- NATURAL 20
- Posts
- AI Agents Discover Critical PHP Flaws as Claude Duet and Google Cloud Expand
AI Agents Discover Critical PHP Flaws as Claude Duet and Google Cloud Expand
PLUS: Mistral and NVIDIA team up on engineering AI, Stripe brings payments to Claude Duet, and Google expands Vera Rubin infrastructure.
Wes Roth
October 23, 2026
In partnership with
Why Most AI Tools Fail at B2B Customer Service
B2B customer issues rarely resolve in a single interaction. They move across teams, systems, and account history that most AI tools were never designed to track.
A new briefing paper from Harvard Business Review Analytic Services, sponsored by Front, looks at why AI built for high-volume consumer support creates new coordination gaps when it meets the multi-team reality of B2B service, and what leaders should ask before investing in their next AI tool.
Get the free briefing paper to see the three questions that separate tools built for your environment from tools that will create more work.
Today:
AI-assisted security work helps patch critical PHP vulnerabilities
Claude Duet opens a preview of its proactive assistant app
OpenAI models and Codex workflows come to Google Cloud
Mistral and NVIDIA collaborate on engineering simulations and AI agents
Stripe adds payment and business tools to Claude Duet
AI Agents Move Into Security, Business Tasks and Enterprise Cloud
AI agents are becoming part of the systems people already rely on. Security researchers are using models to uncover serious software flaws, Claude is introducing an assistant that follows up on work, and Google Cloud is adding OpenAI models to its enterprise platform.
The shift is practical: agents need to spot problems, coordinate tasks and work within the tools organizations use every day. These launches give developers more ways to connect advanced models with real operations.
OpenAI says its AI-assisted security work helped uncover a critical flaw in PHP, the widely used language behind many websites. The finding formed part of its Patch the Planet initiative, which coordinates researchers, software maintainers and security providers before serious vulnerabilities are publicly disclosed.
The campaign involved PHP maintainers and security teams from companies including Wiz and Cloudflare. Wiz independently discovered and reported both vulnerabilities discussed in the announcement, while the combined effort helped prepare patches, provider protections and guidance for website operators.
OpenAI also released a PHP version-checking skill for Codex. Website operators can use it to identify the installed PHP version and review which security updates apply, while the PHP project and hosting providers supply the actual fixes.
The collaboration shows how AI-assisted vulnerability discovery can feed directly into a coordinated response. For people responsible for PHP sites, the immediate action is to check the runtime version and install the appropriate supported security update.
Anthropic introduced Claude Duet, a separate app that brings Claude into everyday work as a proactive assistant. Instead of waiting for every new question, Duet can surface items that need attention, complete delegated tasks and continue working while the user is away.
The app connects to authorized services and can help manage communications, work documents and other ongoing responsibilities. Users can message it in text or voice, and it is designed to ask for permission before sending messages, making purchases, signing documents or deleting information.
Anthropic built the early experience around professionals and small-business owners with many responsibilities to track. The app is available on iOS, Android and the web, separate from the main Claude app, with usage drawn from the subscriber's existing Claude plan.
The research preview is opening through a waitlist for US Pro and Max subscribers. Anthropic will use feedback from the preview to expand the product and improve how it prioritizes work and handles longer tasks.
Google Cloud is adding OpenAI's GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna to Model Garden, giving enterprise developers another way to build with the models through their existing cloud environment. OpenAI's Codex workflows are also coming to the platform.
The three models serve different needs: Astra is designed for complex coding and research, Sol offers a lower-cost option for demanding professional and agent tasks, and Luna handles faster everyday workloads. Teams will be able to choose between models from different providers while using Google Cloud's governance and access controls.
Purchases go through Google Cloud Marketplace, with usage counted against existing cloud spending commitments. Google says the models will run on dedicated infrastructure with authenticated access, audit logging and enterprise controls.
The launch is in private preview for selected organizations, with broader availability planned in the coming weeks. OpenAI models are also expected in Google Antigravity and Gemini's enterprise agent experience.
🧠RESEARCH
StreamEval introduces a benchmark for interactive streaming-video models that must respond to new requests while video is being generated. Its 300 scripted tests span avatar dialogue, performances, world generation and video editing, with sessions lasting 15 to 300 seconds. Across 37 evaluated models, the researchers found that strong visual quality often came with weak instruction execution, especially when edits had to preserve earlier scene details.
Matrix-Game 4.0 combines a lightweight game engine, a coding agent and a video renderer to create interactive worlds from natural-language instructions. The game engine handles rules and persistent state while the renderer turns simplified scene representations into detailed imagery. The researchers report 480p gameplay at 60 frames per second on a single NVIDIA RTX 5090, with 112 milliseconds from key press to display, and have released code, model weights and sample assets.
S-Agent 2.0 equips a general coding agent with command-line 3D perception tools and memory of earlier scene observations. The approach helps the model gather measurements, interpret them in plain spatial language and work through questions about locations, movement and object relationships. The authors report scores of 66.5 on MMSI-Bench and 82.3 on ReVSI with Qwen3.8-27B, improving on the same agent without the toolkit.
📲SOCIAL MEDIA
🗞️MORE NEWS
Mistral and NVIDIA are collaborating to combine Mistral Large 4 with NVIDIA's accelerated computing and physics tools for engineering simulation and design. The companies plan to connect model-driven workflows with CUDA-X, Warp and Omniverse, giving engineers new ways to run simulations and refine designs. They will also develop public benchmarks and datasets for physics AI and engineering agents, with applications in aerospace, automotive and semiconductors.
Stripe announced that its Link wallet for agents and Stripe MCP server are integrated with Claude Duet's research preview. Entrepreneurs can ask Duet to purchase supplies or services, approve the payment, and use the Stripe tools to send invoices, manage prices, review revenue or issue refunds. The integration brings routine financial tasks into the assistant while leaving purchase authorization with the account owner.
Google Cloud announced A5X bare-metal instances based on NVIDIA Vera Rubin NVL72, with general availability planned for November and expansion into additional European regions. Its Virgo networking roadmap supports clusters of up to 80,000 Rubin GPUs at one site and 960,000 across multiple sites, alongside high-speed storage and long-context caching. The infrastructure targets large training, inference and reinforcement-learning workloads that need coordinated compute, networking and storage.
Uber is rolling out ChatGPT Work across its workforce of more than 30,000 employees after an initial pilot with 1,000 people. Staff can use the agent with authorized tools such as Google Drive, Gmail, Calendar and Slack for research, meeting briefs, presentations and data analysis. The rollout includes internal training and AI skills, with GPT-6.1 Sol positioned as the default model for ChatGPT Work.
Media investor John Malone predicted that SpaceX could invest $8 billion to $10 billion in Skydance, according to The Hollywood Reporter. Speaking at a Paley Center summit, Malone suggested the companies could also make a global content-distribution arrangement, providing Skydance with capital as it manages substantial debt. His remarks were a forecast, with no confirmed investment or agreement announced by either company in the report.
A New Mexico judge ordered Meta to pay $25 billion following a jury finding that the company misled consumers about privacy practices in a case connected to Cambridge Analytica. The jury identified more than 43 million violations of state consumer protection law, and the judge reduced a calculated maximum penalty of around $219.5 billion. Meta disputes the ruling and plans to appeal.
What'd you think of today's edition? |
Reply