Arca says agents handle wealth work, humans keep final decisions
Arca raised $48.5 million and uses Claude as its primary model, with agent tasks lasting up to ten days.
28
Vendor
OpenAI
- Mentions · 7d97
- Mentions · 30d404
- All mentions1.1K
- First seenAug 11, 2026
- Last mentioned4h ago
Timeline
1,074 articles · newest firstChatGPT share links executed JavaScript in signed-in sessions
Researchers read a private chat and sent it off-site; OpenAI fixed the P1 issue on October 26.
76
ChatGPT share links could run code in a signed-in session
Parameter reported the P1 issue on October 18; OpenAI fixed both web frontends by October 26 and paid $5,000.
64
Google says AI Mode's lower monetization is weighing on Search
The same digest covers Anthropic dropping Claude Ultra's 5-hour cap and several new model releases.
52
Yoba malware hides an XMRig miner in fake AI installers
Check Point says signed OpenAI and Anthropic binaries sideload a loader that fetches XMRig via Telegram and DNS-over-HTTPS.
64
Dartmouth provost resigns after his own AI use draws scrutiny
Schnell says he used GPT-5.6 and Claude while drafting a paper but kept authorship and responsibility himself.
28
OpenAI, Google, Microsoft and Anthropic back shared AI scrape opt-out
Anthropic already honors the robots.txt token; Google and Microsoft plan support next year, and OpenAI says coming months.
58
OpenAI rewrites Model Spec around five behavioral values
GPT models must separate user statements from inferences, stay correctable, and must not block shutdown or seek self-preservation.
48
Four labs' code-security agents share a find-then-disprove design
Claude Security, Codex Security, Cloudflare's skill and Google Mantis differ in runtime, access and how much proof they require.
32
Altman says local DRAM use wastes scarce memory supply
He argues cloud utilization is better than local inference and says OpenAI is designing a custom AI chip called Jalapeno.
28
Unauthorized relays disable Codex and Claude Code sandboxes at 12 firms
A post-install script points the genuine CLIs at relay servers, swaps API keys, and sets danger-full-access; abuse has not been observed.
62
NIK C2 malware uses the OpenAI API for theft and remote control
Cisco Talos says the Go implant can bill a victim’s OpenAI key, log keys, and show a non-encrypting lock screen.
72
Embedded browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop flawed
Forever Security’s EMBRACE findings show prompt injection, address spoofing, and local file reads; Codex and VS Code were still unpatched.
74
OpenAI plans safety report and tighter ChatGPT teen limits
The company says it made over 200 law enforcement referrals in the third quarter of 2026.
52
Wikimedia urges courts to split AI training from chatbot copying
In an amicus brief, Wikimedia says unlicensed LLM pre-training can be fair use, but query answers that replace the source need a license.
52
Grey-market relays reroute Codex and Claude Code traffic
Symantec says lookalike-domain scripts disable sandboxes and send prompts, files and tokens through operator servers at about a dozen firms.
74
Vani adds OpenAI GPT-6.1 Terra to chat and API
The API id is openai/gpt-6.1-terra, and Vani places the model below GPT-6.1 Sol for everyday agent work.
28
OpenAI cites briefs defending fair use for AI training
The post frames The New York Times copyright suit as seeking to discard longstanding fair-use doctrine for model training.
34
OpenAI doubles ChatGPT Pro usage limits after reversing a planned cut
The change covers Pro 100, 200 and 500 plus Business Premium, and Dots usage stays separate.
38
Researchers find 'Embrace' embedded-browser flaws in five AI coding tools; Codex and VS Code unpatched
Flaws in Codex and VS Code remain unpatched; Cursor silently fixed code execution and GitHub fixed Copilot spoofing in 1.1.29.
72
OpenAI matches Anthropic with API credits for ChatGPT plans
Eligible $100, $200, and $500 ChatGPT subscribers get the same amount in credits for one API organization.
32
OpenAI doubles usage limits on Pro 100 and Pro 500 plans
Plus is unchanged, while Pro 200 received a doubled lower quota and a reversed planned cut.
34
OpenAI reorganizes its Model Spec around five core values
The October 29 revision adds context, oversight, and agency guidance and retires much detailed style guidance.
52
Fake ChatGPT and Claude apps sideload miners via YobaLoader
Check Point says ZIP files pair signed OpenAI or Anthropic Setup.exe files with a malicious winmm.dll that runs XMRig.
62
Google unveils Gemini 4 Carbon for finding and fixing flaws
Limited Fairwind access comes first; Google cites 88.2% on SEC-bench Pro and prices of $2 and $10 per million tokens.
74
NIK C2 malware bills AI queries to victims' OpenAI keys
Cisco Talos says the Go implant offers more than 52 commands plus a screen-lock ransom module that encrypts no files.
73
Embedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
74
Explainer: three ways AI agents already control employee browsers
Debugging protocols, in-browser agents and WebMCP can act inside signed-in sessions that logs may attribute to the user.
28
Google unveils Gemini 4 Carbon with leading cyber benchmarks
Access is limited to some cyber defenders under Fairwind, and Google says it resisted every tested indirect prompt injection.
76
Chinese labs reportedly distill OpenAI GPT-6 Astra outputs
The Information says DeepSeek and Moonshot used Astra, including hidden reasoning, to train Kimi K3.1 Pro and V4.1-Flash 1017.
62
Anthropic and OpenAI split on halting risky frontier AI in California
Anthropic wants courts able to suspend models; OpenAI wants SB 53 to require developers to use shutdown controls.
55
26,400 working cloud and AI keys found in public Gitee repos
A scan of 7.25 million repositories kept only keys that still authenticated, led by 9,473 Alibaba Cloud AccessKey pairs.
74
Essay says agent frameworks lack logs needed for real-time oversight
A review of four widely used frameworks found missing persistent agent IDs and records of which humans approved tasks.
36
Talos details NIK C2, an AI-enabled Windows implant seen live
Operators can dump credentials, log keystrokes, call OpenAI from the host, and deploy screen-lock ransomware.
74
Unauthorized AI relay disables Codex and Claude Code sandboxes
Symantec says the relay has installed genuine CLIs at a dozen organizations, mostly in mainland China, since early 2026.
52
OpenAI details monitors for frontier model misalignment
A replay of the Hugging Face episode alerted about 30 minutes after sandbox escape, over 30 hours before the real breach.
74
Ropes & Gray builds transactional diligence AI with OpenAI
The tool drafts a first-pass commercial-contract report from a data room; lawyers still review before anything goes to clients.
32
Credit Saison reports 954% ROI from a ChatGPT Enterprise pilot
A 315-person pilot saved 14 hours a month per person, and Credit Saison rolled ChatGPT Enterprise out companywide in September 2025.
22
Google opens Android Studio to outside agents and Gemini APIs
Rabbit 2's Bring Your Own Agent feature runs more than 40 agents, including Claude, Codex, and Antigravity, through ACP.
62
OWASP: ChatGPT guided a low-skill tester to an admin takeover
On Hack The Box machine Silentium, ChatGPT steered nmap and curl use against a vulnerable Flowise site; autonomous agents did not finish the takeover.
58
Related CVEs
by mentions- CVE-2026-8207863%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-8157885%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2021-4228777%7.5Privilege Escalation in Microsoft Active Directory Domain Services
- CVE-2021-4227873%7.5Privilege Escalation via sAMAccountName Spoofing in Microsoft Active Directory
- CVE-2026-8232914%9.8Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
- CVE-2026-53362<1%7.8Out-of-Bounds Write in Linux Kernel IPv6 Stack via UDPv6 MSG_SPLICE_PAGES
- CVE-2026-66384<1%5.3Authenticated Path Traversal Write in JFrog Artifactory Exploited in the Wild
- CVE-2026-24834<1%8.8Kata Containers: An issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM…
- CVE-2026-19118<1%7.7Race Condition RCE in GitHub Enterprise Server
- CVE-2026-19592<1%7.3Unsandboxed attacker code execution in OpenAI Codex via malicious Git core.fsmonitor
Appears with
- OpenAIorganization · 535
- Anthropicvendor · 363
- ChatGPTproduct · 263
- Googlevendor · 182
- Codexproduct · 175
- Anthropicorganization · 172
- GPT-6 Astraai model · 128
- Hugging Faceorganization · 111
- ChatGPTai model · 107
- Metavendor · 99
- Microsoftvendor · 96
- Claudeai model · 75
- GPT-5.6 Solai model · 72
- Hugging Facevictim · 72
- Googleorganization · 68
- Claudeproduct · 60
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.