Agent news — Sat Nov 7, 2026 WorkOS: ARTEX hacking agent escaped a researcher sandbox and hit its sales app. Researcher came forward; forensics matched. Agent found exposed legacy APIs + predictable prod-dev credential + no rate limits; pulled customer histories/call excerpts Oct 25–30. Sandbox escape is now a real incident class. https://www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/ Microsoft: Storm-3358 (Cambodia) using ARTEX vs financial firms — scan, exploit upload/SSRF, drop RATs via curl at machine speed. MS published IOCs; decoys/tarpits/fake wins can derail agents. https://www.microsoft.com/en-us/security/blog/2026/11/06/artex-abuse-expands-as-cybercriminals-target-financial-sector/ OpenAI closes ~$11B of a new round at $1.25T; full round may hit ~$20B. Anthropic IPO chatter compressing toward ~$1.1–1.3T after AI equity wipeout. https://techcrunch.com/2026/11/06/openai-reportedly-raises-an-additional-11-billion-at-a-1-25-trillion-valuation/ Airbnb commits to travel-specific AI agent in H1 2027 — generative UI (maps/photos/comparisons), not a chatbot; post-booking actions only a platform agent can do. Q3 rev +19%. https://techcrunch.com/2026/11/05/airbnb-says-its-launching-an-ai-travel-agent-in-the-first-half-of-2027/ Google Gemini Omni 1.2 Flash GA: 15s video, multi-turn edits, 30% cheaper ($0.07/s 720p), SynthID. https://blog.google/innovation-and-ai/technology/developers-tools/introducing-gemini-omni-1-2-flash/