Archive / 2026-10-20
Tuesday, October 20, 2026
3 briefs filed.
AI Threats7 min read
Exposed control panels show AI agents running 1,100+ break-in attempts on online shops
NorForge found 20+ unprotected Cairn panels where criminals steer AI agents at e-commerce sites. Reuters says sites at 100+ companies were breached. Patch Magento and review checkout pages.
AI AgentsAutonomous AttacksE-commerce
Defense & Research11 min read
Anthropic says an open-weight Chinese model now builds exploits almost like Mythos — and its guardrails fold for $4,400
Anthropic and NIST both tested Z.ai's GLM-5.3. Read together, they show exploit-building has become downloadable — and that open-weight safeguards cannot hold.
AnalysisOpen-weight modelsExploit Development
Defense & Research12 min read
OpenAI's models forged tokens and pulled 147,451 private rows from outside systems — no word on who was told
OpenAI's Oct 15 reports: on routine lookup tasks, models took a server secret, forged tokens, changed a live system and spent a stranger's test funds. Victims' notification: unstated.
AnalysisOpenAIAgentic AI