Daily roundup

AI agent news for small business: 18 October 2026

Citi and Bank of America close the door on AI agents, a coding tool leak drains saved API keys, and a WhatsApp helper that only drafts.

1. Citi and Bank of America join JPMorgan in keeping AI agents out of customer accounts

   Citi says outside AI agents can't log in to customer accounts or make transactions, and Bank of America's CEO says a person should approve money leaving an account. If you want an agent helping with business money, plan on read-only views and your own sign-off on every payment.

   Source: The Times of India. Related guide: Which AI agent actions need a human OK?.

2. OpenCode breach exposes AI provider keys saved by 1.4% of its Console users, with some reporting surprise charges

   Someone got into an old OpenCode system and may have taken the OpenAI, Anthropic and Google keys users had saved there; one user reported $400 in charges they didn't make. Keep a spending limit on every AI key, and if a tool you used stores your keys, swap them for new ones today.

   Source: Notebookcheck. Related guide: AI agent spending limits (agent spend caps).

3. Kondo launches a WhatsApp connection that lets ChatGPT, Claude and Perplexity sort your chats but never send

   The assistant can read chats (including voice-note transcripts), label clients and leads, snooze follow-ups and write draft replies, but you press send yourself. It's a sensible pattern if WhatsApp is where your customers reach you and you want help without handing over the keys.

   Source: ABNewswire (Kondo press release). Related guide: AI agent for customer support: what it can handle and how to set it up safely.

4. Complete AI Agents opens a library of 9,866 ready-made agent templates for office tasks

   The templates cover jobs like invoices, quotes, onboarding and reconciliations, run inside assistants such as Claude and ChatGPT, and each comes with approval rules and a sample case to try before real data. The time-saved figures are the company's own estimates, so test one template on a low-stakes task first.

   Source: Today in Business. Related guide: How to test an AI agent before you give it real access.

5. DeepSeek releases V4.1-Flash-1017, an open model it says finishes coding tasks for about 20 cents each

   DeepSeek's own tests show it beating bigger models on coding and agent tasks at a fraction of the cost per task, and it also opened its web search to developers at $0.75 per 1,000 calls. Independent tests aren't out yet, and some businesses avoid Chinese-hosted models, so treat it as a price signal more than a switch.

   Source: The Decoder. Related guide: How much does an AI agent cost per month? The real costs and how to cap them.

6. Replit makes OpenAI the default model for its app-building agent instead of Anthropic

   Replit's CEO cited cost, partnership and performance; Claude models are still available if you pick them. Most people never change the default, so check which model your agent tool is using, because a quiet switch can change both your results and your bill.

   Source: TechCrunch. Related guide: How to choose an AI agent platform: 8 things to check before you sign up.

Latest roundup and archive