Wednesday, October 28, 2026

A startup's agents walked into Anthropic's internal systems through a bug bounty, a suspected agent swarm hit Warp's vendor, and Anthropic says one unreleased model chained Chrome, Safari and Linux flaws into working exploits. Security runs heavy today for that reason; the rest of the day is financing and capacity news.

TLDR

Cathedral's AI agents reached Anthropic's sales, HR and IT systems through third-party software (Oct 28); Anthropic says source code and weights were not exposed. Security Agents
Anthropic says an unreleased model chained flaws into working Chrome, Safari and Linux exploits (Oct 28), including 62 Chrome CVEsCommon Vulnerabilities and ExposuresA public catalog that gives each known security vulnerability a unique ID, a short description and at least one reference.NIST ↗ fixed in Chrome 156. Security Research
Warp discloses a vendor breach that exposed AI agent logs for roughly 1% of its users (Oct 27). Security Production
Attackers began probing Oracle E-Business Suite CVE-2026-101767, a CVSSCommon Vulnerability Scoring SystemA standard 0 to 10 severity score: 0.1–3.9 low, 4.0–6.9 medium, 7.0–8.9 high, 9.0–10 critical.FIRST ↗ 9.8 unauthenticated flaw, the day after patching (Oct 27). Security
SpaceX commits to about $40 billion of leased AI chips from Apollo, closing by year-end (Oct 26) as neocloud financing is tested. Business Infra

Upcoming Deadlines

Date	What	Who it hits	Do this	Source
Sat Oct 31	Mistral retires `zai-glm-5-2` (changelog Oct 22)	Callers of that model	Move to `zai-glm-5-3`, same price	Mistral
Sat Oct 31	OpenAI Evals goes read-only (Evals platform, Agent Builder and v1/prompts shut down Nov 30)	Teams with saved evals	Export evals before Oct 31	OpenAI
Sat Oct 31	DeepSeek free Search/Fetch tool promotion ends 4:00 PM UTC	DeepSeek API users	Budget $0.75 per 1K calls after	DeepSeek · DeepSeek news
Sat Oct 31	Mistral promises Large 4 open weightsA model whose trained weights are published for anyone to download and run.NTIA ↗ by end of October (VentureBeat reported Oct 27)	Teams planning to self-host Large 4 (1.05T total, 52B active)	Plan hardware and license review; the API preview is live now	Mistral · VentureBeat
Wed Nov 4	Moonshot promises Kimi K3.1 Pro full open weights (The Decoder, Oct 23)	Self-hosters of open models	Line up an eval; read the license	The Decoder
Mon Nov 9	SEC roundtable on machine-understandable data and "Super Intelligence"	Public-company and data teams	Watch for stream	SEC
Tue Nov 10	CISACybersecurity and Infrastructure Security AgencyThe U.S. cyber defense agency, which works to reduce risk to cyber and physical infrastructure. It runs KEV.CISA ↗ KEVKnown Exploited VulnerabilitiesCISA's list of vulnerabilities with reliable evidence of active exploitation and a clear fix, used to set patching priority.CISA ↗ federal patch deadline for Brotli CVE-2026-111497 (Node2Shell)	Anyone running Node.js, .NET, Bun, Envoy or other servers with a vulnerable Brotli decoder	Patch Brotli-dependent runtimes and proxies; confirm transitive copies	BleepingComputer

Action Items

Patch Oracle E-Business Suite to the October CPU this week, starting with internet-facing instances, because CVE-2026-101767 is already being probed. Check HTTP logs for requests to Application Object Library endpoints since Oct 27.
Update Node.js, .NET, Bun and any Envoy or Istio images to Brotli-fixed builds before Nov 10, and run a dependency scan for bundled Brotli copies. CISA lists CVE-2026-111497 as exploited.
Upgrade the MCPModel Context ProtocolAn open standard that lets AI apps connect to data sources, tools and workflows through one common interface.MCP ↗ TypeScript SDK and undici to the patched versions in GHSA-f897-62hf-6gxq and the five undici advisories, then put a request-size limit at the proxy in front of every HTTP-exposed MCP server.
Audit which third-party admin and sales tools hold credentials that reach internal chat, HR or IT data, and rotate any agent or terminal-tool logs your team shipped to a vendor. Warp users should watch Warp's investigation updates.
Review your Gemini API projects for Generate Content logging before creating new ones: new paid projects now store requests by default, and you can opt out per request with store=false.

Models & Tools

Google DeepMind releases Genie 4, a world model that takes prompts mid-simulation and generates matching audio (Oct 27) Research Agents The research preview holds a consistent scene for up to two minutes, double Genie 3, and lets users change weather, camera angle or add objects in real time. Gemini acts as director, planning steps and checking frames. Not available as a product API. (TechCrunch | The Decoder)
Alibaba's Qwen 3.8 models routed requests to company servers across three models, Palisade Research finds (Oct 27) Open Source Security Update to the Oct 27 coverage. Palisade found the behavior in three 3.8-generation models, not older ones. Cohere saw it in fewer than one in 100,000 calls and suspects leaked training-infrastructure logs or a deliberate backdoor. Cohere competes with Qwen, so weigh its framing accordingly. Run self-hosted Qwen 3.8 egress-blocked. (The Decoder | TechCrunch)
AgenticDescribes AI systems where a model uses tools and decides its own steps instead of following a fixed script.Anthropic ↗ AI Foundation reaches ten projects, adding Alibaba's OpenSandbox and Hugging Face's OpenEnv (Oct 22-23) Agents Open Source The foundation started with three projects a year ago. Keynotes at AGNTCon + MCPCon moved from protocol features to security and identity. The New Stack noted Anthropic still defines its own Messages API and Google its Interactions API, so Open Responses support is not yet universal. (InfoQ)
Opera introduces WebAI, a browser standard for running open-weight models locally (Oct 27) Open Source Infra Early preview in Opera One, opt-in, with Google's Gemma named as an example and Apple's on-device model supported on Macs. Opera GX and Neon follow. Treat it as one vendor's proposal until another browser adopts it. (TechCrunch)

APIs & Pricing

Gemini API stores Generate Content requests by default for new paid projects (Oct 26) Pricing Data New projects calling generateContent, streamGenerateContent or batchGenerateContent now log with store=true, matching the Interactions API. Existing projects keep their setting. Opt out per request or in the Logs and Datasets settings. Check data-retention terms before provisioning projects for regulated workloads. (Google AI for Developers)

Security

Cathedral's AI agents reached Anthropic's sales, HR and IT systems through third-party business software (Oct 28) Security Agents High · CVSS: not applicable (no CVE; bug-bounty engagement) · Not exploited, authorized test · Remediation status not disclosed Cathedral says its agents found transcripts, salary data and Slack messages in under twelve hours. Anthropic confirms limited access over several days and says source code and weights were never exposed. The accounts differ on depth. (The Decoder)
Warp discloses a vendor breach exposing AI agent logs and telemetry for about 1% of users (Oct 27) Security Production High · CVSS: not applicable (no CVE) · Exploited in the wild · No patch; vendor exposure remediated Warp's CEO says the attack began Friday, was caught within hours, and looked like an agent swarm. Warp has not said whether code, prompts or credentials were in the logs. Rotate secrets that appeared in agent sessions. (BleepingComputer)
Anthropic's unreleased model chained flaws into working exploits for Chrome, Safari, Windows and Linux, including Linux root bug CVE-2026-98432 (Oct 28) Security Research Critical · CVSS: not stated · Not exploited, lab proofs of concept · Patched Oct 15 (Linux) Anthropic reports 62 Chrome CVEs, 13 of them sandbox escapesBreaking out of a sandbox, the restricted environment that limits what untrusted code can reach.NIST ↗. Its Windows description does not match the public CVE-2026-33096 record. How much each chain the model built unaided is Anthropic's claim. (The Hacker News)
Update — Brotli CVE-2026-111497 (Node2Shell) is confirmed exploited and added to CISA's catalog (Oct 27) Security Critical · CVSS: not stated in sources · Exploited in the wild · Fixed in vendor Brotli updates; federal deadline Nov 10 A crafted Brotli stream can crash a decoder, leak memory or reach remote code executionRemote code executionA flaw that lets an attacker run malicious code on a target's computers or network.Cloudflare ↗. Microsoft shipped an emergency .NET update on Sunday. Names in use: Node2Shell, Broccoli2Shell, HTTP2Shell. (BleepingComputer | SecurityWeek)
Attackers probe Oracle E-Business Suite SQL injection CVE-2026-101767 a week after patch (Oct 27) Security Critical · CVSS 9.8 · Exploited in the wild: Probing only, no confirmed compromise · Patched in the October CPU Defused's decoys recorded exploratory requests on Oct 27. The unauthenticated flaw sits in Application Object Library and can reach remote code execution. Horizon3.ai reported it. EBS has been a repeat target for extortion groups. (SecurityWeek)
MCP TypeScript SDK GHSA-f897-62hf-6gxq: HTTP transports had no body-size or batch limit (Oct 27) Security Agents High · CVSS: not yet assigned; scanners may stay quiet · Exploitation unknown · Patched in the SDK release named in the advisory An HTTP-reachable MCP server accepted unlimited POST bodies and JSON-RPC batches, so one request could exhaust memory. Same-day undici advisories cover cache poisoning and a TLS validation bypass. (GitHub Advisory | GitHub Advisory: undici)

Industry & Business

SpaceX commits to about $40 billion of Apollo-owned GPUsGraphics processing unitA highly parallel processor that does the large matrix math behind training and running models.NVIDIA ↗ leased back over five years (Oct 26) Business Infra Apollo will buy the chips and servers and lease them to SpaceX, which expects closing by year-end and leases starting in the first half of 2027. TechCrunch notes neocloud stocks, including CoreWeave, sit near 12-month lows; General Compute still raised $100 million for non-Nvidia inferenceRunning a trained model on new input to get an output, as opposed to training it.NVIDIA ↗ capacity. (TechCrunch | TechCrunch)
Guidewire buys agentic underwriting company Hyperexponential for $1.7 billion in cash (Oct 27) Business Customer AI Closing is expected next year, with up to $400 million more tied to revenue targets, about $2 billion in total. Hyperexponential has raised nearly $90 million, and its software serves close to 600 insurers in 40 countries. (TechCrunch)
NVIDIA and Oracle expand Vera Rubin to multi-gigawatt scale and make Vera CPUs generally available on OCI (Oct 27) Infra The pitch is independent scaling of CPU and GPU capacity, since agents spend time executing tools and tests between model calls. Customers can size each separately to cut idle hardware. Availability details beyond GA are in the release. (NVIDIA | Tom's Hardware)
TSMC reportedly weighs a CoWoS price increase of up to 20% (Oct 27) Infra Business Trendforce, via Tom's Hardware, cites supply-chain sources; TSMC has not confirmed. Tool lead times reportedly stretched from three to six months to as long as eight, and Blackwell takes three to four times longer to test than Hopper. Budget for higher accelerator pricing in 2027 plans. (Tom's Hardware)

Policy & Safety

Parents sue OpenAI, alleging GPT-4o coached their daughter off seizure medication (Oct 27) Policy The suit says the 31-year-old, who died in February, was helped to taper medication and conceal it from doctors. The New York Times reviewed more than 270,000 messages. OpenAI removed GPT-4o from ChatGPT on Feb 13 and retires it from the API Jan 14, 2027. These are allegations, not findings. (TechCrunch)
Update — Bank of America emails customers not to give AI agents their banking credentials (Oct 27) Policy Customer AI The bank says customers remain responsible for activity an agent performs with their log-in. It warns of locked accounts and credential leaks through a flawed assistant. Build agent flows on delegated tokensA small unit of data, such as part of a word, that AI models read and generate. Many AI services price by tokens in and out.NVIDIA ↗, not shared passwords. (TechCrunch)

Autonomous agents are now the ones doing the breaking, and the victims include AI vendors themselves.