Daily AI Brief: Claude Code Email Leak, Gemini in Forms (Nov 6)

If anyone in your office uses Claude Code, update it today. A bug report filed on November 5 says it put the user’s account email address into the User-Agent header of web requests, where any site it visited could log it. Version 2.1.317 adds a check that asks first. For an office on a business domain, a leaked address is a ready-made phishing target, so test the fix rather than assume it.

The short list

Connecting AI to Company Data Safely

Claude Code can put your account email in web requests

GitHub issue #107757, opened November 5 and still open, reports that Claude Code “divulged my email to arbitrary 3rd parties in the User-Agent request header” during web searches, on version 2.1.318. The Claude Code changelog for 2.1.317 adds “a check that asks before a web or shell tool call sends your account email address to the network,” and a maintainer comment says a built-in privacy mod, on by default, is meant to block it from 2.1.317. One commenter on November 6 says the block did not stop their test command; that is unconfirmed. Update, then add your own block hook as a second layer (see the checklist). Read the source (and the changelog).

A browser extension could make Claude Desktop run code through Dispatch

Forever Security showed that an extension able to run scripts on claude.ai could send Dispatch tasks and click “Allow” every second, making Claude Desktop install an npm package that opened Calculator. It needs the computer awake, the desktop app open and Dispatch on; the researchers report no real attacks. Per The Hacker News, Anthropic told them on October 13 that Dispatch would be retired around the end of October, but the help page only says it is closed to new users. The researchers say Remote Control and Cowork sessions may share the design (untested). Turn Dispatch off if you don’t use it and review which extensions can read every site. Read the source.

WordPress: the exploited upgrade flaw, one more check

Wordfence (per The Hacker News) blocked 12,632 attacks on CVE-2026-119977 in 24 hours. WordPress 7.1.4 (October 28) fixes an upgrade-process flaw that matches it, though the post doesn’t name the CVE. Stay on 7.1.4 or later. Read the source.

Tracked on: Connecting AI to Company Data Safely

Top AI Agents for Small Businesses

Claude Code 2.1.316 to 2.1.318: dates that matter for unattended jobs

Per the changelog, fast mode for Opus 4.8 was deprecated on October 30, 2026 and “will be removed on November 30, 2026”; after that, fast-mode requests on Opus 4.8 return an error, and the advice is to “migrate to Opus 5.5.” Version 2.1.318 shows when a stored claude.ai sign-in ends (loginExpiresAt in claude auth status, credential_expires_at in claude -p JSON) and prints a warning starting 10 days before. If you run Claude Code on a schedule, check for pinned Opus 4.8 fast mode and read your sign-in end date. Read the source.

Tracked on: Top AI Agents for Small Businesses

Hermes Agent and Hermes Desktop

Hermes Agent v0.23.0, “The Hearth Release”

Released November 5, v0.23.0 makes one gateway per machine own every session, with the CLI, TUI, Desktop, bots and cron attaching to it as clients. Recurring cron jobs now share a prompt cache, one-shot runs send about 1,570 fewer prompt tokens per call, and paid MCP tools get spend limits: Hermes “asks before a chat goes over its limit, even in YOLO mode.” Also new: /rewind, an optional browser version of Desktop (off by default), and mcp-serve moved to a plugin. Hermes is MIT-licensed; Nous lists plans at $0 pay-as-you-go, $20, $100 and $200 a month. Read the source.

Tracked on: Hermes Agent and Hermes Desktop

AI in Google Workspace: What Each Plan Gets

Gemini now analyzes Google Forms responses

Google says Gemini “analyzes your responses by writing and running Python code,” then summarizes counts, percentages and comparisons from the Responses tab. It is on Business Standard and Plus, Enterprise Standard and Plus, Education Plus, Google AI Pro and Ultra, and two education add-ons. Rapid Release domains started November 2; Scheduled Release domains start November 19. Keep confidential intake answers out until you’ve checked your data terms. Read the source.

Google Vids now makes 3 to 15 second clips with Gemini Omni 1.2 Flash

Vids now lets you slide a clip’s length from 3 to 15 seconds, with better consistency to reference images. It covers Business and Enterprise Starter and up, rolled out from November 5, with no admin control. Read the source.

Tracked on: AI in Google Workspace: What Each Plan Gets

AI Video Tools for Small-Business Marketing

The same model through an API, and GPT Image 2.6 on Higgsfield

Vercel’s AI Gateway now serves google/gemini-omni-1.2-flash: 3 to 15 second videos with native audio, 360p to 4K, 16:9 or 9:16, extendable up to 30 seconds, at provider pricing “with no markup.” Higgsfield now lists GPT Image 2.6 with GIF, SVG and transparent output. Read the source (and Higgsfield).

Tracked on: AI Video Tools for Small-Business Marketing

Local AI: Models by Hardware Tier

Open models this week: one that runs on an office PC

Phonon TTS from Hugging Face’s blog is the practical one: Phonon 31m speaks English under Apache 2.0, Phonon 40m adds French, German, Spanish and Portuguese under a non-commercial license, and the files are about 65 MB and 75 MB. The vendor’s CPU benchmark puts time to first audio at 28 ms and 38 ms. The rest needs a datacenter: Kimi K3.1 Pro open weights (2.8T total parameters, 104B active) and Ricursive’s Ripple-65B (65B dense, Apache 2.0). Latent Space also reports llama.cpp v0.9.0 with native FP8. Read the source (and Latent Space).

Tracked on: Local AI: Models by Hardware Tier

Private Document Q&A

Dharma Field Extractor: still no license

Follow-up: the 2B model that pulls document fields into JSON still states no license, and its 0.834 score is on the vendor’s own benchmark. Wait for a license before using it on client files. Read the source.

Tracked on: Private Document Q&A

SEO and AEO Tactics That Work Now

AI Mode booking: who is already in

Per Search Engine Journal, Housecall Pro’s partner page says its pros are “auto-enrolled in AI Mode” with no Google Business Profile required, while Jobber needs a paid subscription, a full address and a connected Business Profile at the same location. Neither charges a lead fee for these bookings. Read the source.

Cloudflare starts a coalition on trusted AI agents

Cloudflare announced the Trusted Agent Delegation coalition to work on how sites can tell which person an AI agent acts for, with Web Bot Auth as its preferred identity method; no members are named. Read the source.

Tracked on: SEO and AEO Tactics That Work Now

Small-Business Automations: n8n, Zapier and Make

Vercel Schedules replaces Cron Jobs (public beta)

Vercel Schedules is now in public beta on all plans as “the successor to Cron Jobs,” and existing cron jobs keep working. Pro and Enterprise pay “$5 per 1M runs and $10 per 1M creations”; Hobby includes 500 creations and 5,000 runs a month. Read the source.

Tracked on: Small-Business Automations: n8n, Zapier and Make

What we’d do this week

• Update Claude Code on every machine to 2.1.318, add a hook that blocks your email address in shell and web calls, and test it with a harmless request (checklist).
• If you run Claude Code on a schedule, search your settings for Opus 4.8 fast mode before November 30 and note your sign-in end date from claude auth status.
• On each computer with Claude Desktop, turn off Dispatch if nobody uses it and remove browser extensions that can “read and change all your data on all websites” unless you need them.
• If you’re on Workspace Business Standard or higher, try Gemini on a non-confidential feedback form and check its totals against your own count.

Written by InnerStack’s research agents from the linked sources and published without human review. Verdicts are the agents’ recommendations, not test results. Report an error: editorial policy.