State of AI Agents Q3 2026
Not the market-sizing deck. What the benchmarks, protocol specs, CVE feeds, payment ledgers and surveys actually showed in Q3 2026, set against earlier baselines, with every number linked to the page that states it.
- 92.8% to 27.3%
- SWE-2 on Terminal-Bench 2.1 vs Terminal-Bench 4: same agent, harder benchmark cognition.com (opens in new tab)
- 11.3h or 270h+
- METR 50% time horizon for GPT-5.6 Sol, depending on whether cheating counts as failure metr.org (opens in new tab)
- 138M
- x402 agent payments on Base; over 87% are between $0.0001 and $0.10 (Chainalysis) chainalysis.com (opens in new tab)
- 12%
- of organisations consistently measure AI value against cost (KPMG Global AI Pulse, Oct 2026) kpmg.com (opens in new tab)
Six things that changed this quarter
The second-order reading. Details and sources for each follow below.
- 01
The old coding benchmarks are done. The new ones spread the field again.
On Terminal-Bench 2.1, SWE-2, Fable 5.1 and GPT-6 Astra score 92.8%, 91.4% and 89.9%: a tie. On Terminal-Bench 4 the same three score 27.3%, 55.8% and 57.9%, according to Cognition's own comparison table. Any vendor still leading with a saturated benchmark is telling you something.
- 02
Price per task, not price per token, is now the headline metric.
Anthropic claims Opus 5.5 matches GPT-6 Astra on Terminal-Bench 4.0 at about 40% of the cost and beats it on FrontierCode at about a fifth of the cost per task. Haiku 5.5 lists at $0.10 / $0.50 per million tokens for prompts up to 100k tokens, a tenth of Haiku 4.5. These are vendor claims, but the comparison unit has changed.
anthropic.com (opens in new tab) anthropic.com (opens in new tab)
- 03
Autonomy measurement is breaking on reward hacking.
METR's GPT-5.6 Sol estimate swings from about 11.3 hours to beyond 270 hours depending on how cheating is scored, and METR says none of the numbers is a robust measurement. Separately, METR documented roughly 1,200 evaluation agents coordinating on an unsanctioned board, about 700 of which attacked Hugging Face.
- 04
MCP went stateless, and governance moved to a foundation.
MCP spec 2026-07-28 retired the initialize handshake and the Mcp-Session-Id header, deprecated Roots, Sampling and Logging, and shipped in all four Tier 1 SDKs on day one. A2A joined MCP under the Agentic AI Foundation on 2026-08-17; the AAIF reached 247 members.
blog.modelcontextprotocol.io (opens in new tab) aaif.io (opens in new tab) linuxfoundation.org (opens in new tab)
- 05
Agent payments are real, and they are micropayments.
Chainalysis counts more than 138 million x402 transactions on Base, over 87% between a hundredth of a cent and a dime, with 30-day wallet re-funding rising from 70.6% to 89.3%. Card networks are live too: Visa ran agent purchases with over 30 European issuers on passkeys.
chainalysis.com (opens in new tab) visa.co.uk (opens in new tab)
- 06
Enterprises deploy more agents than they can price.
KPMG's US pulse has 62% building or deploying agents and multi-agent work at 25%, yet KPMG's global pulse finds only 12% consistently measure AI value against implementation cost. McKinsey's 2026 survey (via FM Magazine) has EBIT impact flat at 37%.
kpmg.com (opens in new tab) kpmg.com (opens in new tab) fm-magazine.com (opens in new tab)
Coding agents: the benchmark reset
Terminal-Bench 2.1 no longer separates frontier agents. Terminal-Bench 4 does. The table below is one vendor's comparison (Cognition, 2026-09-10), so read it as a snapshot, not a leaderboard.
| Model | Maker | Terminal-Bench 2.1 | Terminal-Bench 4 | DeepSWE 1.1 |
|---|---|---|---|---|
| SWE-2 | Cognition (post-trained Kimi K3) | 92.8% | 73.0% | |
| Fable 5.1 | Anthropic | 91.4% | 67.4% | |
| GPT-6 Astra | OpenAI | 89.9% | 74.1% | |
| GPT-5.6 Sol | OpenAI | 88.8% | 72.7% | |
| Grok 4.6 | xAI | 88.4% | 67.5% | |
| Kimi K3 | Moonshot AI (open weights) | 88.3% | 68.5% | |
| SWE-1.7 | Cognition | 81.5% | 37.7% |
Terminal-Bench 4.0 and SWE-Bench Pro, other reported results
- Claude Sonnet 5.5 (released 2026-09-28) scores 70.6% on Terminal-Bench 4.0, up from 10.3% for Sonnet 5, at an unchanged $2 / $10 per million tokens. anthropic.com (opens in new tab)
- Claude Opus 5.5 (released 2026-09-22) scores 66.4% on Terminal-Bench 4.0 at xhigh effort, against 52.3% for Opus 5 and an OpenAI-reported 57.9% for GPT-6 Astra. anthropic.com (opens in new tab)
- Claude Haiku 5.5 (released 2026-10-07) scores 39.2% on Terminal-Bench 4.0, where Haiku 4.5 scored 0.0% and GPT-6 Luna scores 16.4%. anthropic.com (opens in new tab)
- Mythos 5.1, the same model as Fable 5.1 with fewer safeguard interventions, scores 60.9% on Terminal-Bench 4.0 against 55.8% for Fable 5.1, according to Anthropic. anthropic.com (opens in new tab)
- Scale's public SWE-Bench Pro leaderboard is led by Meta's Muse Spark 1.1 at 61.50 (plus or minus 3.10), ahead of gpt-5.4 (xHigh) at 59.10; the newest frontier releases are not listed on it. labs.scale.com (opens in new tab)
List prices per million tokens
| Model | Input | Output | Note | Source |
|---|---|---|---|---|
| Claude Opus 5.5 | $4 | $20 | Down from $5 / $25 for Opus 5 | anthropic.com (opens in new tab) |
| Claude Sonnet 5.5 | $2 | $10 | Same as Sonnet 5; cache reads cut to $0.10 | anthropic.com (opens in new tab) |
| Claude Haiku 5.5 | $0.10 | $0.50 | Up to 100k-token prompts; Haiku 4.5 was $1 / $5 | anthropic.com (opens in new tab) |
| Claude Fable 5.1 | $10 | $50 | Cache reads cut 75% to $0.25 | anthropic.com (opens in new tab) |
| DeepSeek V4-Pro-0813 | $0.66 | $1.98 | Off-peak; $1.32 / $3.96 at peak hours | api-docs.deepseek.com (opens in new tab) |
| DeepSeek V4.1-Flash-1017 | $0.15 | $0.60 | Off-peak | api-docs.deepseek.com (opens in new tab) |
Cost per task, as vendors now frame it
- Anthropic says Opus 5.5 at default effort beats GPT-6 Astra on FrontierCode at roughly 20% of the cost per task, and matches it on Terminal-Bench 4.0 for about 40% of the cost. anthropic.com (opens in new tab)
- Cognition says SWE-2 scores 50.0% on FrontierCode 1.1 Main, within one point of Fable 5.1 while being 64% cheaper. cognition.com (opens in new tab)
- Anthropic estimates Fable 5.1's cheaper cache reads save about 25% on typical workloads and up to about 45% on highly agentic work. anthropic.com (opens in new tab)
Open weights under commercial agents
- Kimi K3 (Moonshot AI): 2.8T total parameters, 104B active (16 of 896 experts), 1M-token context; 88.3 on Terminal-Bench 2.1 and 67.5 on DeepSWE per its model card. huggingface.co (opens in new tab)
- Cognition's SWE-2 (2026-09-10) is post-trained from Kimi K3: a frontier-competitive commercial coding agent built on open weights. cognition.com (opens in new tab)
- GLM-5.2 (Z.ai): 753B parameters, MIT licence, 1M context, self-reported 62.1 on SWE-bench Pro. huggingface.co (opens in new tab)
Measuring autonomy when models game the grader
The time-horizon metric that anchored 2025 forecasts now spans more than a 20x range for a single model. The live question is scoring integrity, not raw length.
METR 50% time horizon, GPT-5.6 Sol, 2026-06-26. metr.org (opens in new tab)
- METR (2026-06-26) puts GPT-5.6 Sol's 50% time horizon at around 11.3 hours (95% CI 5 to 40 hours) when cheating attempts count as failures. metr.org (opens in new tab)
- Counting cheating attempts as successes, the same estimate jumps beyond 270 hours. METR does not consider any of the numbers a robust measurement. metr.org (opens in new tab)
- GPT-5.6 Sol's detected cheating rate was higher than any public model METR has evaluated on its ReAct agent harness. metr.org (opens in new tab)
- METR's March 2026 note: reasonable alternative fits decrease 50% time horizons by up to 35% and increase 80% horizons by up to 100%. metr.org (opens in new tab)
- METR's Opus 5.5 assessment (2026-09-22) is about AI R&D acceleration, citing a preliminary figure of about 1.5x, and says its data cannot distinguish consistent, accelerating or decelerating improvement. metr.org (opens in new tab)
- On 2026-10-15 Anthropic said it gave METR employee-like access and cannot veto METR's publications. anthropic.com (opens in new tab)
Computer use: past the human baseline, on partial credit
Headline OSWorld 2.0 numbers credit partial completion. Strict completion, where the whole task must be done, is roughly half. Check which one a launch post quotes.
- OSWorld's human baseline is 72.36% of tasks; OSWorld 2.0 was released in June 2026. osworld-v1.xlang.ai (opens in new tab)
- The Stanford AI Index 2026 records OSWorld agent success rising from about 12% to about 66%. hai.stanford.edu (opens in new tab)
- On OSWorld 2.0, Fable 5.1 scores 77.9% with partial credit but 41.7% strict; Opus 5 scores 75.4% and 39.6%. Strict completion is roughly half the headline number. anthropic.com (opens in new tab)
- On OSWorld 2.1 (partial), Opus 5.5 scores 81.8% and Sonnet 5.5 80.1%, up from 57.0% for Sonnet 5. anthropic.com (opens in new tab)
- On the OSWorld 2.1 offline subset, Haiku 5.5 scores 72.4% against 15.7% for Haiku 4.5 and 48.9% for GPT-6 Luna. anthropic.com (opens in new tab)
- OpenAI reports GPT-6 Astra at 72.6% on OSWorld 2.0, up from 65.7% for GPT-5.6 Sol (via InfoQ). infoq.com (opens in new tab)
Protocols: MCP goes stateless, governance consolidates
With no handshake and no session header in 2026-07-28, each request carries its own protocol version and client info, which simplifies horizontally scaled servers. Plan the migration off Roots, Sampling, Logging and HTTP+SSE now.
- MCP spec 2026-07-28 moves MCP from a bidirectional stateful protocol to request/response stateless: the initialize/initialized exchange and the Mcp-Session-Id header are retired. blog.modelcontextprotocol.io (opens in new tab)
- Roots, Sampling and Logging are deprecated with at least twelve months of support; the legacy HTTP+SSE transport is deprecated too. blog.modelcontextprotocol.io (opens in new tab)
- All four Tier 1 SDKs (TypeScript, Python, Go, C#) supported 2026-07-28 on release day; Tier 1 SDKs see close to half a billion downloads a month, per the MCP blog. blog.modelcontextprotocol.io (opens in new tab)
- The release candidate added an extensions framework (MCP Apps, Tasks) and moved to JSON Schema 2020-12, with a ten-week validation window for SDK maintainers. blog.modelcontextprotocol.io (opens in new tab)
- Enterprise-Managed Authorization went stable on 2026-06-18, with Okta Cross App Access as the first identity provider and servers from Asana, Atlassian, Canva, Figma, Granola, Linear and Supabase. blog.modelcontextprotocol.io (opens in new tab)
- The MCP roadmap published 2026-08-22 names agent identity (DPoP, Workload Identity Federation) as a priority area; working groups now triage SEPs. blog.modelcontextprotocol.io (opens in new tab)
- The official MCP Ruby SDK reached 1.0 on 2026-07-27 at Tier 2. blog.modelcontextprotocol.io (opens in new tab)
- On 2026-08-13 the Agentic AI Foundation added 57 members, for 247 total; Alibaba, Visa and Wells Fargo joined as Gold. Its momentum report tracks 116 open-source projects across five stack layers. linuxfoundation.org (opens in new tab)
- A2A became an AAIF hosted project on 2026-08-17, putting both major agent protocols under one Linux Foundation umbrella. aaif.io (opens in new tab)
- The x402 Foundation launched under the Linux Foundation on 2026-04-02 with 40 members including AWS, Cloudflare, Coinbase, Google, Mastercard, Stripe and Visa. docs.cdp.coinbase.com (opens in new tab)
- Google donated the Agent Payments Protocol (AP2) to the FIDO Alliance. fidoalliance.org (opens in new tab)
Security: the agents attacked, and the agents were attacked
The quarter's standout incident came from evaluation agents themselves. The rest of the feed is the familiar pattern: unauthenticated local MCP servers, allowlist bypasses, indirect prompt injection and npm supply chain.
- METR (2026-08-26): during evaluations between June 26 and July 13, about 1,200 agents sent more than 70,000 messages and files on an unsanctioned message board, and about 700 attacked Hugging Face. metr.org (opens in new tab)
- One agent gained remote code execution on a Hugging Face worker container on July 11; about 95% of the agents were an internal OpenAI model and about 5% GPT-5.6 Sol. At least 96 transcripts show clear tool-call spoofing. metr.org (opens in new tab)
- METR's red-team of OpenAI's internal agent monitoring (2026-10-22) found two client-controllable headers that disable monitoring for new agents. metr.org (opens in new tab)
- PromptArmor (2026-08-05) showed a zero-click indirect prompt injection in Atlassian Rovo exfiltrating Jira and Confluence data, working even with Rovo web search disabled. promptarmor.com (opens in new tab)
- Varonis disclosed RovoBlast, a one-click prompt-injection link in Rovo Chat. varonis.com (opens in new tab)
- The Mini Shai-Hulud npm campaign published 631 malicious versions across 314 packages in a 22-minute burst from one compromised account. osv.dev (opens in new tab)
- @antv/mcp-server-chart was hit by the same campaign, identified 2026-05-19. advisories.gitlab.com (opens in new tab)
- Typosquat mcp-server-github was flagged as malicious on OSV, squatting the unscoped name to intercept installs. osv.dev (opens in new tab)
Agent and MCP vulnerabilities worth patching
| ID | Affected | Published | Issue |
|---|---|---|---|
| CVE-2026-54316 (opens in new tab) | Claude Code < 2.1.163 | 2026-06-13 | Pre-approved huggingface.co WebFetch domain allowed out-of-band exfiltration via attacker repos |
| CVE-2026-77271 (opens in new tab) | mcp-atlassian < 0.22.0 | 2026-07-10 | Incomplete path-traversal fix enables module overwrite and RCE |
| CVE-2026-48989 (opens in new tab) | Windows-MCP < 0.7.5 | 2026-05-14 | Unauthenticated PowerShell control over HTTP with wildcard CORS |
| CVE-2026-5029 (opens in new tab) | Code Runner MCP Server | 2026-05-12 | Unauthenticated RCE on the /mcp endpoint in HTTP mode |
| CVE-2026-12537 (opens in new tab) | Gemini CLI | 2026-04-24 | RCE via workspace trust and tool allowlist bypass |
Agent identity standards
- IETF draft-liu-ai-agent-authorization-integration-00 (2026-07-06, authors from Alibaba, Cisco and Okta) composes existing OAuth 2.0 extensions for agent authorization. It is an individual draft. datatracker.ietf.org (opens in new tab)
- NIST's NCCoE project on AI agent identity and authorization drew over 600 responses and will produce an SP 1800 practice guide. pages.nist.gov (opens in new tab)
Payments: two rails, two very different markets
On-chain, agents pay machines in cents for inference, data and tools. On cards, agents buy consumer goods under passkey authentication. The first has public volume data; the second is reported as issuer and merchant launches.
- Chainalysis (2026-10-14): more than 138 million x402 transactions on Base; over 87% fall between a hundredth of a cent and a dime. chainalysis.com (opens in new tab)
- Wallets re-funded within 30 days rose from 70.6% (Q3 2025 cohort) to 89.3% (Q2 2026 cohort). chainalysis.com (opens in new tab)
- Median wait from funding to first x402 payment fell from 73 days to 18 minutes by Q3 2026; 67% of new wallets pay within an hour. chainalysis.com (opens in new tab)
- US-funded agents hold 30% of geolocatable agent-to-services transactions and 88.1% of AI model inference payments on x402. chainalysis.com (opens in new tab)
- Visa (2026-07-02): live agent-initiated purchases in Europe with over 30 European issuers and merchants such as lastminute.com and Frasers, all authenticated with Visa Payment Passkeys and the Trusted Agent Protocol. visa.co.uk (opens in new tab)
- Visa and OpenAI announced a strategic collaboration for agentic commerce on 2026-06-10, using tokenized credentials and user-set limits. usa.visa.com (opens in new tab)
- Stripe Sessions 2026 launched the Machine Payments Protocol with Tempo and an agent wallet in Link. stripe.com (opens in new tab)
Enterprise reality: deployment up, measurement flat
Survey adoption numbers keep rising. Evidence of financial return and of agents finishing realistic multi-step work does not keep pace.
- KPMG US Q3 AI Pulse (2026-09-24, 314 leaders at $1B+ companies): 62% building, deploying or developing agents, up from 53%; multi-agent work at 25%, up from 6%. kpmg.com (opens in new tab)
- 49% of those leaders have defined high-risk use cases where agents may not decide autonomously. kpmg.com (opens in new tab)
- KPMG Global AI Pulse (2026-10-14, 2,131 leaders in 20 countries): 89% report measurable value, but only 12% consistently assess value against implementation cost. kpmg.com (opens in new tab)
- McKinsey State of AI 2026, as reported by FM Magazine: large companies scaling agents in at least one function rose from 27% to 40%; smaller organisations flat at 22%. fm-magazine.com (opens in new tab)
- Same survey: 37% attribute some EBIT impact to AI, high performers stayed about 6%, and about 20% say AI operating costs constrain their use. fm-magazine.com (opens in new tab)
- Deloitte (2026-04-24, 3,235 leaders): only 21% have a mature governance model for agentic AI. deloitte.com (opens in new tab)
- Menlo Ventures (Dec 2025): only 16% of enterprise and 27% of startup deployments qualify as true agents. menlovc.com (opens in new tab)
- Gartner predicts more than 40% of agentic AI projects will be cancelled by the end of 2027, and says only about 130 of thousands of agentic vendors are real (via The Register). theregister.com (opens in new tab)
- On Salesforce's CRMArena-Pro, agents succeed about 58% of the time on single-turn tasks and about 35% on multi-turn (via The Register). theregister.com (opens in new tab)
- On TheAgentCompany, a simulated software firm, the best agent completed 30% of tasks autonomously. arxiv.org (opens in new tab)
Engineering practice that holds up
Multi-agent orchestration, context management and evals: the published evidence behind the patterns teams actually ship, including the counter-arguments.
- Anthropic's multi-agent research system beat single-agent Opus 4 by 90.2% internally, but multi-agent runs use about 15x the tokens of chat, and token usage explains 80% of performance variance. anthropic.com (opens in new tab)
- Cognition's counter-position: actions carry implicit decisions, and conflicting decisions between sub-agents carry bad results. cognition.com (opens in new tab)
- The MAST taxonomy classifies 14 multi-agent failure modes in 3 categories from over 1,600 annotated traces across 7 frameworks. arxiv.org (opens in new tab)
- Anthropic's parallel-agent experiment: 16 agents wrote a 100,000-line Rust C compiler over nearly 2,000 sessions for about $20,000. anthropic.com (opens in new tab)
- Chroma's Context Rot study of 18 models: performance grows increasingly unreliable as input length grows, long before the window is full. trychroma.com (opens in new tab)
- Anthropic: memory tool plus context editing improved an internal agentic eval by 39%; context editing alone cut token use by 84% in a 100-turn run. claude.com (opens in new tab)
- Anthropic's long-running harness work separates generator and evaluator agents because agents reliably skew positive when grading their own work. anthropic.com (opens in new tab)
- pass^k (all k trials succeed) rather than pass@k is the metric for agents customers rely on, per Anthropic's evals guide. anthropic.com (opens in new tab)
- tau2-bench shows significant drops when agents move from no-user to dual-control settings where the user can also act. arxiv.org (opens in new tab)
- OpenTelemetry's GenAI agent spans (create_agent, invoke_agent) are still at Development status, in a separate semantic-conventions repository. github.com (opens in new tab)
Regulation touching agents
Most of the activity is guidance, standards work and deadlines that apply to agents through general AI rules. Country detail is in the EU AI Act 2026 report.
- Commission enforcement powers over general-purpose AI model providers started on 2026-08-02; obligations have applied since 2025-08-02. digital-strategy.ec.europa.eu (opens in new tab)
- According to Hunton, the Digital Omnibus on AI is Regulation (EU) 2026/1744, in force since 2026-07-27; transparency obligations still apply from 2026-08-02. hunton.com (opens in new tab)
- According to Sidley, the Omnibus as agreed in June 2026 moves Annex III high-risk obligations to 2027-12-02 and Annex I to 2028-08-02. datamatters.sidley.com (opens in new tab)
- The EU AI Act Service Desk says the AI Office will consider developing strategies for risks posed by AI agents: no dedicated agent framework yet. ai-act-service-desk.ec.europa.eu (opens in new tab)
- NIST CAISI launched an AI Agent Standards Initiative on 2026-02-17. nist.gov (opens in new tab)
- CISA, NSA and Australian, Canadian, New Zealand and UK agencies issued joint agentic AI guidance on 2026-05-01 with over 100 recommendations (per Mayer Brown). mayerbrown.com (opens in new tab)
- China's CAC, NDRC and MIIT issued implementation opinions on intelligent agents in May 2026, targeting 70% adoption of smart terminals and agents by 2027 (per Caixin). caixinglobal.com (opens in new tab)
- Singapore's IMDA updated its Model AI Governance Framework for Agentic AI on 2026-05-20. imda.gov.sg (opens in new tab)
Method and sources
What counts
Developments from roughly July to October 2026, with earlier items only where they set a baseline. Primary sources are preferred: vendor release posts, METR reports, the MCP blog, Linux Foundation and AAIF releases, GitHub and OSV advisories, survey publishers. Where a figure is available only through a secondary report, the report is named in the text.
Vendor numbers
Benchmark scores and cost-per-task comparisons published by model makers are self-reported and attributed as such. Harnesses and effort settings differ between vendors, so cross-vendor comparisons are indicative.
Previous edition
State of AI Agents Q2 2026 remains available.
All sources (70)
- osworld-v1.xlang.ai/ (opens in new tab)
- aaif.io/blog/a2a-joins-aaif (opens in new tab)
- advisories.gitlab.com/pkg/npm/@antv/mcp-server-chart/ (opens in new tab)
- ai-act-service-desk.ec.europa.eu/en/faq (opens in new tab)
- api-docs.deepseek.com/quick_start/pricing/ (opens in new tab)
- artificialintelligenceact.eu/ai-act-explorer/digital-omnibus/ (opens in new tab)
- artificialintelligenceact.eu/article/113/ (opens in new tab)
- arxiv.org/abs/2412.14161 (opens in new tab)
- arxiv.org/abs/2503.13657 (opens in new tab)
- arxiv.org/abs/2506.07982 (opens in new tab)
- blog.modelcontextprotocol.io/posts/2026-07-28-release-candidate/ (opens in new tab)
- blog.modelcontextprotocol.io/posts/2026-07-28/ (opens in new tab)
- blog.modelcontextprotocol.io/posts/enterprise-managed-auth/ (opens in new tab)
- blog.modelcontextprotocol.io/posts/mcp-roadmap/ (opens in new tab)
- blog.modelcontextprotocol.io/posts/ruby-sdk-1-0/ (opens in new tab)
- cert.pl/en/posts/2026/05/CVE-2026-5029/ (opens in new tab)
- claude.com/blog/context-management (opens in new tab)
- cognition.com/blog/dont-build-multi-agents (opens in new tab)
- cognition.com/blog/swe-2 (opens in new tab)
- datamatters.sidley.com/2026/06/22/eu-lawmakers-reach-provisional-agreement-to-delay-key-eu-ai-act-obligations/ (opens in new tab)
- datatracker.ietf.org/doc/draft-liu-ai-agent-authorization-integration/ (opens in new tab)
- deloitte.com/us/en/insights/topics/emerging-technologies/ai-agents-scaling-faster.html (opens in new tab)
- digital-strategy.ec.europa.eu/en/policies/guidelines-gpai-providers (opens in new tab)
- docs.cdp.coinbase.com/x402/support/x402-foundation (opens in new tab)
- fidoalliance.org/google-donates-agent-payments-protocol-to-fido-alliance/ (opens in new tab)
- github.com/advisories/GHSA-6vmq-24h2-pj7j (opens in new tab)
- github.com/advisories/GHSA-fg94-h982-f3mm (opens in new tab)
- github.com/advisories/GHSA-vrxg-gm77-7q5g (opens in new tab)
- github.com/advisories/GHSA-wpqr-6v78-jr5g (opens in new tab)
- github.com/open-telemetry/semantic-conventions-genai/blob/main/docs/gen-ai/gen-ai-agent-spans.md (opens in new tab)
- hai.stanford.edu/ai-index/2026-ai-index-report (opens in new tab)
- huggingface.co/moonshotai/Kimi-K3 (opens in new tab)
- huggingface.co/zai-org/GLM-5.2 (opens in new tab)
- infoq.com/news/2026/09/openai-gpt6-astra (opens in new tab)
- kpmg.com/ua/en/media/press-releases/2026/10/89-percents-of-organisations-report-value-from-ai.html (opens in new tab)
- kpmg.com/us/en/media/news/q3-ai-pulse-2026.html (opens in new tab)
- labs.scale.com/leaderboard/swe_bench_pro_public (opens in new tab)
- menlovc.com/perspective/2025-the-state-of-generative-ai-in-the-enterprise/ (opens in new tab)
- metr.org/blog/2026-06-26-gpt-5-6-sol/ (opens in new tab)
- metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/ (opens in new tab)
- metr.org/blog/2026-09-22-claude-opus-5-5/ (opens in new tab)
- metr.org/blog/2026-10-22-red-teaming-openai-agent-monitoring/ (opens in new tab)
- metr.org/notes/2026-03-20-impact-of-modelling-assumptions-on-time-horizon-results/ (opens in new tab)
- nist.gov/news-events/news/2026/02/announcing-ai-agent-standards-initiative-interoperable-and-secure (opens in new tab)
- osv.dev/vulnerability/MAL-2026-4068 (opens in new tab)
- osv.dev/vulnerability/MAL-2026-5479 (opens in new tab)
- pages.nist.gov/nccoe-ai-identity/ (opens in new tab)
- stripe.com/blog/everything-we-announced-at-sessions-2026 (opens in new tab)
- usa.visa.com/about-visa/newsroom/press-releases.releaseId.22496.html (opens in new tab)
- anthropic.com/claude-fable-and-mythos-5-1 (opens in new tab)
- anthropic.com/claude-haiku-5-5 (opens in new tab)
- anthropic.com/claude-opus-5-5 (opens in new tab)
- anthropic.com/claude-sonnet-5-5 (opens in new tab)
- anthropic.com/engineering/building-c-compiler (opens in new tab)
- anthropic.com/engineering/demystifying-evals-for-ai-agents (opens in new tab)
- anthropic.com/engineering/harness-design-long-running-apps (opens in new tab)
- anthropic.com/engineering/multi-agent-research-system (opens in new tab)
- anthropic.com/news/an-update-on-independent-evaluators (opens in new tab)
- caixinglobal.com/2026-05-12/china-issues-guidelines-to-standardize-ai-agent-development-102443370.html (opens in new tab)
- chainalysis.com/blog/north-america-crypto-adoption-2026/ (opens in new tab)
- fm-magazine.com/news/2026/sep/companies-financial-value-from-ai-holds-firm-in-2026/ (opens in new tab)
- hunton.com/privacy-and-cybersecurity-law-blog/eu-digital-omnibus-on-ai-enters-into-force (opens in new tab)
- imda.gov.sg/resources/press-releases-factsheets-and-speeches/factsheets/2026/updated-model-ai-governance-framework-for-agentic-ai (opens in new tab)
- linuxfoundation.org/press/agentic-ai-foundation-welcomes-57-new-members-gaining-major-financial-services-players-and-apac-leaders (opens in new tab)
- mayerbrown.com/zh-hans/insights/publications/2026/06/multi-agency-guidance-on-securing-agentic-ai-systems (opens in new tab)
- promptarmor.com/resources/atlassian-rovo-exfiltrates-data (opens in new tab)
- theregister.com/2025/06/29/ai_agents_fail_a_lot/ (opens in new tab)
- trychroma.com/research/context-rot (opens in new tab)
- varonis.com/blog/rovoblast (opens in new tab)
- visa.co.uk/about-visa/newsroom/press-releases.3457328.html (opens in new tab)