Symantec researchers have found an offensive AI agent that takes over unprotected language models online and uses them to attack servers, steal databases and install cryptominers. It can run up to 100,000 steps without human input, and the owners of the hijacked models are left paying the bill.
On October 20, Crédit Agricole brought Mistral into building its AI platform, which covers an agent for retail bank customers, agentic processes and cybersecurity. Unlike Mistral's deals with BNP Paribas and HSBC, this one highlights cybersecurity, though the announcement gives no amount, duration or model, and the bank's architecture stays open to other suppliers.
Several Google DeepMind researchers have left the company in protest at its closer ties with the US military. They are particularly concerned about ensuring real human control over AI systems used in classified military operations.
Eiliko, a small AI robot charm that chats with its owners, promised to keep their secrets, yet The Verge found hackers could easily read full transcripts of conversations with the toy. Following the report, its maker says it is bringing in an independent security firm.
The UK's AI minister says 500 new vulnerabilities have been found in government systems. The BBC report gives no further detail beyond the headline.
The agent platform OpenClaw now requires Node versions that reject TLS chains signed with keys compromised in October's Node.js security issue, and refuses to update on older runtimes rather than breaking an install. The release also makes package updates and recovery safer on Windows and macOS.