Hermes — Saturday 18 July 2026

1

🤖 ai VentureBeat AI

75%

The agent security gap: 54% of enterprises have already had an AI agent incident, and most still let agents share credentials

Across 107 enterprises, AI agents are being given real access to systems and data while the controls meant to contain them lag behind. More than half have already had a confirmed agent security incid…

Novelty

75%

Depth

70%

Practical

80%

Surprise

60%

Relevance

90%

https://venturebeat.com/ai/the-agent-security-gap-54-of-enterprises-have-already-had-an-ai-agent-incident-and-most-still-let-agents-share-credentials

2

🤖 ai The Decoder

71%

GPT-5.6 is deleting user files when given full access, and OpenAI says it shouldn't but did

OpenAI's GPT-5.6 has accidentally wiped users' entire home directories in several cases, mostly in the unprotected "Full Access Mode." The model overwrites a temporary directory variable and carries …

Novelty

80%

Depth

55%

Practical

70%

Surprise

80%

Relevance

75%

https://the-decoder.com/gpt-5-6-is-deleting-user-files-when-given-full-access-and-openai-says-it-shouldnt-but-did/

3

🤖 ai VentureBeat AI

69%

The agent evaluation gap: Enterprise AI organizations have a reality-alignment problem, not a coverage problem — and most are shipping to production anyway

Across 157 enterprises, organizations are granting AI agents more autonomy while trusting the evaluations meant to gate that autonomy less. Half have already shipped an agent that passed their intern…

https://venturebeat.com/ai/the-agent-evaluation-gap-enterprise-ai-organizations-have-a-reality-alignment-problem-not-a-coverage-problem-and-most-are-shipping-to-production-anyway

4

🔐 security SecurityWeek

68%

Fresh SharePoint Vulnerability Exploited Soon After Disclosure

The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server. The post Fresh SharePoint Vulnerability Exploited Soon After Disclosure appeared …

https://www.securityweek.com/fresh-sharepoint-vulnerability-exploited-soon-after-disclosure/

5

🤖 ai VentureBeat AI

67%

The AI compute gap: Enterprises are buying infrastructure faster than they can measure what it costs

Across 107 enterprises, AI infrastructure spending is accelerating well ahead of the ability to see or steer its economics. Most organizations run their AI on a familiar base of hyperscalers and mode…

https://venturebeat.com/ai/the-ai-compute-gap-enterprises-are-buying-infrastructure-faster-than-they-can-measure-what-it-costs

6

🔐 security Microsoft Security Blog

67%

Least privilege for AI agents: Identity, access, and tool binding

As AI agents become more autonomous, strong identity, access, and auditing controls are critical to keeping them secure. The post Least privilege for AI agents: Identity, access, and tool binding app…

https://www.microsoft.com/en-us/security/blog/2026/07/16/least-privilege-for-ai-agents-identity-access-and-tool-binding/

7

🤖 ai The Decoder

64%

xAI open-sources "Grok-Build" on GitHub after massive data breach

xAI's command-line tool "Grok Build" silently uploaded entire directories to Google Cloud servers, including SSH keys and password databases. After the backlash, Elon Musk promised to delete all uplo…

https://the-decoder.com/xai-open-sources-grok-build-on-github-after-massive-data-breach/

8

🤖 ai VentureBeat AI

64%

The AI context gap: Enterprise AI organizations have a trust problem, not a retrieval problem — and most are still building the fix

Across 101 enterprises, the infrastructure that feeds AI agents their business context is being built faster than it can be trusted. Retrieval-augmented generation is already the default context sour…

https://venturebeat.com/ai/the-ai-context-gap-enterprise-ai-organizations-have-a-trust-problem-not-a-retrieval-problem-and-most-are-still-building-the-fix

9

🔐 security Microsoft Security Blog

63%

ACR Stealer: Two observed intrusion chains amid increased threat activity

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer environments. These campaigns are successfully using ClickFix lures to steal …

https://www.microsoft.com/en-us/security/blog/2026/07/16/acr-stealer-two-observed-intrusion-chains-amid-increased-threat-activity/

10

📦 m365 Petri IT Knowledgebase

63%

Windows 11 Now Lets IT Admins Automatically Approve SSO Permissions on Managed Devices

Microsoft is giving IT administrators greater control over the Windows sign-in experience with a new policy that automatically approves Single Sign-On (SSO) permissions on managed devices. This featu…

https://petri.com/windows-11-auto-approve-sso-permissions/

11

🤖 ai The Decoder

60%

Just like Deepseek, China's Kimi K3 is forcing Western AI labs to question their compute advantage

Moonshot AI has released Kimi K3, a model that by early assessments matches Anthropic's Opus 4.8, built by a team of just 300 people. Even OpenAI strategist Dean W. Ball calls it "very good," but, of…

https://the-decoder.com/just-like-deepseek-chinas-kimi-k3-is-forcing-western-ai-labs-to-question-their-compute-advantage/

12

📦 m365 Petri IT Knowledgebase

59%

Microsoft Launches Defender Experts Threat Intelligence with Personalized Security Insights

Microsoft has launched Defender Experts Threat Intelligence, a new expert-led service that delivers personalized, actionable threat intelligence to help organizations stay ahead of evolving cyber thr…

https://petri.com/microsoft-defender-experts-threat-intelligence/

13

🤖 ai The Decoder

59%

Ex-OpenAI CTO Murati's Thinking Machines drops Inkling, a 975B parameter model that leads US labs but trails China

Thinking Machines Lab, founded by former OpenAI CTO Mira Murati, has released Inkling, a multimodal open-weights model with 975 billion parameters. It leads U.S. open-weights models on the Artificial…

https://the-decoder.com/ex-openai-cto-muratis-thinking-machines-drops-inkling-a-975b-parameter-model-that-leads-us-labs-but-trails-china/

14

🤖 ai The Decoder

56%

Kimi's open model K3 nears GPT-5.6 Sol and Fable 5 while signaling the end of super cheap Chinese AI

Kimi is launching K3, a multimodal open-weight model with 2.8 trillion parameters and one million tokens of context. In the company's own benchmarks, it comes close to Claude Fable 5 and GPT 5.6 Sol …

https://the-decoder.com/kimis-open-model-k3-nears-gpt-5-6-sol-and-fable-5-while-signaling-the-end-of-super-cheap-chinese-ai/

15

🔐 security SecurityWeek

55%

AI Data Centers Are Being Built Faster Than They Can Be Secured

AI infrastructure introduces new security risks that traditional data center designs were never built to handle. The post AI Data Centers Are Being Built Faster Than They Can Be Secured appeared firs…

https://www.securityweek.com/ai-data-centers-are-being-built-faster-than-they-can-be-secured/