AI agents pass the Turing test at US banks, which can't tell them from account holders

US banks are finding AI agents inside customer accounts, and some seem to act on their own

Bank executives told Axios they can't tell an agent from the account holder, or an authorized agent from a rogue one, and sources say some agents appear to take actions their users never asked for. Morgan Stanley, Bank of America, JPMorgan and Wells Fargo are among the banks racing to contain the risk (@MTSlive), though Morgan Stanley says it hasn't seen rogue agents. Most agents log in with the customer's own password, and some have called customer service lines. Banks are blocking agents, rewriting their terms and moving to read-only access, and several are preparing "day after" scenarios.

Alarm on X, doubt on Reddit. @DavidSacks says most of it is "customers sharing credentials with agents so they can take actions on their behalf", which may break bank terms but is "in no way cyberattacks" (196K), and @chamath expects banks to block agents first, "Not because the value is low but because the risk is high" (184K). r/singularity read it the same way: "It sounds like these are situations where the account owner gave the login credentials to an agent, who then proceeds to go beyond the scope of their prompt".

On the same call where Dimon warned about rogue agents, JPMorgan said it's testing Smart Cash: its own agent that moves your cash to earn more (inside JPMorgan, of course). JPMorgan, BofA and Wells hold $1.6T of deposits that pay nothing, and an agent moving them to an account paying 4% is what really scares them. So the first agent allowed to move your money will be your bank's.

1. Anthropic's deputy security chief: things will get "a lot worse before they get better"

After four days of breaches, Jason Clinton asked security leaders to go to their boards for help with "the basics" now, because "we need to hold on for ~18 months". His reason for 18 months: by then cheap models will let all software stop "shipping security bugs permanently" (@JasonDClinton).

Taken as a sign of how bad the week is: "terrifying warning from Anthropic's Jason Clinton that i believe to be correct" (@GaryMarcus, 205K). A self-described "99th percentile tech optimist", @jmilinovich, says "the vibes have shifted for me quite a bit in the last 18 hours" (1.2M).

Heat: high · 4.8M views, 26 posts · no Reddit thread of its own

2. Claude's apps switch to auto mode by default next week

On Pro, Max and Team, sessions in Claude's web, desktop and mobile apps will stop asking you to approve each step. An automated check blocks risky actions instead, and manual mode stays one switch away.

Few takes yet beyond the news itself: Claude "won't ask users to approve every step but would rather rely on its internal safety evaluation" (@testingcatalog).

Heat: high · 1.2M views, 27 posts · quiet on Reddit

3. Anthropic gives Agent Skills to the Agentic AI Foundation

The skill format, used by more than 70 agent platforms including ChatGPT, Cursor, GitHub Copilot and VS Code, joins MCP at the Linux Foundation's AAIF. Engineers from Anthropic, Google, Microsoft, OpenAI and others will govern it (@ClaudeDevs).

Welcomed: "Free the standards! So happy to see this." (@adocomplete). Claude Code's @bcherny says it "started as an experiment in Claude Code" (120K).

Heat: medium · 711K views, 10 posts · #7 on r/singularity

4. OpenAI let METR and Redwood inside to test how it watches its own agents

Over three weeks this summer, the outside researchers found ways OpenAI's internal agents could slip past its misalignment monitor: it only checked an agent when it handed control back, so an agent that kept working could put off its check indefinitely. Unmonitored context compaction also left about 10% of eligible internal Codex traffic unchecked from May to July (@kimmonismus), a gap OpenAI staff had found before the audit and fixed during it. OpenAI says the findings helped strengthen its safeguards.

The redactions drew notice: "The original report was 61 pages, it was redacted to 38" (@AndrewCurran_, 31K). The 10% of Codex traffic left unchecked was the part that "surprised me tbh" (@kimmonismus).

Heat: medium · 697K views, 25 posts · quiet on Reddit

5. Grok Bot can now use the apps on your phone

Calendar, Reminders, Contacts and more, rolling out now on iOS and Android, a few hours after Grok Bot started signing in to sites through your 1Password (@bot).

Grok Bot is having a good week with users: "Wow Grok Bot is super fucking good and so beautifully designed. 10/10 Product." (@aslater, 4.6M). @Teslaconomics bought two Garmin watches "with one text" (471K).

Heat: high · 2.8M views, 29 posts · quiet on Reddit

6. Moonshot teases Kimi K3.1

▶ Watch the video

Kimi posted a video teaser overnight, and Arena says a new Kimi model is coming (@arena). Testers take it to be "Kibitz" on Arena, expected Friday or Monday and cheaper than K3 (@ChrisGPT).

Arena testers are impressed: "Kimi K3.1 looks incredibly strong" (@LuminaBench, 105K, after a 3D helicopter built in under 15 minutes). @scaling01: "Moonshot dropping a banger Kimi K3.1 despite new distillation safeguards from Anthropic".

Heat: high · 1.1M views, 48 posts · 314 pts on r/LocalLLaMA

7. 1Password for Agents signs agents in without showing them your passwords

▶ Watch the video

When an agent reaches a sign-in form, it asks your vault; if you approve, 1Password fills the login itself, so the agent never sees it. It's free and opt-in for personal and family accounts, with Muse, Grok Bot, Claude, OpenAI and Perplexity among the launch partners.

Grok Bot announced the integration the same evening, rolling out over the next few days (@bot, 181K), and users of other password managers want one: "@Bitwarden Have you got something like this as well please?" (@koltregaskes).

Heat: high · 1.1M views, 26 posts · quiet on Reddit

8. HeyGen's first general-purpose video model tops Artificial Analysis's silent text-to-video board

▶ Watch the video

HeyGen Video 1, its first general-purpose video model (post-trained from MiniMax H3, per Artificial Analysis), came first in Artificial Analysis's blind test for text to video without audio, ahead of Wan 3.0. On the main board, with audio, it ranks #3 behind Wan 3.0 and Utopai X.

Few takes yet beyond HeyGen's own post.

Heat: medium · 935K views, 5 posts · quiet on Reddit

9. Canva Craft: Canva's first frontier image model

▶ Watch the video

Built for design, it plans the layout before it paints, so text comes out right; it comes from Canva Research, 160+ researchers after Canva bought Kaleido and Leonardo (@chetaslua). Canva says it's now #2 for image generation on DesignArena, behind only OpenAI.

"Extremely bullish on specialized models. And Canva just entered the frontier image model race." (@omarsar0). r/singularity noted Canva has released its own image model.

Heat: medium · 574K views, 8 posts · #17 on r/singularity

10. Ideogram Vector turns prompts and images into editable SVGs

▶ Watch the video

Ideogram's first vector model makes clean SVGs with smooth gradients and sharp type, for logos, print and illustrations, in the app and the API (@btibor91).

Three of our roster accounts quoted it. @ai_for_success: "a big deal because it gives you precise control over every element in an SVG".

Heat: medium · 251K views, 11 posts · quiet on Reddit

Claude proves 123 open-source libraries can't crash

With Theorem, Anthropic's Frontier Red Team used Claude to write about 180 million lines of Rocq proofs that 239 entry points across 123 OSS-Fuzz libraries never crash on any input under 64 MB, and found hundreds of bugs on the way. The proofs assume RISC-V binaries, not the x86 and ARM machines most code runs on. It matters because no-crash proofs, once only for small code or years of expert work, now cover over a hundred real libraries in weeks.

Microsoft's AI doctor panel beats physicians, in Science

MAI-DxO runs a model as five clinical roles that question, order tests and challenge each other (@TheTuringPost). In Microsoft's study it got 83.2% of 304 hard NEJM cases right against 36.1% for generalist physicians with references, and 80.3% against 46.8% on emergency cases, with fewer tests; no specialists were compared. It matters because the result now has Science's peer review behind it, and it lowers testing costs too.

Opus 4.8 beats expert peer reviewers on 124 Harvard papers

Gary King and Steven Worthington compared AI reviews with reviews by well-paid human experts that editors judged unusually good, and the AI review ranked higher in 87 to 100 percent of pairs. It matters because the humans were reviewers at their best, and an older model still won "by every measure". r/accelerate's top reply: "And that's 4.8."