Daily editorial briefing
AI starts taking action: new capabilities, new controls
4 stories + one brief. Selected developments from 15 September, with relevant context from 14 September.
News verified: 15 September, with relevant context from 14 September
In 60 seconds
- Security: Spain’s data-protection authority has received a notification involving a suspected AI-agent attack. The incident remains under assessment.
- Business: Salesforce introduces a model specialised in CRM tasks. Google enables voice agents to keep talking while carrying out work.
- Personal assistants: Apple begins rolling out a more action-oriented Siri. The question is no longer just what an assistant knows, but what it is allowed to do.
Spain · published 14 September · recent context
AEPD receives notification of an attack involving an AI agent
Spain’s data-protection authority, the AEPD, reports its first received breach notification in which an attack was allegedly executed using an AI agent. The incident remains under assessment. This does not establish that it was “Spain’s first AI cyberattack”.
Why it matters Agents with system access need restricted permissions, traceable activity and a reliable way to stop them. An instruction to behave cautiously does not replace those controls.
Business · 15 September
Salesforce introduces Koa, a model for CRM work
Koa builds on NVIDIA Nemotron and was post-trained using synthetic CRM scenarios. Salesforce says customer data was not used for training.
An important distinction: the model operates within Salesforce’s trust boundary, not necessarily the customer organisation’s infrastructure. Not using customer data for training also does not mean the service avoids processing that data during use.
Koa is currently available to selected pilot customers. The performance claims come from Salesforce’s own CRM benchmark.
Models and voice · 15 September
Google lets voice agents work while the conversation continues
Gemini 3.8 Live and Extended Thinking combine conversation with tool use and background tasks. The models are generally available through the Gemini API; certain enterprise offerings remain in private preview.
Why it matters Voice can become a working interface rather than merely a transcription feature. Spoken requests must nevertheless remain subject to access controls and approval requirements.
Personal assistants · 14 September · recent context
Siri AI begins rolling out with personal context and app actions
Apple has begun rolling out Siri AI in English beta. The assistant can draw on personal context, understand onscreen content and perform more actions across applications.
Availability depends on device and region. Apple states initial EU restrictions for iOS, iPadOS and watchOS, but not for Mac and Vision Pro.
Why it matters As assistants become part of the operating system, the distinction between information they can read and actions they can execute becomes increasingly important.
The signal in the noise
Our interpretation is straightforward: when AI moves from proposing actions to executing them, controls must move with it. Organisations need to know which agents exist, what data and tools they can access, who approves consequential actions, and how to stop their work.
On the radar
- Microsoft adds an agent control layer. Microsoft announced Microsoft 365 G7 and Agent 365 for U.S. government cloud environments. Purchasing begins on 1 October, with capabilities introduced in phases. Agent 365 is intended to support registering, governing and blocking agents.
Sources
Corporate product and performance claims are expressly attributed to their source.
- AEPD · 2026-09-14Primera notificación de una brecha de datos personales causada por un ataque ejecutado mediante un agente de IA
- Salesforce · 2026-09-15Announcing Koa: Salesforce’s First CRM Reasoning Model, Built on NVIDIA Nemotron
- Google · 2026-09-15Gemini API release notes — September 15, 2026
- Apple · 2026-09-14Siri AI, a profoundly more capable and personal assistant, is here
- Microsoft · 2026-09-15Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead