transcript
show notes
This month, breaking into a big company cost about fifty dollars, less than a business lunch. Stephen explains how one hacker's AI agents got into more than a hundred companies, why they came in through the side door, and why the defenders' own AI said no. Then a lightning round on walking away, what is under the hood, receipts, and company.
In this episode, Stephen Forte covers:
- Fifty dollars a break in. A Chinese speaking hacker turned AI agents loose with under a hundred characters of instructions. They tried more than 1,200 sites and got into more than a hundred companies, including Deere, SharkNinja and Cummins. NorForge researchers estimate about 5,000 dollars in AI fees in total.
- The barista called it. In April, Stephen warned that AI made the disgruntled barista a credible threat. Now the cost of attacking you is close to zero.
- The side door. The agents came in through support sites, vendor run websites and an old control panel. Target in 2013 and SolarWinds in 2020 came through vendors too. What is new is the price. If it has your name on it, it is your front door.
- The defender's AI said no. During the OpenCode breach, the AI models the team used for analysis refused to look at the malicious code until OpenAI let them into a program for vetted defenders.
- Your homework. List every website and portal with your company's name on it, including the ones your vendors run, and give each one an owner. Then ask your security lead for the backup if your AI tools refuse to help mid attack.
- Lightning round: a rule for walking away. Gartner finds only 13 percent of chief information officers say AI has delivered significant value. Those with rules for stopping pilots are more than twice as likely to lead.
- Lightning round: under the hood. The Department of Homeland Security ordered federal civilian agencies to remove DeepSeek products. For most companies, a vetted open weight model can be fine if you trust the vendor's compliance. Check the brakes, not just the passport.
- Lightning round: arguing about receipts. OpenAI is racing to raise about 30 billion dollars before Anthropic's stock market debut, amid a fight over how to count revenue. Stephen says the lasting value is in business applications, not the model.
- Lightning round: a tab of their own. Town reached a one billion dollar value four months after launch by giving every employee an AI assistant that talks to the others.
Sources:
- Reuters via iTnews, 19 October 2026: https://www.itnews.com.au/news/how-one-hacker-used-ai-agents-and-a-few-thousand-dollars-to-break-into-scores-of-sites-629764
- TechCrunch, 19 October 2026: https://techcrunch.com/2026/10/19/hackers-hit-ai-coding-tool-opencode-running-up-charges-on-users-ai-accounts/
- Gartner, 19 October 2026: https://www.gartner.com/en/newsroom/press-releases/2026-10-19-gartner-survey-finds-only-13-percent-of-cios-say-their-enterprise-has-realized-significant-or-transformational-value-from-ai
- Federal Register, 20 October 2026: https://www.federalregister.gov/documents/2026/10/20/2026-21447/notice-of-order-regarding-exclusion-and-removal-of-deepseek-products-from-federal-civilian-executive
- Reuters via Investing.com, 19 October 2026: https://www.investing.com/news/stock-market-news/exclusiveopenai-seeks-to-accelerate-fundraising-ahead-of-anthropic-ipo-sources-say-4958511
- TechCrunch, 19 October 2026: https://techcrunch.com/2026/10/19/ai-assistant-startup-town-nabs-unicorn-valuation-four-months-after-launch/
The AI Brief from the YPO Technology Network is a daily executive briefing on the AI developments that matter to business leaders. Hosted by Stephen Forte.