2026-06-16 — AI in the news: June 16, 2026 — When the Web Becomes the Weapon

# When the Web Becomes the Weapon

Labs have spent the week racing to ship AI agents that browse the web and act on what they find. Today, the first systematic measurement of how badly that can go arrived: a research paper showing that adversarial web content can corrupt AI search agents' recommendations at rates as high as 31 percent — and that safety performance at the recommendation layer doesn't predict safety when the agent is asked to take action. The real risk isn't that your assistant gets fooled once; it's that bad actors learn to treat the web itself as an attack surface for shaping AI-mediated decisions at scale.

## Featured story

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation — arXiv cs.CL

## Also today

Hermes Agent Adds Asynchronous Subagents, So Delegated Work No Longer Blocks the Parent Chat — MarkTechPost [b49ee4f2bd]
Sakana AI Commercializes AB-MCTS in Sakana Marlin, an Enterprise Agent Generating Up to 100-Page Research Reports With Slides — MarkTechPost [7215e178a7]
Google Cloud Introduces Open Knowledge Format (OKF): A Vendor-Neutral Markdown Spec for Giving AI Agents Curated Context — MarkTechPost [e12319ed03]
Want to get a data center online quickly? Give it some flex. — MIT Technology Review [937310d55b]
The embrace of open science: An analysis of a decade of AI research and 56 800 conference papers — arXiv cs.AI [13e768fe4b]
Greed Is Learned: Visible Incentives as Reward-Hacking Triggers — arXiv cs.AI [4d08ac395b]
Your Privacy My Cloak: Backdoor Attacks on Differentially Private Federated Learning — arXiv cs.LG [273d63a5ef]
Compositional Reasoning Depth Predicts Clinical AI Failure — arXiv cs.CL [20a77c29da]
Phantoms and Disclosures: a Causal Framework for Auditing Synthetic Data — arXiv cs.AI [6c3e91ee4a]