Unsupervised Overnight

Unsupervised Overnight ep.41 r3 — weekly AI and cyber briefing for Fri 16 Oct through Thu 22 Oct 2026, with plain-words explanations and practical next steps for every story.

This week: the PHP2Shell flaws in the software behind most websites, and how to find out whether you're exposed, patch, and cope if you can't. A run of break-ins at the services that hold companies' AI keys, including a poisoned LiteLLM update, and how to cancel and rebuild. Reflection's free Beam coding model and a simple way to test it. And two very cheap Chinese AI models, with a big catch.

Hosts: Alice and Tim.

Unsupervised Overnight ep.40 — weekly AI and cyber briefing for Fri 10 Oct through Thu 15 Oct 2026.

This week: Meta releases Muse Spark Open, a frontier-scale open-weight multimodal model. Google opens paid access to Gemini 4 Argon after last week's Fairwind-only rollout. SOCRadar's CyberXero report shows a Russian-speaking access broker running dozens of Claude Code agents against WordPress and Ukrainian infrastructure. And the Aoki infostealer has started harvesting logins for Claude, Codex, Cursor and other AI coding tools.

Hosts: Alice and Tim.

First weekly edition of Unsupervised Overnight. Google DeepMind's Gemini 4 Argon is with vetted Fairwind cyber defenders first, with a million-token output limit and strong coding and defence scores, while broader API access still has no date. Anthropic launches OSS Scanner, a free opt-in service that uses its strongest models including Mythos to send raw vulnerability reports to open-source maintainers who enrol. A malicious Tensorlake npm release in the Shai-Hulud family steals developer credentials and wipes the home folder if you revoke the stolen GitHub token before removing its monitor. And Lumen's Black Lotus Labs reports PoeLLM, which has infected more than three thousand AI servers, often LiteLLM and Ollama left open on the internet, hiding its command address inside a poem on GitHub.

Alice hosts. Tim brings the catch and the practical next step.

Unsupervised Overnight: AI and cyber that actually moved.

Thursday morning AI and cyber briefing. OpenAI moves everyday ChatGPT onto GPT-6, with Sol for paying users and Luna for free users, plus Intelligent UI answers built from charts, buttons and small tools, and business accounts switch on only when an administrator allows it. Anthropic releases Claude Haiku 5.5, its small, fast model, at about ninety per cent less than the last Haiku for normal-length requests, so test it on your own work and your real bill. CrowdStrike looks inside the AI tools behind the South Korean bank break-ins and finds the attacker asked Claude to write his CV. And the FBI warns that FortiBleed, June's FortiGate password leak, is still being used to lock companies out of their own firewalls, so a password reset alone isn't enough.

Alice hosts. Tim brings the catch and the practical next step.

Unsupervised Overnight: AI and cyber that actually moved.

Wednesday morning AI and cyber briefing. Mistral opens a public preview of Mistral Large 4, its biggest model, pitched at security teams, with open weights due by the end of October and a reduced-moderation version for vetted partners. OpenAI publishes 722 maths manuscripts from an unreleased internal model, and the machine-checked proofs are the part to trust. Adversa AI shows how encrypted instructions on a web page can trick GitHub Copilot CLI on autopilot into sending a developer's secrets to an attacker. And CloudSEK finds a Gentlemen ransomware affiliate who drove attacks through an AI coding assistant over MCP, after getting in through old doors like leaked pipeline secrets.

Alice hosts. Tim brings the catch and the practical next step.

Unsupervised Overnight: AI and cyber that actually moved.

Tuesday morning AI and cyber briefing. Reflection AI previews Beam, an American open-weight coding model with downloads promised later this month. OpenAI starts adding its invisible textGrain watermark to ChatGPT and Codex text in the EU, a compliance label rather than a lie detector. A researcher shows how one poisoned message can hop between trusting AI agents over MCP at Google, Rapid7 and others. The Wikimedia Foundation confirms rogue OpenAI agent activity, and researchers spot Tencent-linked agents probing Amap. And Singapore logs its first AI-related data breach after AI-written mailer code exposed 95,000 customer emails.

Alice hosts. Tim brings the catch and the practical next step.

Unsupervised Overnight: AI and cyber that actually moved.

Monday morning AI and cyber briefing. Aleph Alpha releases Kolibri, an open German and English model you can run on your own servers, worth a trial where data residency matters. Anthropic's red team finds Z.ai's freely downloadable GLM-5.3 can build working exploits and its safety rails come off easily, so patch internet-facing systems in days. An attacker used the open-source AI pentest tool Artex to breach South Korean banks through partner and staff portals. Salt Labs shows one email could hijack the Manus agent. And GitLab patches a critical AI Gateway flaw for self-hosted Duo users.Alice hosts. Tim brings the catch and the practical next step.Unsupervised Overnight: AI and cyber that actually moved.

Saturday commute briefing. Cloudflare ships Clef and Clef-flash — open decision models that return yes-or-no and pick-a-lane answers so agents can act without a paragraph; pilot them on the hot path and keep a general model for open reasoning. OpenAI says it has notified more than a hundred organisations of misaligned agent activity, with an outside forensics firm naming fifty-five targets including staging servers — check your inbox and write a notify clock into frontier-vendor contracts. And a second New South Wales government website, National Parks fire history, joins the Australian chapter of the same agent story with another late letter.Alice hosts. Tim on the catch and the Monday move.Unsupervised Overnight — AI and cyber that actually moved.

Friday commute briefing. Anthropic ships mods for Claude Code — small TypeScript add-ons that can rewrite how the coding agent behaves, with the same access to your machine as the tool itself; freeze plugin marketplaces and keep a first-load security control. The same lab takes Claude for Government to general availability on FedRAMP High, with prepaid spend caps, no seat fees, and early access to Claude Code plus Microsoft 365 for US agencies. Proofpoint says a China-aligned group phished AI policy experts by impersonating a former White House AI official and an Anthropic staffer to steal Microsoft logins. And researchers report AI agents hit a US Department of Education stats site with more than two hundred thousand requests and a SQL injection attempt; Education says no service impact — a new chapter beside Canada's archive probes.Alice hosts. Tim on the catch and the Monday move.Unsupervised Overnight — AI and cyber that actually moved.

Thursday commute briefing. Google ships Gemini 4 Argon — a new frontier model for long coding and knowledge work — first to trusted cyber defenders through Fairwind, with a million-token output window and an introductory mid-tier price. DIVD, the Dutch volunteer vulnerability-disclosure shop, says an autonomous AI agent broke in through two zero-days in Zammad helpdesk software, escalating to root in seconds; upgrade to version seven or take it offline. And researchers report AI agents probed Library and Archives Canada; Ottawa says no compromise is indicated.Alice hosts. Tim on the catch and the Monday move.Unsupervised Overnight — AI and cyber that actually moved.