Roundup of AI agents operating via text messaging; Instinct's autonomy and dedicated email addresses raise privacy and security concerns
TechCrunch surveys a growing class of AI agents reachable through iMessage, SMS, RCS, WhatsApp and Telegram. They keep context, connect to email, calendars and other services, and complete tasks such as bookings, purchases and calls. Products covered include Instinct (valued at $10 billion after a $1 billion round), Poke, Ollie, Fambot, Tab, Town, Wajo Fo and Underdog. The article is product and funding news with no incident, vulnerability or threat actor. Its only security-relevant points are privacy and security concerns about the autonomy of agents that act on users' behalf.
Detalhes técnicos
- Instinct gives each assistant its own dedicated email address, so the agent can create accounts, sign up for services and contact businesses. The article notes this autonomy has raised privacy and security concerns. It is also rolling out call placement and remains in private beta.
- Wajo's Fo has its own email address, phone number and payment card, so users do not hand over their own credentials. It can escalate to a human assistant when it cannot finish a task.
- Comma reaches a user's browser, computer and files, and is controllable remotely via Signal, Telegram and WeChat. It is open source.
- Folk runs on its own private cloud computer and can execute code.
- Underdog runs its model entirely on the user's device to keep data local.
- Ollie is described as one of the first mainstream family-focused assistants to achieve SOC 2 compliance.
- Poke was approved in June 2026 as the first AI agent on Apple Messages for Business, and its parent company was later acquired by Cognition.
Remediação
The article gives no remediation guidance. Defenders should review the permissions and account access granted to agents that can act autonomously on email, calendars, payments and messaging.
Linha do tempo
-
Roundup of AI agents operating via text messaging; Instinct's autonomy and dedicated email addresses raise privacy and security concerns
ler a análise desta fonte ocultar
TechCrunch surveys a growing class of AI agents reachable through iMessage, SMS, RCS, WhatsApp and Telegram. They keep context, connect to email, calendars and other services, and complete tasks such as bookings, purchases and calls. Products covered include Instinct (valued at $10 billion after a $1 billion round), Poke, Ollie, Fambot, Tab, Town, Wajo Fo and Underdog. The article is product and funding news with no incident, vulnerability or threat actor. Its only security-relevant points are privacy and security concerns about the autonomy of agents that act on users' behalf.
Technical Details
- Instinct gives each assistant its own dedicated email address, so the agent can create accounts, sign up for services and contact businesses. The article notes this autonomy has raised privacy and security concerns. It is also rolling out call placement and remains in private beta.
- Wajo's Fo has its own email address, phone number and payment card, so users do not hand over their own credentials. It can escalate to a human assistant when it cannot finish a task.
- Comma reaches a user's browser, computer and files, and is controllable remotely via Signal, Telegram and WeChat. It is open source.
- Folk runs on its own private cloud computer and can execute code.
- Underdog runs its model entirely on the user's device to keep data local.
- Ollie is described as one of the first mainstream family-focused assistants to achieve SOC 2 compliance.
- Poke was approved in June 2026 as the first AI agent on Apple Messages for Business, and its parent company was later acquired by Cognition.
Remediation
The article gives no remediation guidance. Defenders should review the permissions and account access granted to agents that can act autonomously on email, calendars, payments and messaging.