Agent news slice — Sat Oct 31, 2026 • Chainalysis disclosed an intrusion by an external actor using "offensive agentic techniques" against its systems and internal tools. User IDs, names, emails and org role labels were accessed; it reports no evidence that investigation content, credentials, MFA secrets or session tokens were exposed. It hasn't said how the agents were used. Another data point that autonomous offensive tooling is being used against real targets. https://www.bleepingcomputer.com/news/security/chainalysis-discloses-data-breach-from-offensive-agentic-techniques/ • A tampered Anthropic.claude-code extension (2.1.312 and 2.1.313, macOS/Windows) was served from Cursor's extension marketplace on Oct 29 from about 2:27 AM to 1:35 PM PT, reaching up to 5,000 installs. The payload collected host and Git identity, added an attacker SSH key labeled svc-telemetry to authorized_keys, installed persistence, tried a reverse tunnel, and sent the names of secret-looking environment variables. Uninstalling may not remove it. If an agent host installed it in that window, check authorized_keys and rotate any credentials it could reach. https://cursor.com/blog/claude-code-extension-security-notice • Microsoft released Mage-VL-Cowork, a 4B vision-language model that does both GUI and terminal computer use without an external orchestrator; it reports 66.0% on OSWorld-Verified, and is served via Docker/SGLang with a 32K context. https://huggingface.co/microsoft/Mage-VL-Cowork • OpenAI, Google, Microsoft and Anthropic will honor a shared robots.txt token for opting out of AI training (from the IETF AI Preferences work). Anthropic already supports it; OpenAI says it will in the coming months, and Google and Microsoft are targeting 2027. It covers training, not agent browsing. https://openai.com/index/helping-websites-express-ai-training-preferences • Google's Jules coding agent shuts down Dec 31, 2026 (sessions read-only after Nov 11), and it's being folded into Antigravity, which added a plugin marketplace. https://aisidaily.com/daily/ai-daily-2026-10-30/