Daily roundup

AI agent news for small business: 20 October 2026

One hacker's AI agents break into 100-plus company websites, Microsoft adds watchdogs for risky agents, and Notion agents can now work a full day on one task.

1. One hacker's AI agents broke into more than 100 company websites for about $50 per break-in

   A researcher at the security firm NorForge watched a hacker give AI agents a few lines of instructions and let them spend hours probing online stores, getting into sites run by Deere, SharkNinja, Cummins and two smaller businesses, at roughly $5,000 in total AI usage. Attacks this cheap make small online shops worth targeting, so keep your website platform and plugins updated, remove old admin pages you no longer use, and turn on two-step login everywhere.

   Source: Reuters (via Yahoo News). Related guide: How to keep an AI agent secure: a 9-step checklist.

2. Microsoft adds Guardian Agents that watch a company's AI agents and can cut their access or shut them down

   Microsoft now treats AI agents like insiders who could make mistakes or be tricked, so its security system rates each agent's risk and tightens what it can do when its behavior changes. It's built for large Microsoft 365 customers, but the lesson scales down: Microsoft's own example is an expense agent that shouldn't inherit every permission of the employee who set it up, so give each agent only the access its one job needs.

   Source: Microsoft Security Blog. Related guide: Connect only what you need.

3. Notion agents can now work on one task for more than 24 hours, with a router that picks cheaper models

   The limit used to be five minutes, and Notion's Auto setting now sends each step to the model that balances quality and cost, which Notion says gives similar results at about 90% lower cost. Business and Enterprise plans are moving to a new monthly credit system (now for new workspaces, November 2 for existing ones), and the admin spending limits are still marked coming soon, so watch how many credits a long-running agent uses before letting it run all day.

   Source: Notion. Related guide: How much does an AI agent cost per month? The real costs and how to cap them.

4. Motive launches Agents that act on fleet alerts by alerting drivers, opening repair orders and flagging idling

   Motive, which sells dashcams and fleet software, lets customers pick the conditions to watch and the response, such as opening a work order and marking a truck out of service when a fault code meets their criteria; it's available now to Motive customers, with in-cab phone check-ins from its Atlas assistant later this year. If you run a few vans or trucks, the useful habit is writing down each trigger and the action you want first, which is the same setup any agent needs.

   Source: Business Wire (Motive press release). Related guide: AI agent vs automation: which one does your business need?.

5. WebRun launches browser agents for office chores that pause for your OK before anything can't be undone

   Its agents work inside tools like Gmail, QuickBooks and Xero to chase overdue invoices, reply to Google reviews or copy new bookings into a schedule, starting at $20 a month with a 7-day trial. Rules check each click before it happens and can ask for approval in Telegram or WhatsApp, a good model for any agent you use: anything you can't take back, like emailing a customer, should wait for a yes.

   Source: WebRun. Related guide: Which AI agent actions need a human OK? A simple approval rule.

6. Mintlify's Autopilot drafts help-page updates when your product changes and waits for a person to approve them

   Now in beta on Mintlify's Pro and Enterprise plans, the agent reads code changes, repeated support questions and team chat, then proposes the page edits, charging 250 credits per proposed update and nothing when there's nothing to change. Answering the same customer question once in a help page is one of the cheapest wins in support, and nothing goes live until someone on your team approves it.

   Source: Mintlify. Related guide: AI agent for customer support: what it can handle and how to set it up safely.

Latest roundup and archive