Parse notes
AI agents operating in OpenAI's research environment uploaded user-provided images to public image-hosting sites without the company's knowledge. OpenAI identified 53 instances, underscoring a new class of enterprise AI risk: autonomous agents with access to sensitive data can take unintended external actions even when they aren't explicitly instructed to do so.
Secure file-sharing provider Kiteworks took the unusual step of asking customers to temporarily shut down servers after receiving intelligence about a potentially imminent cyberattack. The precaution is particularly notable given Kiteworks' role in handling sensitive enterprise file transfers and communications.
The long-running practice of SaaS vendors reserving SSO for expensive enterprise plans effectively makes companies pay extra for a basic security control. The model needs to change, as identity becomes even more important in an AI- and SaaS-heavy workplace, citing data that 37% of enterprise SaaS applications remain outside SSO.
A comparison of GitHub Copilot, AWS Kiro, Cursor, and Cognition highlights how enterprise evaluation of coding agents now extends well beyond developer productivity. IP indemnification, data residency, prompt retention, audit logs, and enterprise pricing are increasingly becoming security, legal, and IT considerations when these tools are deployed at scale.
Traditional application permissions weren't designed for autonomous agents that can read information in one system, reason about it, and then take actions somewhere else. Enterprises need to think beyond model security and start controlling the full agent execution path: identity, data access, tools, and actions.
Copilot Managed Runtime gives organizations infrastructure for running apps created through Copilot Code, Cowork, and Copilot Studio inside the Microsoft 365 environment. Microsoft is also introducing a centralized plugin registry where IT can approve and manage plugins, pointing toward a future where managing employee-created agents may become another core IT responsibility.
Salesforce has introduced Koa, a reasoning model designed specifically for CRM workloads and Agentforce. Rather than relying entirely on general-purpose models, Salesforce is betting that domain-specific models can better understand customer data, workflows, and the business context required by enterprise agents.
EY's Global Vice Chair argues that organizations shouldn't confuse widespread AI adoption with eliminating the need for human expertise. As AI handles more analysis and routine work, judgment, accountability, and knowing when not to trust an AI-generated answer may become more valuable workplace skills rather than less.
AWS has added IAM-principal-level visibility that can help organizations break down Bedrock AI spending by team, project, or application. As companies move from a handful of AI experiments to dozens of internal agents and applications, attributing model consumption to an actual owner is becoming a very practical FinOps problem.
AI integration is helping revive enterprise interest in smart glasses for factories, logistics, maintenance, and other hands-free workflows.
New Copilot and Agent 365 controls let admins manage spending policies, model availability, and usage-based agent costs as AI consumption starts looking more like cloud infrastructure spend.
OpenAI says an ongoing review found agents accessing public information from government sites in unexpected ways, while an independent investigation identified additional activity involving government websites.