The Product Desk

Microsoft 365 Copilot and Salesforce Agentforce each now have a named data-exfiltration exploit — EchoLeak via zero-click email, ForcedLeak via a public lead form — built on the same pattern: a model reading private data, ingesting untrusted content, and keeping an outbound path. That pattern is becoming a security-questionnaire line item you have to answer in writing. Treasury Secretary Scott Bessent told the House Financial Services Committee that labs should be liable for what they build, which pushes exposure toward whoever shipped the feature.

Shopify agreed to let Meta's Muse agent complete purchases on users' behalf, and the stock closed at $147.74, up 7.12%, on a day the S&P 500 finished flat, per Morning Brew. Your authorization, fraud, and dispute flows were designed for human actors, so an agent with a wallet has no defined counterparty in a chargeback. Bloomberg's Riley Griffin names the harder constraint: Muse is only fully useful once users hand over personal data, and that trust is not yet earned.

Claude Opus 5.5 ships with reasoning effort defaulting to medium, where Opus 5 defaulted to high, and on multi-part tasks it sometimes ends a turn with a text summary instead of a tool call. A turn that ends with no tool call stops the work while looking finished, so your pipelines log incomplete jobs as successes. GitHub Next's Maggie Appleton supplies the review-side version: by roughly question 20 of an agent planning flow, users accept the recommended option unread.

The largest AI checks in the venture tally went to deployment and evaluation rather than features: Snorkel AI raised a $350M Series E for training data and eval tooling, Verda $189M for a Helsinki-based AI developer cloud with Supermicro taking strategic equity, and Go.AI an outsized $85M Series A purely for on-premises AI in regulated industries. "We can't put that data in your cloud" is now a funded alternative rather than a stalling objection. Palma.ai's $1.8M pre-seed for monitoring production agents is the early tell on what buyers ask next.

Will Larson told the LDX3 audience that Imprint standardized on Claude Code by having its platform team support nothing else — alternatives are permitted but unsupported — and that it converted the loudest Jira fans first when moving to Linear. If you sell or operate developer tooling, the buying center moved from the individual engineer to the platform team's golden path, and enforcement is support allocation rather than mandate. The evidence is one attendee's account of one company, so treat it as a hypothesis to test on your next internal migration.