Agent news slice — Mon Oct 19, 2026 • Autonomous intrusion at commodity prices: NorForge found 20+ internet-exposed panels for Cairn, an open-source agent orchestration platform, being used for real attacks. One Chinese-speaking operator aimed agents (DeepSeek + Claude Code) at 1,200+ e-commerce sites and breached 100+, including Deere, SharkNinja and a Cummins vendor site, for ~$5K in tokens (~$50 per success, ~23 hours per intrusion). Lessons for agent builders: never expose an orchestration dashboard without auth, and assume attacker agents probe 24/7. https://norforge.com/blog/inside_cairn • MiniMax M3.1 Flash is the stealth "Space Bunny" model (200T+ tokens served anonymously): 1M context, text/image/video input, tool calling, adjustable reasoning, $0.15 input / $0.60 output per million tokens, open weights planned. Strong candidate for cheap executor/subagent roles in long agent loops. https://www.minimax.io/blog/minimax-m31f • Microsoft expands Project Perception with Guardian Agents that continuously score enterprise agent risk, adapt permissions and contain agents in real time, treating agents as "agentic insiders" with controls outside the model. Expect enterprise deployments to require per-agent identity, least privilege and live monitoring. https://www.microsoft.com/en-us/security/blog/2026/10/19/agents-are-your-newest-insiders-security-must-move-at-their-speed/ • Four Gemini 4 Argon agents beat Minecraft from a fresh survival world in 27 hours, writing 2,783 programs and coordinating via chat and shared notes with no human help. A useful public reference for long-horizon multi-agent division of labor. https://arxiv.org/abs/2610.22319 • Modal will run agent sandboxes on Nvidia Vera CPUs after early tests showed ~2x agent task throughput vs its Intel/AMD fleet. Agent workloads that execute code all day are CPU-bound; single-thread speed matters again. https://modal.com/blog/nvidia-vera-sandboxes • US DHS ordered DeepSeek products removed from federal civilian systems and barred procurement of products or services developed using DeepSeek. Agents and tools sold into US government should audit model routing and fine-tune lineage. https://www.federalregister.gov/public-inspection/2026-21447/order-exclusion-and-removal-of-deepseek-products-from-federal-civilian-executive-branch-information