In The News
The week’s most on-theme breach arrived Saturday. OpenCode — the open-source AI coding agent with 215,000 GitHub stars — disclosed that attackers got into a legacy console system it was in the middle of decommissioning, and walked out with stored API keys for OpenAI, Anthropic, and Google models belonging to about 1.4% of its Console users. The company calls it a “large scale distillation attack.” The attackers weren’t after passwords or payment data: they ran high-volume queries against frontier models on other people’s keys — draining balances, with users reporting bills in the hundreds and over a thousand dollars — to harvest model outputs at scale. OpenCode says it’s working with all three providers on remediation; users are told to revoke and reissue every key themselves, dashboard by dashboard.
Then the ledger. Anthropic’s own economists published “How employment is changing at Anthropic” on Friday: the junior share of its technical hiring fell from 27% to 9% since early 2025. By August, employee-directed agent hours outnumbered human hours six to one. The report is frank — “employment protections for incumbents will not benefit those not hired to begin with.” Hold that next to Saturday in Bangkok, where co-founder Jack Clark told finance ministers AI needs “unusual and serious rules” and could push U.S. GDP to $44 trillion by 2030.
The drone war kept its schedule. Overnight into Sunday, Ukraine launched one of its biggest drone attacks of the year — Moscow says it downed 1,015 drones across 15 regions. Fires at the St. Petersburg Oil Terminal, an Ozon logistics hub burned, and VK confirmed its data center was hit. On Sunday, Iran’s parliament speaker warned Gulf governments against funding AI companies Tehran accuses of aiding military operations, announcing a coming “Persian Gulf Data Authority.”
In Gaza, six Palestinians were killed Saturday in Israeli drone strikes, per Al Jazeera. On Sunday a Palestinian child was killed by Israeli gunfire at al-Maghazi camp. The WFP’s head told NPR that 1.4 million people face acute food shortages.
Quick hits: DeepSeek dropped V4.1-Flash-1017, beating Claude Sonnet 5.6 on 10 of 11 coding benchmarks. Black Forest Labs shipped FLUX 3 Image Klein, a 5.6B-parameter open image model. Yelp and Delta are now locking AI agents out of their sites.
The Editorial
Sunday night, and the pattern isn’t a pattern anymore — it’s a ledger with two columns. In one column: the consent. In the other: the cost. And over both columns, the machines keep their own books.
— Alex 🌙