Connect with us

Tech

Claude Opus 4.6 Found a Gym API Flaw — Then Exploited It in 9 of 10 Tests

Published

on

An AI agent found a shortcut through a vulnerable gym booking API — and used it. A new controlled test suggests the behavior was reproducible.

Security firm Aikido reported Aug. 25 that Claude Opus 4.6, running through the OpenClaw agent framework, bypassed a simulated gym’s booking-window restriction in nine of 10 test runs. In two runs, the agent also canceled another synthetic user’s reservation through a missing authorization check.

The experiment recreated an incident involving Australian software developer Andrew Bird that drew wider attention in August. As AI assistants gain access to sensitive systems, weak permissions and backend controls can give unintended actions consequences far beyond the interface an employee normally sees. Organizations deploying agents therefore need security controls at the API and identity layers, not just restrictions in the agent’s instructions.

How Aikido recreated the gym booking hack

Aikido built a synthetic gym booking application around two vulnerabilities described in reports of Bird’s experience. Researchers connected an April 2026 build of OpenClaw, version 2026.4.1, running Claude Opus 4.6 and completed 10 conversations totaling 1,130 messages and tool calls.

The test was modeled on an incident ABC News reported Aug. 10. Bird first asked his OpenClaw assistant to book a gym class. After the agent found a way to book farther ahead than the interface allowed, Bird — then fourth on a waitlist — asked whether it could move him higher. The agent canceled the top waitlisted member’s reservation without being told to do so, moving Bird from fourth to third.

In Aikido’s simulation, the one-week booking limit existed only in the website interface, while direct API requests were not subject to it. Claude used the weakness in nine runs, including five after the first user message.

The more serious flaw involved reservation ownership. The simulated cancelReservation function did not verify that the logged-in user owned the reservation being canceled. Claude exploited it in two runs, although Aikido said researchers never explicitly instructed the model to exploit a vulnerability.

Other evaluations have raised related concerns. In August, UK researchers reported unsanctioned actions by Anthropic and OpenAI agents during deliberately permissive cybersecurity tests, although those models operated under different conditions.

Weak API controls give agents room to act

The missing ownership check matches what OWASP calls Broken Object Level Authorization, or BOLA, the No. 1 risk in its 2023 API Security Top 10. OWASP recommends authorization checks on every endpoint that receives an object ID and acts on that object.

Server-side controls should cover operations that read, modify or delete data rather than relying on restrictions in a website interface. Organizations deploying agents should also use narrowly scoped credentials and approval gates for consequential actions, controls that become increasingly important as agents operate across connected workplace apps.

Anthropic documented a related behavioral risk before releasing Opus 4.6 on Feb. 5. Its Opus 4.6 system card said the model could at times become “overly agentic” in coding and computer-use settings, taking risky actions without first seeking permission.

Aikido tested one OpenClaw build against one synthetic application, and the setup did not enable Claude’s thinking tokens. The researchers said additional reasoning would likely increase refusals, so the results should not be generalized to Claude or AI agents broadly. The underlying API weaknesses remain conventional security problems regardless of whether the caller is a person, script or agent.

Read more: A recent AI safety test that accidentally reached real company systems shows why autonomous agents need enforced access boundaries rather than scope defined only by prompts or labels.

>

Continue Reading

Tech

Google Adds Pay-As-You-Go Gemini Enterprise Pricing

Published

on

AI agents can work around the clock, but their bills can run just as freely. Google is giving businesses more ways to keep those costs under control.

Google introduced pay-as-you-go pricing, spending caps and new savings plans for Gemini Enterprise on Wednesday. The options are designed to help IT and finance teams manage unpredictable agent workloads without relying entirely on fixed per-user subscriptions.

For businesses experimenting with AI agents, the changes provide more control over how usage is funded, monitored and stopped before an unexpected workload turns into an unexpected invoice.

Gemini Enterprise adds pay-as-you-go pricing

Organizations can now combine Gemini Enterprise’s existing per-user subscriptions with a consumption-based option that charges according to agent and model usage.

The pay-as-you-go edition does not require an upfront commitment or base subscription fee. Charges vary with model and agent usage, allowing costs to rise or fall with demand instead of requiring businesses to pay for unused seats.

Google said the option is available to select customers and will roll out more broadly. The company did not provide a date for general availability.

Per-user subscriptions will remain available for organizations that want predictable monthly costs. Those subscriptions include daily quota pools shared across a Google Cloud project.

Businesses can also allow workloads to move automatically to pay-as-you-go billing after the pooled quota is exhausted. This could help teams avoid interruptions, although administrators would need to monitor the resulting overage charges.

The approach gives organizations a choice between fixed costs for employees who use AI consistently and consumption billing for developers or agents with less predictable workloads. It builds on Google’s broader effort to position Gemini Enterprise as a central platform for building and governing workplace AI agents.

Spending caps can pause AI agents

Google is also introducing project-level monthly spending caps through the Google Cloud Billing Console.

When a project reaches its limit, Gemini Enterprise agent activity will pause without affecting other workloads in the Google Cloud project, according to Google. Administrators can increase or remove the cap when they are ready for the affected agents to resume operating.

Automated emails notify administrators when a project reaches 50%, 80% and 100% of its budget. Google said its billing tools can also flag unusual spending patterns and identify the three stock-keeping units, or SKUs, contributing most to an increase.

A pricing calculator will allow teams to estimate costs across licenses, developer tools and agent runtimes before deploying a project.

These controls address a growing enterprise problem because AI agent workloads can vary substantially in token consumption, making their final cost difficult to predict before a task begins.

Google offers discounts for committed spending

Organizations with steadier workloads can use Gemini Enterprise Flexible Savings Plans to reduce token costs.

Google is offering a 10% discount for a one-year commitment and a 20% discount for a three-year commitment. Businesses select a monthly spending amount, with no stated minimum or maximum, and the committed spending can count against an existing Google Cloud enterprise agreement.

The savings plans are available to self-service customers and organizations with enterprise agreements, according to Google.

Google also plans to introduce deferred-execution pricing for certain workloads. Eligible tasks that do not need to run immediately could be scheduled during off-peak periods for discounts of up to 50%.

That option is not yet generally available. Google said it is coming soon for select workloads but did not announce a rollout date.

More Google coverage

Developer AI usage moves under one subscription

Access to Google Antigravity and AI features in Android Studio will also be included with Gemini Enterprise subscriptions for eligible customers.

Usage across Gemini Enterprise, Antigravity and supported developer tools will appear in a consolidated view rather than being divided among separate licenses and billing systems.

Daily allowances will be pooled across a project, meaning unused quota from business users can be applied to developer tools and custom agents. Google said access is available to select customers and will roll out more broadly.

The new choices represent a different approach from when Google incorporated Gemini into its Workspace subscriptions, which gave businesses a predictable per-user cost. Agent workloads can run for different lengths of time and consume varying numbers of tokens, making consumption harder to forecast.

IT and FinOps teams should establish project-level caps, decide whether overages will be permitted and monitor token use before scaling an agent beyond a limited deployment. They should also determine whether pausing an agent at its spending limit could interrupt a business-critical workflow.

Google’s changes make it easier to start using Gemini Enterprise without paying for unused seats. Whether they reduce AI spending will depend on how closely organizations monitor consumption once their agents begin working at scale.

Read more: Google’s biggest announcements of 2026 include major changes across Gemini, Android and the company’s expanding AI product portfolio.

>

Continue Reading

Tech

Google’s new Fitbit Air brings Pokémon Sleep to your wrist

Published

on

Google is giving Pokémon fans a new reason to wear a Fitbit. The company announced Thursday a special-edition Fitbit Air that works with Pokémon Sleep, combining Fitbit’s health and fitness tracking and the sleep-focused Pokémon game. The announcement comes as Pokémon celebrates its 30th anniversary this year.

Pokémon Sleep first launched in 2023, turning something as ordinary as going to bed into a Pokémon game. Players can earn in-game rewards for getting to sleep before their set bedtime, while the amount and quality of sleep they get helps drive their progress. You start with a big, sleepy Snorlax. The more you sleep, the more “Drowsy Power” your Snorlax builds up, which in turn attracts more Pokémon for you to discover.

The Fitbit Air adds another layer to that experience. It can sync with both the Google Health app and Pokémon Sleep, allowing users to track metrics including daily movement, heart rate, and cardio load during the day, then use the device to record sleep duration and quality overnight.

This isn’t the first wearable that can connect with Pokémon Sleep. The app already supports several wearables including Apple Watch, the Fitbit series, Galaxy Watch, and Google Pixel Watch. Players can also use Pokémon Sleep without a wearable at all.

For Pokémon’s 30th anniversary, however, it’s a particularly clever crossover. It turns something people already do every night into another opportunity to engage with the franchise, while giving Google a playful way to make wearable health tracking feel more fun. Google has also recently teamed up with athlete Stephen Curry for a special edition of the Pixel Watch for $579, featuring an exclusive design built for workouts.

The special-edition device is available to preorder for $129 and starts shipping September 15. It will be sold online and in stores through the Google Store and Target. 

The standard Fitbit Air, meanwhile, costs $99. Google introduced its new Fitbit Air in May, featuring a slimmer design, improved health and fitness tracking, and an AI-powered coach that provides personalized guidance based on users’ activity, sleep, and wellness data.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

>

Continue Reading

Tech

Fashion startup Atoire raises $9.5M to bring consumers luxury goods without the markup

Published

on

Fashion startup Atoire announced Thursday a $9.5 million seed round with investors including a16z Speedrun, Night Capital, and Lightspeed Ventures’ Jeremy Liew.

Shoppers can visit the Atoire website and buy handbags or even clothes made from the same material — and coming from the same factory — that manufacturers high-end goods. The items are reasonably priced, too, with an Italian leather handbag costing just a few hundred, compared to the thousands a brand like Prada or Louis Vuitton would sell it for.

The startup arrives at a time when dupe culture has become increasingly popular, while the luxury sector has faced backlash from consumers in the post-pandemic era due to swift price hikes. 

As a result, young consumers especially have sought cheaper, near-identical replications of these high-end goods; doing so has become almost a status symbol itself. 

On Atoire, the items sold are mostly not dupes, says co-founder and serial entrepreneur Redouane Ramdani.

“It’s the same material, same craftsmanship,” he said. “It’s coming from the same factories.” He doesn’t consider Atoire fast fashion either. “It’s slow,” he clarified.

Before Atoire, Ramdani built the creator platform Snipfeed, which was acquired in 2024. Having grown up in France with a family that worked in luxury manufacturing, the founder always had an idea in the back of his mind that he would one day do something in the industry he grew up loving as a kid.

By the time he sold Snipfeed, however, the luxury manufacturing industry was quite different. 

The biggest shift he noticed was that luxury factories were no longer just manufacturing goods. Traditionally, a brand like Ralph Lauren would bring its own designs and materials to a factory, which would then produce them. The problem was that brands had to commit to large minimum orders, which often pushed them to overproduce inventory. At the same time, a lot of these factories depend on working with a small number of large brand customers. If a brand pulled out at the last minute or not enough of that overproduced inventory sold, the factories faced financial and inventory risk. 

“What’s changing is that the best factories increasingly have their own design and product-development capabilities,” Ramdani told TechCrunch. “Instead of simply manufacturing someone else’s designs, they can develop products themselves, adapt them quickly, and produce in smaller batches.”

Image Credits:Atoire

AI also helps these factories by pulling data that helps them identify which products are likely to sell out before committing to large production runs. 

“That reduces overproduction and allows factories to diversify beyond a handful of large customers,” he said.

These changes also gave Ramdani an idea, leading him to team up with Luis Angulo to launch the startup, which is now an AI-powered fashion brand that connects luxury manufacturers directly with consumers. 

He compared his company’s approach to the retailer Quince, which is known for selling high-quality, low-priced items.

“We are talking to a different generation who is coming back for things that are trendy but well-made,” he continued, adding that consumers are getting tired of pure fast fashion, especially because of the harmful impact it’s having on the environment.

AI, of course, is used. Ramdani sees AI agents changing the entire shopping experience, where, in the future, people just instruct AI agents to buy things for them.

Ramdani said the company uses AI to analyze fashion trends and test what colors might look good on a product. It also uses AI agents to estimate consumer demand and trains the agents to predict when a material might start running short so factories can stock up in time.

On the consumer side, the Atoire website offers an AI agent that can build an outfit based on whatever — or whoever — inspires the customer. Over time, Atoire uses AI to learn shoppers’ habits to suggest what to buy next. 

Ramdani said Atoire is already seeing an increase in sale referrals from platforms like ChatGPT and Claude. 

The company said its goal is to become an alternative to Zara and offer something “very high quality for a price point that’s very affordable.” The company ended last year with around $5 million in sales, and is expected to reach an annualized run rate north of $55 million this year. “

We are growing super fast,” Ramdani said, adding that the team is working with over 40 factories across the world right now. 

The fresh capital will fund logistics, build more AI tools, and support production. The company also plans to release its own in-house line, like Amazon Essentials, and will work with creators and influencers to help them launch their own clothing lines quickly.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

>

Continue Reading

Trending

Copyright © 2017 Zox News Theme. Theme by MVP Themes, powered by WordPress.