

In practice, this is standard ML operations applied to a consumer engagement product. The differentiation SuperOne is claiming lies in the combination of fan-specific data types, the gamification layer and BytePlus infrastructure at scale. For enterprises evaluating platforms in this space, real-time data integration and proactive signal generation are increasingly the competitive dividing line.

The Liquidation Problem

The July 2026 court-ordered liquidation is not a footnote. It preceded the August 2026 platform announcements by weeks, and the sequence matters for anyone evaluating SuperOne as a potential partner or platform.

Public records and a critical report from October 2025, alongside a legal analysis in July 2026, allege a pattern of unfulfilled commitments and corporate restarts, with SuperOne having previously pivoted through crypto and metaverse trends since its original launch in 2018. The original 2018 product was described in those reports as an Ethereum smart-contract MLM scheme. These allegations have not been resolved by the August 2026 announcements. The detailed technical architecture Christensen has described may be genuine, or it may repeat an established pattern. The liquidation order, if it stands, would make delivery of any platform operationally impossible. Any enterprise, rights holder or sponsor weighing engagement with SuperOne should treat the legal status as the primary due-diligence question, ahead of the platform’s technical design. The legal liability questions emerging around AI platforms are complex enough without a counterparty already in liquidation proceedings.

Originally published at https://autonainews.com/how-superone-plans-ai-fan-engagement-after-compulsory-liquidation/

Stop LLM Hallucinations: 6 JEPA World Model Breakthroughs

Auton AI News — Sun, 06 Sep 2026 10:12:13 +0000

Key Takeaways

The LLM-JEPA framework, published in September 2025, combines standard LLM training with JEPA objectives and outperforms baseline training across Llama3, Gemma2, OpenELM and Olmo families on benchmarks including GSM8K and Spider.
The WorldLMs approach fine-tunes LLMs on trajectories collected inside VirtualHome, reporting a 64.28% average improvement across 18 downstream tasks, though this figure comes from initial evaluations and independent replication is pending. LLMs are remarkably fluent and embarrassingly literal. Ask one to plan a physical task or reason about cause and effect in the real world and the seams show fast. A cluster of research efforts published between mid-2025 and mid-2026 is attacking that gap directly, by coupling LLMs with JEPA-based world models that learn to simulate reality in abstract, latent space rather than predicting raw tokens. The payoff, if it holds, is an LLM that does not just describe the world but models it.

LeCun’s Case for World Models

Yann LeCun Meta’s Chief AI Scientist and Turing Award laureate, has argued for years that LLMs are architecturally insufficient for general intelligence. His critique is specific: LLMs predict tokens, which means their “knowledge” of how things work in the physical world is shallow by construction. The alternative he advocates is a hybrid system where an LLM handles language and abstract reasoning while a JEPA-style world model handles physical simulation and action planning.

The key distinction in JEPA is where prediction happens. Rather than predicting pixels or words, filling in every missing detail, a JEPA predicts abstract representations in a latent space. That means it can learn high-level causal structure without getting bogged down in surface-level reconstruction. LeCun’s argument is that this latent-space prediction is what separates a model that understands a situation from one that can merely describe it.

Fine-Tuning on Simulated Experience

The “LLMs Meet World Models” project takes LeCun’s architecture in a practical direction. Embodied agents run inside VirtualHome, a household simulation environment, collecting trajectories through both goal-directed planning and random exploration. Those trajectories are then converted into supervised tasks: plan generation, activity recognition, object counting, path tracking. The LLMs are fine-tuned on the resulting data.

The reported result is a 64.28% average improvement across 18 downstream tasks in initial evaluations. That figure comes from the researchers’ own assessment, and independent replication has not been confirmed. One notable engineering detail: to prevent the fine-tuning from eroding the model’s general language ability, the methodology uses Elastic Weight Consolidation combined with LoRA a technique that constrains how much the new training can shift weights that matter for prior tasks.

Synthesising Data When Reality Is Scarce

Real-world grounding data is expensive to collect, often private and rarely diverse enough to cover edge cases. GLIMO, Grounding Large language model with Imperfect world MOdel, addresses this by using proxy simulators to generate training data at scale. An LLM agent-based generator creates instruction datasets automatically, with an iterative self-refining module that filters and improves the output before it reaches the model.

The “imperfect” in the name is deliberate: GLIMO does not assume a simulator that perfectly reproduces reality. It assumes a controlled, programmable environment that is good enough to generate structurally correct trajectories. In robotics and autonomous driving contexts, where annotated real-world data is both scarce and costly, this scalable synthesis approach addresses a concrete bottleneck that limits how far parametric fine-tuning alone can go.

LLM-JEPA: Latent Prediction Meets Language Training

The most direct integration of JEPA into LLM training comes from the LLM-JEPA framework, published in September 2025. The core idea is to run a standard LLM training objective alongside a JEPA objective simultaneously. The JEPA component trains on datasets that offer multiple views of the same underlying knowledge, text and code being the primary pairing, and learns to predict one view’s representation from another in latent space, rather than reconstructing it token by token.

Empirical results show LLM-JEPA outperforming standard LLM training across Llama3, OpenELM, Gemma2 and Olmo families, with gains visible on NL-RX, GSM8K, Spider and RottenTomatoes. The breadth of that benchmark coverage matters: reasoning tasks (GSM8K), structured query generation (Spider) and sentiment classification (RottenTomatoes) are different enough that consistent improvement across all three is harder to dismiss as benchmark overfitting. Whether the gains hold at larger scales and with independent evaluation remains to be seen, but the September 2025 results are the clearest published evidence yet that adding a JEPA objective to LLM pretraining moves the needle on reasoning and generalisation benchmarks.

Industrial Causal Reasoning via Live Simulator Queries

A research paper from August 2026 grounds LLMs in a domain where causal errors carry real operational cost: wastewater treatment plants. The framework compares three grounding modes. The most interesting runs a frozen base LLM, Qwen2.5-32B-Instruct, with live tool calls to a running simulator. Rather than baking simulator knowledge into the model’s weights, the LLM issues queries to the simulator at inference time and synthesises causal answers from the numerical responses. Its causal competence is derived entirely from its ability to interrogate and interpret the simulator in real time, not from anything encoded during training.

A second mode trains a small retriever, a sentence-transformer bi-encoder with roughly 110 million parameters, on question-parameter pairs generated via Monte Carlo sampling. The retriever selects causally relevant parameter subsets, which the LLM then conditions on. Both modes show improvement over parametric fine-tuning alone, and the inference-time grounding result is particularly notable: it suggests that keeping the simulator external and queryable may outperform baking its outputs into weights, at least in domains where the simulator can be kept running alongside the model.

LLMs as Their Own Simulators

The Simia framework inverts the usual framing. Rather than grounding an LLM in an external simulator, Simia uses the LLM itself as the simulator. Simia-SFT prompts the model to generate agent trajectories, alternating user queries, reasoning steps, tool invocations and simulated environment observations, without access to a real testbed. Those synthetic trajectories then serve as supervised fine-tuning data, producible at scale without the cost of real environment execution.

Simia-RL extends this to reinforcement learning, using LLM-generated feedback as the training signal. The obvious question is whether a model simulating its own environment creates a closed loop that amplifies its existing errors rather than correcting them. The Simia results suggest the approach can generate coherent state transitions and tool interactions, though how well that coherence holds in genuinely novel environments, ones outside the distribution of what the LLM has already seen, is the open question the framework has not yet resolved. For multi-agent settings, the risks of this kind of self-referential training are worth examining alongside how even safe models can fail when composited.

Originally published at https://autonainews.com/stop-llm-hallucinations-6-jepa-world-model-breakthroughs/

Google AI Overviews Boost Organic Clicks by 120% for Cited Brands

Auton AI News — Sun, 06 Sep 2026 10:06:09 +0000

Key Takeaways

Google’s AI Overviews now mediate product discovery, appearing on 84% of longer retail searches by November 2025.
Brands cited within AI Overviews gain approximately 120% more organic clicks per impression than uncited brands.
Optimizing content for AI models to process and cite is now crucial for visibility, shifting focus from traditional search rankings. Being cited inside Google‘s AI Overviews now matters more than ranking at the top of traditional search results. Since the feature’s full U.S. launch in May 2024, brands that appear in these AI-generated summaries earn roughly 120% more organic clicks per impression than those that don’t, according to a 2026 Seer Interactive update. The gap is widening fast.

How AI Overviews Changed Product Search

Google’s AI Overviews, previously called the Search Generative Experience (SGE), no longer just point users toward links. They provide direct answers, side-by-side comparisons and curated product shortlists at the very top of results. By May 2025, the feature had expanded to more than 200 countries and 40 languages.

For many commercial searches, a user’s first contact with a product now happens inside an AI summary, not on a retailer’s page or a review site. That shift changes what “showing up” in search actually means for a brand.

Retail Queries Hit Hardest

By November 2025, AI Overviews appeared on 84% of retail searches running nine to ten words long, the kind of longer, comparison-driven queries people use when weighing products or looking for recommendations, according to Search Engine Land’s analysis of query-length data. That’s a sharp jump from single-word searches, where Overview coverage across categories sits closer to 11-16%; length signals purchase intent, and Google has built AI Overviews to meet that intent directly rather than hand the user off to a list of links.

Retailers are also now competing with paid placements inside the same space: Google has been expanding ads alongside AI Overviews, growing from roughly 3% of search results pages in January 2025 to about 40% by November, according to Semrush tracking. For retail brands, that means the AI Overview isn’t just competing for attention against other organic results, it’s increasingly sharing the same real estate with paid listings.

Clicks, Impressions and the Visibility Gap

The overall click-through rate on queries that trigger AI Overviews fell by as much as 61% between June 2024 and September 2025, before recovering to 2.4% by February 2026. Being cited inside the overview, rather than merely ranking below it, is what drives traffic now. That 120% clicks-per-impression advantage for cited brands, reported by Seer Interactive, is the clearest measure of how the value of a search position has shifted.

One consumer survey from October 2025 found that a significant share of respondents said they had already moved away from traditional search, preferring AI-generated results for product and service recommendations. How representative that finding is across the broader population is harder to verify from the available data.

What Brands Need to Do Now

Adapting to AI-driven discovery means rethinking what “optimised content” looks like. The goal is no longer just ranking for keywords, it’s producing content that AI models can process, cite and surface confidently. That means clear headings, direct answers, proper schema markup for products, reviews and articles and substantive coverage that goes beyond thin promotional copy.

Customer reviews carry particular weight. AI systems rely on structured, credible signals to match products with what a user is actually asking for, and authentic review data is one of the clearest such signals available. Google has also shown a preference for pages with embedded video and structured visual content when selecting sources for expanded overview formats, though Google’s E-E-A-T criteria make clear that demonstrated human experience in content remains a factor alongside technical structure.

For brands used to competing on page-one placement, the practical implication is direct: a listing that sits below an AI Overview but isn’t cited inside it is effectively invisible to a large share of users who never scroll past the summary. Getting recommended inside AI Overviews is now the visibility target that matters.

Originally published at https://autonainews.com/google-ai-overviews-boost-organic-clicks-by-120-for-cited-brands/

Google’s Three Gemini Flash Models in Six Weeks Force Enterprise Migration Calls

Auton AI News — Sun, 06 Sep 2026 10:00:05 +0000

Key Takeaways

Google launched three Gemini Flash models in six weeks, a pace that creates real integration overhead for teams building on the API, including a breaking change in 3.7 Flash that deprecated custom temperature settings.
Gemini 3.8 Flash launched September 2, 2026 with introductory pricing that undercuts several mid-tier competitors and benchmark claims positioning it alongside frontier models on coding tasks, according to Google.
Gemini 3.8 Flash Cyber, restricted to vetted security practitioners, claims a real-world vulnerability discovery rate above 70%, according to Google. Google’s release cadence is, effectively, making migration decisions for enterprise teams. Three Gemini Flash models in six weeks, the latest, Gemini 3.8 Flash, landing September 2, 2026, combines introductory pricing that undercuts several mid-tier competitors with benchmark claims that put it alongside frontier-class performers on coding tasks, according to Google. A restricted cybersecurity variant ships alongside it, available only to vetted defenders.

Integration Overhead Builds

Three weeks separated Gemini 3.7 Flash and 3.8 Flash, a gap short enough to create genuine integration overhead for teams building on the API. The 3.7 release already deprecated custom temperature settings, forcing pipeline updates across any deployment that relied on them. Teams running agentic or software engineering workloads on Google AI Studio or the Gemini API face the same recurring choice on each cycle: absorb the migration cost or hold at an older version and forgo the performance gains. At three releases in six weeks, that cadence shows no sign of slowing.

Pricing and Competitive Position

Google’s introductory pricing for 3.8 Flash undercuts several existing mid-tier models while the company claims performance benchmarks comparable to frontier-class models on coding tasks. The combination is deliberate: embed Gemini Flash deeply enough in high-volume workflows that switching carries real cost. Developers managing high-volume workloads are particularly sensitive to per-token economics, and a model that competes on price while claiming frontier-adjacent coding performance narrows the justification for paying more elsewhere.

The longer-term effect, if the strategy holds, is a mid-tier segment forced to reprice. Rivals that built margin assumptions around the previous competitive baseline now face a lower anchor. Google’s apparent objective is less about winning individual evaluations than about making its API tier the default infrastructure layer for cost-sensitive production workloads, with switching costs that accrue silently as integration depth grows.

Agentic Workload Improvements

The 3.8 update targets software engineering and multi-step agentic tasks. Google’s framing is that the model executes additional reasoning steps and iterative tool calls on complex requests rather than processing them in a single pass. For developers building agents that handle code editing, terminal execution or long-horizon planning, that architectural behaviour matters more than aggregate benchmark scores. Whether the gains hold at production scale across varied workloads remains for teams to validate. The model selection pressures CTOs face when building AI-native SDLCs make this kind of frequent incremental improvement harder to defer.

The Cybersecurity Variant

Google released Gemini 3.8 Flash Cyber alongside the main model, restricting access to vetted security practitioners. According to Google, the variant exceeds a 70% real-world vulnerability discovery rate and covers automated patching. The access restriction is notable: it signals Google treating this capability as sensitive infrastructure rather than a general-availability product, consistent with how other vendors have approached AI-assisted vulnerability validation for enterprise security teams.

What the Cadence Signals

Three Flash releases in six weeks is not incremental tuning. It is a deliberate strategy of compressing the gap between model generation and production deployment, keeping developer attention on Google’s API tier. The pricing and the agentic performance focus serve the same objective. For enterprise teams, the practical question is not whether 3.8 Flash outperforms 3.7, it is how frequently they can absorb model migrations without disrupting production systems. Google’s release pace is, in effect, setting that answer for them.

Originally published at https://autonainews.com/googles-three-gemini-flash-models-in-six-weeks-force-enterprise-migration-calls/

Wellington Ratepayers Fund $435,000 Deloitte Report, Mayor Claims AI Wrote

Auton AI News — Sat, 05 Sep 2026 10:12:14 +0000

Key Takeaways

Wellington Mayor Andrew Little revealed “large chunks” of a $435,000 Deloitte report for the City Council were AI-generated, with errors including double-counted staff and $21.5 million in overstated expenses.
The “Future Fit Pōneke” report’s own fine print acknowledged its assumptions needed validation and should not be relied upon for decision-making, yet Deloitte has not offered Wellington ratepayers a refund.
A parallel Deloitte AI controversy in Australia ended with a partial $97,000 refund on a $440,000 contract after fabricated references and a false judicial quotation were found in a government report. Wellington’s City Council paid $435,000 for a Deloitte consulting report that Mayor Andrew Little says contained “large chunks” written by AI, double-counted staff and overstated expenses by $21.5 million. Little made the disclosure on September 2, 2026, and it was not Deloitte’s first time at this particular rodeo.

What the Report Got Wrong

Released in November 2025, “Future Fit Pōneke” initially claimed Wellington City Council employed 330 excess staff. That figure quickly unravelled. Deloitte had counted both occupied and vacant roles in its total headcount, artificially inflating the surplus. The firm also reportedly drew on three-year-old employment data sourced from the Taxpayers’ Union rather than current council figures.

The financial analysis was no more reliable. The report overstated staffing expenses by at least $21.5 million, in part by calculating all employees at a full-time salary regardless of actual hours worked. It also flagged any role containing the word “project” in its title as a duplicate, apparently without examining what those roles actually did.

Public Service Association National Secretary Duane Leo called the report a “flimsy PowerPoint presentation” that “lacks any depth, rigour or even a basic understanding of what the Council’s role is.” Leo also noted that the report’s own fine print acknowledged its assumptions required validation and should not be relied upon for decision-making, a disclaimer that sat awkwardly alongside Deloitte’s headline recommendations.

Leo raised a further concern: Deloitte’s assumption that AI could deliver productivity gains of up to 50% was offered as justification for staff reductions, with no evidence or methodology for how replacing experienced workers with AI tools would achieve that result. Leo described the combination of unproven AI assumptions and recommended cuts as a “recipe for disaster” for vulnerable residents who depend on face-to-face services, and called for the report’s rejection. That critique lines up with St. Louis Fed research published July 31, 2026, which found that roughly 95% of AI-related productivity statements on corporate earnings calls are forward-looking claims about future gains rather than realised results, a gap the PSA argued carried direct consequences when those assumptions were used to justify workforce reductions in a $435,000 report.

The Australian Precedent

In October 2025, Deloitte submitted a 237-page report to the Australian federal government, also valued at $440,000, that was later found to contain fabricated academic references, non-existent footnotes and a false quotation attributed to a Federal Court judge. The AI tool used was reportedly Azure OpenAI GPT-4o, according to reports. Following public and academic scrutiny, Deloitte Australia agreed to a partial refund of approximately $97,000. The partner responsible for the report is reported to have left the firm.

Reviewers of the Australian incident argued that GPT-4o did not malfunction and that the failure lay in Deloitte’s review process. The same assessment applies to Wellington: errors in headcount, salary calculations and role classifications passed through delivery to a government client without correction.

Two Countries, Two Outcomes

In Australia, Deloitte issued a partial refund and a partner departed. In New Zealand, Wellington’s mayor has reportedly been ignored in calls for rectification, and no reduction in fees has been offered. Deloitte has stated it “uses a range of tools and technologies across its work, including AI-enabled tools,” but has not publicly addressed the specific errors in the Wellington report, according to reports.

For public sector procurement teams beyond Wellington, the practical lesson is contractual. Where AI is used in government consulting work, contracts without explicit disclosure requirements, quality-control obligations and defined remedies for material inaccuracies leave clients with limited recourse when errors surface. The Deloitte case illustrates what that gap looks like when a $435,000 report goes wrong and no refund follows.

Originally published at https://autonainews.com/wellington-ratepayers-fund-435000-deloitte-report-mayor-claims-ai-wrote/

Adobe Catalog Agent Helps AI Systems Discover Magento Products

Auton AI News — Sat, 05 Sep 2026 10:06:10 +0000

Key Takeaways

Adobe Commerce introduced ‘Product Discovery on LLM Surfaces’ and the Adobe Catalog Agent in late July 2026.
The Adobe Catalog Agent layers structured product data onto existing product detail pages for AI crawlers.
Merchants must maintain complete and accurate product information for effective AI shopping assistant recommendations. AI traffic to U.S. retail sites has seen substantial growth, according to Adobe Digital Insights. For Magento merchants, that growth raises an urgent question with a concrete answer: if an AI assistant cannot read your product catalog, it cannot recommend your products.

Making Catalogs Machine-Readable

Adobe’s response is a feature called ‘Product Discovery on LLM Surfaces,’ announced July 27, 2026. The core mechanism is the Adobe Catalog Agent, which layers structured product data, names, attributes, specifications, compatibility, availability and pricing, on top of existing product detail pages. Human shoppers see nothing different. AI crawlers and LLM-powered discovery systems get the richer context they need to make confident recommendations.

Access to the Catalog Agent integration is currently restricted, and Adobe describes the catalog-enrichment workflow as beta, so availability may vary by account. The same pages, images and checkout flows stay in place. What changes is the machine-readable layer underneath, built to align product information with how AI assistants parse and present shopping results.

What Merchants Still Need to Do

The Catalog Agent handles the structured-data layer, but catalog quality still falls to the merchant. AI shopping assistants depend on complete, accurate product information to answer natural-language queries, compare options and guide customers through complex purchases. Thin or inconsistent catalog data limits what any AI layer can do with it.

Third-party extensions for Magento 2 cover additional ground, including automated generation of product descriptions, category content and SEO metadata at scale. Recommendation engines using customer behaviour data can drive meaningful revenue uplift, though vendor figures on the precise contribution vary and typically reflect best-case deployments.

Originally published at https://autonainews.com/adobe-catalog-agent-helps-ai-systems-discover-magento-products/

Windows 11 December 2025 Update Requires AI Agent File Consent

Auton AI News — Sat, 05 Sep 2026 10:00:05 +0000

Key Takeaways

Microsoft’s December 2025 Windows 11 update introduced a mandatory consent framework for AI agents accessing protected folders.
Users must grant explicit, per-agent permission for six core personal directories, which are treated as a single unit.
AI agents operate in an isolated Agent Workspace to counter cross-prompt injection, with Microsoft warning of security risks. As of December 2025, Microsoft requires explicit user consent before any AI agent can touch personal files in Windows 11, and that permission does not carry over from one agent to another. The update locks six core folders (Desktop, Documents, Downloads, Music, Pictures and Videos) by default, and each AI assistant must request access individually before it can read or write anything inside them.

The change is a direct response to what Microsoft calls “agentic” AI features: tools capable of executing multi-step tasks autonomously inside the operating system, from summarising documents to reorganising files. Earlier disclosures about the Agent Workspace had left open the question of how much default access these tools would have. The December update answers that clearly: even with experimental agent features switched on, AI tools get no automatic access to personal folders.

How the Permission System Works

When an agent attempts to access files, Windows presents a consent prompt. Users can grant permanent access, require reauthorisation on each interaction, or block requests entirely. These settings sit under System > AI Components > Agents in the Windows 11 Settings app and apply on a per-agent basis, approval for one tool does not extend to others installed on the same machine.

The six protected folders are treated as a single unit. There is no option to allow an agent into Documents while blocking it from Pictures; the permission covers all six directories or none of them. Microsoft has indicated the permission model may become more granular over time but for now the all-or-nothing structure is what ships with experimental builds.

Separately, Windows 11 also tests discrete connectors that govern agent interactions with system applications such as File Explorer and Settings, distinct from the folder-access controls. The modular design lets users allow an agent to adjust system settings while blocking its access to personal photos, a deliberate attempt to keep capability and privacy concerns in separate lanes.

The Security Architecture Behind Agent Workspace

Cross-prompt injection, known as XPIA, is the specific threat Microsoft points to in its documentation. The attack works by embedding malicious instructions inside ordinary documents or interface elements, causing an agent to override its intended task and take unintended actions such as exfiltrating data or installing malware. To contain that risk, agents run inside an isolated Agent Workspace: a separate Windows session, parallel to the user’s session, that enforces policies, logs activity for auditing and cannot disrupt the active desktop.

Each agent also operates under its own account, distinct from the user’s personal account, establishing a clear boundary between agent activity and user activity. Microsoft’s stated principle is least privilege: agent permissions may not exceed those of the user who activated the agent. The feature is off by default, and Microsoft’s documentation warns explicitly that enabling it introduces risks the company’s position is that it should only be switched on by users who understand what that means.

Copilot app version 1.25034.133.0, rolled out across Insider Channels in 2025, allowed users to find, open and query file contents locally. Users can enable or disable that functionality directly within Copilot’s own settings.

Originally published at https://autonainews.com/windows-11-december-2025-update-requires-ai-agent-file-consent/