Microsoft says a China-state-aligned group, Storm-0940, used ARTEX, an open-source multi-agent AI hacking framework, in the ConnectWise supply-chain attack: 2,250+ Microsoft 365 tenants targeted, 151,000+ failed sign-ins, and privileged access in under three hours in some cases. Plus METR and Redwood Research found real holes in OpenAI's internal agent-monitoring system. Claude switches to auto mode by default next week for Pro, Max and Team, Anthropic donates Agent Skills to the Linux Foundation's Agentic AI Foundation, and Claude mathematically proves open-source code can't crash. Grok Bot can now use Calendar, Reminders, Contacts and more apps on your phone, and sign in for you with 1Password without seeing your passwords, as 1Password for Agents launches and banks report unvetted AI agents in customer accounts. Plus OpenAI's Decisions API, Google's Agent Compute Engine, Gemini using your Maps history, Muse sharing back on, Arc shutting down, NVIDIA OpenShell, DeepCell, and a two-minute cleanup of old app connections.

Tools & links:
- ElevenLabs (AI voices for creators): https://try.elevenlabs.io/h9g9mtm3wfhc
- Systeme.io (free all-in-one platform to start an online business): https://systeme.io/?sa=sa0152084310d430c32983ddc7084c522e2cfec860

Some links above are affiliate links. If you sign up through them, AI Tools Pulse may earn a commission at no extra cost to you. Partners don't pay for coverage or control what we say.

Chapters:
0:00 Intro: AI-agent hackers, Claude auto mode, Grok Bot phone apps
0:31 Breaking: Storm-0940 uses ARTEX agentic AI in the ConnectWise attack + METR/Redwood find holes in OpenAI's agent monitoring
2:36 Claude: auto mode by default, Agent Skills donated to AAIF, formally verified code
4:21 Grok Bot: phone apps, 1Password sign-ins, changelog v0.75.2 + 1Password for Agents and banks vs. rogue agents
6:07 Named-tool rundown: OpenAI Decisions API, Google Agent Compute Engine, Gemini Personal Intelligence + Maps, Agent Skills roadmap, Muse sharing back
7:07 Buzz: Arc shuts down, NVIDIA OpenShell, DeepCell tops Product Hunt
7:50 Try this today: remove old app connections from your accounts, wrap-up

Sources:
- Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/
- CyberScoop: https://cyberscoop.com/microsoft-attributes-connectwise-supply-chain-attack-china-storm-0940/
- METR: https://metr.org/blog/2026-10-22-red-teaming-openai-agent-monitoring/
- Claude: https://claude.com/resources/articles/auto-mode-default-in-claude-code
- Anthropic: https://www.anthropic.com/news/donating-agent-skills-to-the-agentic-ai-foundation
- Anthropic: https://www.anthropic.com/research/formal-verification
- Grok Bot on X: https://x.com/bot/status/2113393684209176718
- Grok Bot on X: https://x.com/bot/status/2113332983226831339
- xAI: https://x.ai/changelog/bot
- TechCrunch: https://techcrunch.com/2026/10/22/1password-launches-a-way-for-ai-agents-to-log-in-on-your-behalf-without-seeing-your-password/
- Axios: https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access
- OpenAI: https://openai.com/index/decisions-api/
- Google Cloud: https://cloud.google.com/blog/topics/ai-infrastructure/introducing-agent-compute-engine-and-expanded-agent-governance
- The Verge: https://www.theverge.com/tech/1017066/meta-muse-sharing-back-on-artifiacts
- The Verge: https://www.theverge.com/tech/1016832/arc-browser-shutting-down

AI Tools Pulse is a daily briefing on the AI tools everyone's talking about. Narration is AI-generated (text-to-speech).