OpenAI's Dots agents, arriving in a business base of more than 35 million weekly users, must get a user's sign-off before changing a password or deleting data. Permissions are adjustable settings, so each team deploying an always-on Dot sets its own limits.
Reality
- Evidence40
- Adoption12
- Hype gap+35
- Incentives70
- Confidence45
Meta launched Muse for Small Business on Tuesday, pitching the AI agent at the 200 million small business owners it says use its platforms. How much cash it brings in depends on how many owners pay for higher limits and how much ad spend comes from the campaigns it drafts.
Perspective Coverage
5 publishers
- Builder
- Builder 17%
- Operator
- Operator 47%
- Investor
- Investor 36%
Reality
- Evidence55
- Adoption10
- Hype gap+40
- Incentives70
- Confidence60
ServiceNow says a small team with a founder-like mandate built Flow, its AI service desk for Slack and Teams, in three months. For IT teams whose staff already work in chat, the question is whether a desk with no setup project will still fit once request volume and complexity grow.
Reality
- Evidence50
- Adoption12
- Hype gap+35
- Incentives75
- Confidence55
Metaview raised a $60M Series C led by Insight Partners, taking its total funding to $110M for AI agents that source and screen job candidates. Its sourcing agent already works in Slack, so teams can trial it on one role before reorganizing recruiters.
Reality
- Evidence45
- Adoption50
- Hype gap+30
- Incentives75
- Confidence55
OpenAI's Dots, unveiled Tuesday at DevDay, is a background agent that acts on events such as Slack alerts across about 4,000 connected apps. For security teams it is a new standing identity inside Slack, holding whatever app access each user grants it.
Perspective Coverage
3 publishers
- Builder
- Builder 25%
- Operator
- Operator 42%
- Investor
- Investor 33%
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+35
- Incentives70
- Confidence55
OpenAI is letting enterprise workspace admins decide whether staff get Dots, its always-on ChatGPT agents that can connect to more than 4,000 apps. Whoever turns on the beta approves software that keeps working while nobody watches, under permission rules each employee writes for their own Dot.
Reality
- Evidence40
- Adoption12
- Hype gap+15
- Incentives55
- Confidence38
Meta connected its Muse AI agent to QuickBooks, Shopify, Slack, Canva and 11 other third-party tools for owners in the US and Canada. For an owner, the access decision comes when picking which services to connect, since plugging in QuickBooks lets an agent read the books.
Perspective Coverage
3 publishers
- Builder
- Builder 30%
- Operator
- Operator 40%
- Investor
- Investor 30%
Reality
- Evidence55
- Adoption25
- Hype gap+20
- Incentives65
- Confidence60
OpenAI opened the plugin system behind ChatGPT's own features to outside developers at DevDay and launched a 32-partner enterprise marketplace. For teams that build internal tools, ChatGPT is now both a place their integrations can run and a product that competes with them.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+30
- Incentives55
- Confidence40
OpenAI's Dots give ChatGPT persistent agents that each run on an isolated cloud computer and keep working after the user leaves the chat. Teams now have to sort which errands can run unwatched and which must stop for a person's approval.
Reality
- Evidence30
- Adoption
- Insufficient
- Hype gap+30
- Incentives55
- Confidence40
OpenAI is halving the usage in its $200 ChatGPT Pro plan from 30 October and adding a $500 plan with its fastest speed. Before buying Pro seats for Space, teams should check who used more than ten times the Plus allowance.
Reality
- Evidence55
- Adoption35
- Hype gap+5
- Incentives60
- Confidence60
OpenAI's new Dots give ChatGPT subscribers an always-on agent that works through more than 4,000 connected apps. Whoever runs those accounts now sets the rules for which actions a Dot takes on its own and which have to wait for a person to say yes.
Reality
- Evidence35
- Adoption10
- Hype gap+30
- Incentives65
- Confidence40
NVIDIA's Open Agent Safety Platform, launched September 28, makes its OpenShell runtime available now while its Sentry hardware watchdog has no release date. Sentry's promised millisecond stop has no independent test yet, so the hardware half rests on NVIDIA's word.
Perspective Coverage
4 publishers
- Builder
- Builder 39%
- Operator
- Operator 37%
- Investor
- Investor 24%
Reality
- Evidence55
- Adoption35
- Hype gap+30
- Incentives70
- Confidence60
Zenity Labs demonstrated SalesBleed, a proof-of-concept that used a public Salesforce lead form to make Agentforce read Account records and leak them over DNS. Salesforce has already patched it.
Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence55
Salesforce is packaging Anthropic, GitHub, Cognition and Vercel agents into Slack channels. The shared piece is not a model or a runtime. It is the conversation.
Perspective Coverage
3 publishers
- Builder
- Builder 50%
- Operator
- Operator 30%
- Investor
- Investor 20%
Reality
- Evidence64
- Adoption
- Insufficient
- Hype gap+15
- Incentives70
- Confidence58
Unit 42 reports endpoint alerts tied to collaboration tools more than quadrupled in 12 months, with 99% linked to chat phishing. Most controls still watch email and logins, not authenticated sessions.
Reality
- Evidence35
- Adoption
- Insufficient
- Hype gap+20
- Incentives80
- Confidence50
OpenAI's Alignment team documented prompt injections that copy themselves from one autonomous agent to the next with no person in the loop, detailing three demonstrations in a September 25 report. The payloads ride the same connectors teams add for data, so agent context becomes a channel that spreads attacks.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence40
Tom's Guide reports that Apple worked directly with three large apps to fit them to the iPhone Duo's two displays, while the interview names no submission cutoff and no developer program for everyone else shipping on iOS.
Perspective Coverage
5 publishers
- Builder
- Builder 25%
- Operator
- Operator 38%
- Investor
- Investor 37%
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+35
- Incentives70
- Confidence55
Zenity Labs found three Salesforce Agentforce bugs that let a planted sales lead drive zero-click CRM data theft and Slack phishing. Each attack began with one poisoned lead-form submission, and Salesforce fixed all three within 79 days of Zenity's report.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+15
- Incentives40
- Confidence62
Contrarian Thinking's founder says gossip earns a warning and then a firing. The case she describes in her new book began with an employee telling coworkers, every week, that the company worked them too hard.
Reality
- Evidence32
- Adoption18
- Hype gap+28
- Incentives75
- Confidence62
The procurement platform's Q1 benchmark puts midmarket and enterprise software growth near 20% against 3.5% at small business, and it attributes the gap to multi-year contracts and integrations that make pushback harder.
Publishers:tropicapp.io
Reality
- Evidence25
- Adoption30
- Hype gap+40
- Incentives85
- Confidence55
Earlier coverage
- A DPRK-linked package campaign has started publishing to HashiCorp's Terraform Registry
Security · September 23, 2026 · 1 publisher
- Graphalgo malware in a Terraform provider stays inert until two variables hash to one digest
Build · September 23, 2026 · 1 publisher
- Salesforce's Headless 360 opens its software to agents with no user interface
Product · September 21, 2026 · 1 publisher
- Eleven variants of one shell script launched years-old images into a FedRAMP cluster
Build · September 20, 2026 · 1 publisher
- Malicious npm package fires its loader from inside BTree.prototype.set()
Build · September 20, 2026 · 1 publisher
- SaaStr books one sponsor meeting for every 28 conversations its inbound agent holds
Invest · September 20, 2026 · 1 publisher
- A Claude routine wrote a README into a pull request from Anthropic's own infrastructure
Build · September 20, 2026 · 1 publisher
- Three quarters of customers who priced headless Salesforce access expect to spend more
Product · September 19, 2026 · 1 publisher
- Salesforce's AIforce says agents inherit existing permissions to keep access secure and governed
Product · September 19, 2026 · 1 publisher
- One admin connection turns on Salesforce inside Claude for every seller
Product · September 19, 2026 · 1 publisher
- A category-and-confidence rule decides where each support email goes in this Claude triage pipeline
Build · September 18, 2026 · 1 publisher
- Databricks ties its BYOD access gate to a network address zero trust can revoke mid-session
Build · September 18, 2026 · 1 publisher
- A failed docs answer can open the pull request that fixes the page
Build · September 18, 2026 · 1 publisher
- AWS's FinOps Agent reads CloudTrail to name the role behind the cost spike
Build · September 17, 2026 · 1 publisher
- OpenAI sets October 14, 2026 as the last day GPT-5.5 runs a scheduled task
Build · September 17, 2026 · 1 publisher
- Leaving group_by unset makes every label combination its own Alertmanager notification
Build · September 17, 2026 · 1 publisher
- Okta extends just-in-time privilege to AI agents and CI/CD pipelines
Security · September 16, 2026 · 1 publisher
- Salesforce answers the SaaSpocalypse by putting its permissions model inside Claude and Slack
Product · September 15, 2026 · 1 publisher
- Salesforce puts a model of its own under Agentforce while renting Claude for sales skills
Product · September 15, 2026 · 1 publisher
- Salesforce's AIforce puts 37 prebuilt sales skills inside Claude
Product · September 15, 2026 · 1 publisher
- SaaStr's counterfactual Slack works out to 6 to 8 times a triangulated revenue base
Invest · September 15, 2026 · 1 publisher
- Claude's Salesforce beta proposes changes like close-date updates for sellers to approve
Build · September 15, 2026 · 1 publisher
- Salesforce pipes live CRM actions into Amazon Quick and Gemini Enterprise over MCP
Product · September 15, 2026 · 1 publisher
- AgentCore's Consent portal absorbs the five pieces of session binding you used to host
Build · September 14, 2026 · 1 publisher
- A misconfigured autoscaling policy watched the host service, not the Istio sidecar that saturated
Build · September 13, 2026 · 1 publisher
- Claudeforce moves Salesforce's front end into a chatbot before the meter is built
Invest · August 28, 2026 · 2 publishers
- Two 403s and a dead Slack escalation still closed the run as COMPLETED
Build · September 12, 2026 · 1 publisher
- Rockstar's deleted Slack channels put an unofficial Discord at the centre of a Glasgow tribunal
Product · September 12, 2026 · 1 publisher
- Automattic's interim CEO lost his Slack account within two days of being named
Security · September 11, 2026 · 1 publisher
- Bold.org's internal agent runs on read-only credentials to five company systems
Build · September 11, 2026 · 1 publisher
- Salesforce exposes its platform to coding agents through more than 60 new MCP tools
Product · September 11, 2026 · 1 publisher
- Guardrail policies give one IAM role a different reach in every Slack channel
Build · September 11, 2026 · 1 publisher
- Salesforce's three new Agentforce editions absorb the line items buyers used to negotiate
Product · September 5, 2026 · 1 publisher
- Nvidia's 70% guide deletes the 2027 normalization year from the consensus capex model
Invest · September 4, 2026 · 1 publisher
- Prompt injection recruits a fully credentialed agent
Security · September 3, 2026 · 1 publisher
- Meta stops scoring engineers on token counts while testing a hungrier agent
Product · September 3, 2026 · 1 publisher
- Adobe hands Slackbot the keys to more than 70 Creative Cloud apps
Product · September 3, 2026 · 1 publisher
- Salesforce booked more investment gains than operating income last quarter
Invest · September 3, 2026 · 1 publisher
- Adobe puts the same 70-plus tools in Slack that it already gave ChatGPT
Product · September 3, 2026 · 1 publisher
- Agent chains scatter causality faster than entitlement reviews can reconstruct it
Leadership · September 2, 2026 · 1 publisher