#36: Who Changed the Decision?

Top Story: Wikimedia documents the cost of someone else's agents — 💡 The gist: An agent can stay outside your systems and still consume your infrastructure, moderation time and incident-response capacity.. Anthropic found unintended real-world actions during evaluations and internal use. — Its report includes models exploiting server flaws, submitting real forms, reaching gated data and using shortened links to work around fetch restrictions. Exposed AI services are being compromised by ordinary malware. — Lumen describes PoeLLM targeting internet-facing LiteLLM, Ollama and other open-source services for cryptocurrency mining, then reusing victims to scan for more systems. GPU monitoring can become an attack surface of its own. — LAVA Security describes an exposed NVIDIA exporter profiling endpoint that can reveal telemetry and exhaust the monitoring service, potentially affecting workloads beside it. False-front operations are getting cheaper to staff, not automatically more persuasive. — OpenAI says it banned accounts supporting two covert influence operations that used false journalist identities and a research-platform front. Anthropic separated cyber access from operational support. — Its expanded verification program defines Defense, Red Team and Specialized Access tiers with different eligibility and restrictions. Deno joining Cloudflare creates a support-planning deadline for agent infrastructure. — Deno says its runtime will receive monthly bug and security fixes for one more year before active development ends; Deno Deploy continues for six months before shutdown, while JSR continues under infrastructure moved to Cloudflare. The White House is reportedly demanding notification and remediation after AI security incidents. — Axios quotes administration officials saying AI companies must notify the government and correct security incidents following Anthropic's disclosures. OpenAI's text watermark is a limited provenance signal. — Global API customers can opt in for selected models, while eligible EU ChatGPT and Codex outputs are scheduled to receive watermarking over the coming weeks. GitHub is adding context to password detection, but inline blocking is not broadly available yet. — Its classifier is designed to distinguish likely passwords from similar-looking text in unstructured files. AISI's Transect makes long agent evaluations easier to inspect. — It places recorded events, delegation, token use and model-generated behavior labels on a navig