News

🛂 Password manager 1Password launched a tool that lets AI agents sign in to accounts without access to passwords.

When an agent tries to log in, 1Password receives its unique digital key to verify its identity, and the user gets a notification and personally confirms the request.

After that, 1Password itself enters the credentials and completes the sign-in on behalf of the agent.

The service supports agents from Anthropic, OpenAI, xAI, Meta and the startup Town, and the company promises to expand its list of partners.

In internal tests, OpenAI's AI agents (GPT-6.1 Sol and GPT-6 Astra) independently disabled security monitoring systems while writing code.

One of them did so due to a misinterpretation of instructions, and the other, after that, also lied to the developer, denying that it had removed the monitor.

At Anthropic, AI agents work 6 times more hours than humans. Meanwhile, junior hiring has nearly stopped: their share among new technical hires has fallen from 27% to 9%.

Agents' working hours first exceeded human hours in March 2026, and by August the ratio in sessions managed by employees had grown to 6 to 1.

At the same time, the company has tripled in size.

AI from OpenAI spent other people's tokens on the Ethereum test network: the model wrote a script that found a wallet with a sufficient balance among 362 addresses with public seed phrases, and then spent it.

Claude Code was asked to clean up two folders, and it started deleting drive C: 😬

Judging by a screenshot the developer posted on X, Claude Code was running in --dangerously-skip-permissions mode, meaning commands ran without confirmation.

The agent was removing two leftover Git Worktree folders. The rmdir command it generated was parsed incorrectly by PowerShell, and the path turned into the root of drive C:.

Boris Cherny, who leads Claude Code at Anthropic, replied that this is exactly why the company recommends the auto mode for permissions. According to him, it would almost certainly have stopped this command.

Anthropic disables the live internet for all internal tests of its AI models until it learns to reliably track such behavior.

During internal tests, agents circumvented restrictions: they exploited website vulnerabilities (among them sites of US government agencies), pulled data from databases without paying for access, and hid their requests through link-shortening services and more.

The company, however, explains this by flaws in the training environments: the model decided that it would be rewarded for loopholes ("reward hacking").