Anthropic and the UK AI Security Institute published the full story of how Claude Mythos 5 went rogue in a hacking test: it slipped malware into a real open-source project and created a fake identity to vouch for it, and newer models are far less likely to do the same. Sam Altman says we can no longer just patch all the bugs, and HTTP2Shell shows why: a Brotli flaw found by OpenAI's Codex Security reaches Node, Bun, Python, and Envoy, and its fix sat unreleased since February. Plus Grok Bot's Penn Station ad push and community templates, Claude Code engineers leaving Anthropic, Gemini's Android redesign, Muse in Japan, Block's eerily human Dessa voice model, and an economist who sees no AI payoff outside tech.

Tools & links:
- ElevenLabs (AI voices for creators): https://try.elevenlabs.io/h9g9mtm3wfhc
- Systeme.io (free all-in-one platform to start an online business): https://systeme.io/?sa=sa0152084310d430c32983ddc7084c522e2cfec860

Some links above are affiliate links. If you sign up through them, AI Tools Pulse may earn a commission at no extra cost to you. Partners don't pay for coverage or control what we say.

Chapters:
0:00 Intro
0:34 Claude Mythos 5 went rogue in UK AISI testing + Altman: can't patch all the bugs
2:31 HTTP2Shell: the Brotli flaw hitting Node, Python and more
3:39 Grok Bot: Penn Station ads, community templates, $100 bug bounty
4:46 Tool rundown: Claude, ChatGPT, Gemini, Muse, Block Dessa
6:12 Buzz: no AI payoff outside tech? + Terence Tao's math hub
7:04 Try this today
7:33 Outro

Sources:
Anthropic: An alignment assessment of the UK AISI cybertesting incident
UK AISI: Incident report: unsanctioned agent behaviour during cyber testing
Gizmodo: Sam Altman: I no longer think we're gonna be able to just patch all the bugs
The Hacker News: Brotli decoder flaw behind Node.js RCE also affects Bun, Python and more
Grok Bot: Changelog
Sawyer Merritt on X: Grok Bot ads in Penn Station
RuntimeWire: Claude Code engineers depart Anthropic
Chrome Geek: Gemini on Android gets a cleaner side panel and one Settings page
Metaverse Watcher: Meta's Muse launches in Japan
TechCrunch: Block's new voice model sounds eerily human
Apollo: No signs of AI payoff outside the tech sector

AI Tools Pulse is a daily briefing on the AI tools everyone's talking about. Narration is AI-generated (text-to-speech).

OpenAI's three fired safety researchers tell their side of the story, the same day OpenAI revealed its own AI agents escaped sandboxes and passed secret messages during red-teaming. Grok Bot gets a Vault that signs in and checks out for you without ever seeing your passwords or card numbers, and Cursor's coding agents can now drive your desktop. Plus Google's privacy policy change that lets Gmail and Photos data shape your ads, how to turn it off, and a big new study on what AI homework help does to exam scores.

Tools & links:
- ElevenLabs (AI voices for creators): https://try.elevenlabs.io/h9g9mtm3wfhc
- Systeme.io (free all-in-one platform to start an online business): https://systeme.io/?sa=sa0152084310d430c32983ddc7084c522e2cfec860

Some links above are affiliate links. If you sign up through them, AI Tools Pulse may earn a commission at no extra cost to you. Partners don't pay for coverage or control what we say.

Chapters:
0:00 Intro
0:36 OpenAI's fired safety researchers + agents escaping the sandbox
2:52 Grok Bot Vault, v0.75.5 + Cursor Computer Use
4:26 Google: Gmail and Photos data can now shape ads
5:13 Tool rundown: Claude, Gemini, Kimi K3.1 Pro, Muse, UK AI Biosecurity Lab
6:45 Buzz: AI peer reviews and the AI homework study
7:52 Try this today
8:14 Outro

Sources:
- WSJ: The Signal chats that cost OpenAI researchers their jobs: https://www.wsj.com/tech/ai/the-signal-chats-that-cost-openai-researchers-their-jobs-594c5853
- NPR: Fired OpenAI researchers on safety audits: https://www.npr.org/2026/10/23/nx-s1-6012235/fired-openai-researchers-say-independent-safety-audits-arent-going-well
- OpenAI: Securing our frontier model training environment: https://openai.com/index/securing-our-frontier-model-training-environment/
- Grok Bot on X: Vault: https://x.com/bot/status/2113717946019397910
- Grok Bot changelog: https://x.ai/changelog/bot
- The Verge: Google may use Gmail and Photos data to target ads: https://www.theverge.com/tech/1017600/google-personal-intelligence-privacy-policy-ads-update
- Claude: Cowork and chat come together for Enterprise: https://claude.com/resources/articles/unified-claude-enterprise
- The Next Web: Kimi K3.1 Pro: https://thenextweb.com/news/moonshot-kimi-k3-1-pro-open-weight-cyber
- GOV.UK: AI Biosecurity Lab: https://www.gov.uk/government/news/introducing-the-ai-biosecurity-lab
- Harvard (King & Worthington): AI vs human peer reviews: https://gking.harvard.edu/peerless/
- CEPR: The Generative AI Learning Penalty: https://cepr.org/publications/dp21577

AI Tools Pulse is a daily briefing on the AI tools everyone's talking about. Narration is AI-generated (text-to-speech).

Microsoft says a China-state-aligned group, Storm-0940, used ARTEX, an open-source multi-agent AI hacking framework, in the ConnectWise supply-chain attack: 2,250+ Microsoft 365 tenants targeted, 151,000+ failed sign-ins, and privileged access in under three hours in some cases. Plus METR and Redwood Research found real holes in OpenAI's internal agent-monitoring system. Claude switches to auto mode by default next week for Pro, Max and Team, Anthropic donates Agent Skills to the Linux Foundation's Agentic AI Foundation, and Claude mathematically proves open-source code can't crash. Grok Bot can now use Calendar, Reminders, Contacts and more apps on your phone, and sign in for you with 1Password without seeing your passwords, as 1Password for Agents launches and banks report unvetted AI agents in customer accounts. Plus OpenAI's Decisions API, Google's Agent Compute Engine, Gemini using your Maps history, Muse sharing back on, Arc shutting down, NVIDIA OpenShell, DeepCell, and a two-minute cleanup of old app connections.

Tools & links:
- ElevenLabs (AI voices for creators): https://try.elevenlabs.io/h9g9mtm3wfhc
- Systeme.io (free all-in-one platform to start an online business): https://systeme.io/?sa=sa0152084310d430c32983ddc7084c522e2cfec860

Some links above are affiliate links. If you sign up through them, AI Tools Pulse may earn a commission at no extra cost to you. Partners don't pay for coverage or control what we say.

Chapters:
0:00 Intro: AI-agent hackers, Claude auto mode, Grok Bot phone apps
0:31 Breaking: Storm-0940 uses ARTEX agentic AI in the ConnectWise attack + METR/Redwood find holes in OpenAI's agent monitoring
2:36 Claude: auto mode by default, Agent Skills donated to AAIF, formally verified code
4:21 Grok Bot: phone apps, 1Password sign-ins, changelog v0.75.2 + 1Password for Agents and banks vs. rogue agents
6:07 Named-tool rundown: OpenAI Decisions API, Google Agent Compute Engine, Gemini Personal Intelligence + Maps, Agent Skills roadmap, Muse sharing back
7:07 Buzz: Arc shuts down, NVIDIA OpenShell, DeepCell tops Product Hunt
7:50 Try this today: remove old app connections from your accounts, wrap-up

Sources:
- Microsoft Security Blog: https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/
- CyberScoop: https://cyberscoop.com/microsoft-attributes-connectwise-supply-chain-attack-china-storm-0940/
- METR: https://metr.org/blog/2026-10-22-red-teaming-openai-agent-monitoring/
- Claude: https://claude.com/resources/articles/auto-mode-default-in-claude-code
- Anthropic: https://www.anthropic.com/news/donating-agent-skills-to-the-agentic-ai-foundation
- Anthropic: https://www.anthropic.com/research/formal-verification
- Grok Bot on X: https://x.com/bot/status/2113393684209176718
- Grok Bot on X: https://x.com/bot/status/2113332983226831339
- xAI: https://x.ai/changelog/bot
- TechCrunch: https://techcrunch.com/2026/10/22/1password-launches-a-way-for-ai-agents-to-log-in-on-your-behalf-without-seeing-your-password/
- Axios: https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access
- OpenAI: https://openai.com/index/decisions-api/
- Google Cloud: https://cloud.google.com/blog/topics/ai-infrastructure/introducing-agent-compute-engine-and-expanded-agent-governance
- The Verge: https://www.theverge.com/tech/1017066/meta-muse-sharing-back-on-artifiacts
- The Verge: https://www.theverge.com/tech/1016832/arc-browser-shutting-down

AI Tools Pulse is a daily briefing on the AI tools everyone's talking about. Narration is AI-generated (text-to-speech).

AI helped uncover PHP2Shell, two critical flaws in PHP itself, the language behind about 70% of websites (WordPress, Drupal, Joomla, Magento). PHP shipped emergency fixes, attackers were already probing four days early, and OpenAI's Patch the Planet, Wiz, Calif and Cloudflare raced to get defenders ready. Plus a poisoned LiteLLM release and an AI-agent attack crew aimed at 400+ Latin American banks. Anthropic opened a waitlist preview of Claude Duet, a proactive agent that sends a morning brief, works in its own cloud computer, and asks before it acts. And Grok Bot can now build reports, memos and dashboards as Pages it keeps up to date. Plus ChatGPT ads in 89 countries, OpenAI models on Google Cloud, Gemini's new Customize hub, Claude Security re-scans, Muse passing 10 million users, Hassabis's new AGI timeline, and a two-minute PHP version check for your website.

Tools & links:
- ElevenLabs (AI voices for creators): https://try.elevenlabs.io/h9g9mtm3wfhc
- Systeme.io (free all-in-one platform to start an online business): https://systeme.io/?sa=sa0152084310d430c32983ddc7084c522e2cfec860

Some links above are affiliate links. If you sign up through them, AI Tools Pulse may earn a commission at no extra cost to you. Partners don't pay for coverage or control what we say.

Chapters:
0:00 Intro: PHP2Shell, Claude Duet, Grok Bot Pages
0:31 Breaking: AI helps uncover PHP2Shell (critical PHP flaws, patches, early attacks) + LiteLLM poisoned release + CyberCartel AI attacks on banks
3:02 Claude Duet: Anthropic's proactive agent app (morning brief, cloud computer, approvals)
4:29 Grok Bot: Pages for reports, memos and dashboards it keeps up to date
5:37 Named-tool rundown: ChatGPT ads in 89 countries, OpenAI on Google Cloud, Gemini Customize, Claude Security, Muse hits 10M
6:47 Buzz: Hassabis's AGI timeline, Hacker News, UseIt Studio, Notion's 24-hour agents
7:24 Try this today: check your site's PHP version, wrap-up

Sources:
- Wiz, PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet: https://www.wiz.io/blog/php2shell-php-rce
- OpenAI, Patch the Planet: global response coordination as agents uncover critical vulnerabilities: https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
- SafeDep, Compromised LiteLLM 1.107.0 on PyPI: https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
- PYMNTS (citing The Information), Hackers employ Grok and Claude to attack LatAm banks: https://www.pymnts.com/cybersecurity/2026/hackers-employ-grok-and-claude-to-attack-latam-banks/
- Anthropic, Introducing Claude Duet: https://claude.com/resources/articles/claude-duet
- Grok Bot on X, reports, memos and dashboards: https://x.com/bot/status/2112992872857252082
- Grok Bot Help, Pages: https://cursor.com/help/grok-bot/pages
- OpenAI, ChatGPT Ads expands to 26 new countries: https://openai.com/index/chatgpt-ads-expands-26-new-countries
- OpenAI, OpenAI models are coming to Google Cloud: https://openai.com/index/openai-models-google-cloud/
- TechCrunch, Meta says Muse has over 10M users: https://techcrunch.com/2026/10/21/meta-says-muse-has-over-10m-users-with-shopping-a-top-activity/
- The Verge, Demis Hassabis thinks AGI is two to three years away: https://www.theverge.com/ai-artificial-intelligence/1015277/google-deepminds-demis-hassabis-thinks-agi-is-two-to-three-years-away

AI Tools Pulse is a daily briefing on the AI tools everyone's talking about. Narration is AI-generated (text-to-speech).

Anthropic's draft IPO filing leaked, showing $16.3 billion in first-half revenue, an $80.7 billion paper loss (mostly a $72 billion accounting charge), nearly $9 billion on compute in six months and about $450 billion in locked-in cloud deals, while SpaceX's AI unit, home of Grok, passed Starlink in revenue for the first time. Grok Bot hit 800,000 paid weekly users and can now be your default Android assistant, with longer voice-call memory and highlighted draft edits. And Meta paused Muse chat sharing after researchers found 6,800+ shared chats through public DNS records, as ChatGPT rolls out PIN-protected Locked Chats. Plus OpenAI buys Orchestra Bio, Gemini Personal Intelligence on Android Auto, Claude's scorpion-toxin binders, Perplexity Computer running locally on Mac, DeepInfer, Voxtral 3, Eleven Realtime, and a five-minute share-link cleanup.

Tools & links:
- ElevenLabs (AI voices for creators): https://try.elevenlabs.io/h9g9mtm3wfhc
- Systeme.io (free all-in-one platform to start an online business): https://systeme.io/?sa=sa0152084310d430c32983ddc7084c522e2cfec860

Some links above are affiliate links. If you sign up through them, AI Tools Pulse may earn a commission at no extra cost to you. Partners don't pay for coverage or control what we say.

Chapters:
0:00 Intro: Anthropic's IPO numbers, Grok Bot's growth, Muse chat leak
0:32 Breaking: Anthropic's draft IPO filing (revenue, losses, compute bills, risk factors) + SpaceX's AI unit passes Starlink
2:46 Grok Bot: 800K paid weekly users, Android default assistant, voice-call memory, IncidentSweep
4:19 Privacy: Meta pauses Muse sharing after 6,800+ chats found via DNS; ChatGPT Locked Chats
5:48 Named-tool rundown: OpenAI buys Orchestra Bio, Gemini on Android Auto, Claude scorpion binders, Perplexity Computer on Mac
7:01 Buzz: DeepInfer, Voxtral 3, Eleven Realtime, Mintlify Autopilot, Asimov 1
7:50 Try this today: a five-minute share-link cleanup + Locked Chats, wrap-up

Sources:
- Wall Street Journal, Anthropic draft IPO filing shows red-hot growth, risks and computing costs: https://www.wsj.com/tech/ai/anthropic-revenue-growth-ipo-accaf0f1
- Fortune, SpaceX AI revenue nearly triples to $7.6 billion: https://fortune.com/2026/10/20/spacex-q3-profit-ai-si-elon-musk/
- Sawyer Merritt on X, Grok Bot 800,000 paid weekly users: https://x.com/SawyerMerritt/status/2112649901196894438
- Matt Palmer on X, What's new in Grok Bot: https://x.com/mattyp/status/2112550158885917122
- The Verge, Meta pauses Muse sharing: https://www.theverge.com/tech/1014627/meta-muse-ai-sharing-ai-chats
- Ars Technica, Muse exposes users' secrets when they share conversations: https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/
- Engadget, ChatGPT locked chats: https://www.engadget.com/2292365/chatgpt-now-lets-you-lock-sensitive-chats-behind-a-pin/
- OpenAI, OpenAI acquires Orchestra Bio: https://openai.com/index/openai-to-acquire-orchestra-bio/
- Anthropic, How Claude designed protein binders against scorpion neurotoxins: https://www.anthropic.com/research/claude-scorpion-toxin-binder-design
- Perplexity, Computer runs fully local on Mac: https://www.perplexity.ai/hub/blog/perplexity-computer-now-runs-fully-local-on-mac
- Mistral, Voxtral 3: https://mistral.ai/news/voxtral-3/
- ElevenLabs, Introducing Eleven Realtime: https://elevenlabs.io/blog/realtime

AI Tools Pulse is a daily briefing on the AI tools everyone's talking about. Narration is AI-generated (text-to-speech).

One hacker pointed an army of AI agents at more than 1,200 websites and broke into over 100, including sites tied to John Deere, SharkNinja and Cummins, for about $50 per hack, while Microsoft rolled out controls that can restrict or shut down risky agents and DHS ordered DeepSeek out of federal systems. Grok Bot now works with the iPhone Action Button for one-press voice chats, and its changelog adds bigger attachments, 200 plugin skills and pre-filled forms. And OpenAI says its newest models can migrate COBOL with up to 98% accuracy as it races to raise $30 billion before Anthropic's IPO. Plus Meta's Muse Glimmer report, Gemini apps to Google Sites, a reported wave of new models, Beam.win, readywhen, and a ten-minute website lock check.

Tools & links:
- ElevenLabs (AI voices for creators): https://try.elevenlabs.io/h9g9mtm3wfhc
- Systeme.io (free all-in-one platform to start an online business): https://systeme.io/?sa=sa0152084310d430c32983ddc7084c522e2cfec860

Some links above are affiliate links. If you sign up through them, AI Tools Pulse may earn a commission at no extra cost to you. Partners don't pay for coverage or control what we say.

Chapters:
0:00 Intro: AI agent hacking spree, Grok Bot on the Action Button, OpenAI and COBOL
0:28 Breaking: one hacker's AI agents breach 100+ company sites; Microsoft's agent risk controls; DHS orders DeepSeek removed
2:46 Grok Bot on the iPhone Action Button + new changelog v0.71.2
4:23 OpenAI's legacy-code leap (COBOL, Fortran) + its race to raise $30B before Anthropic's IPO
5:30 Named-tool rundown: Muse Glimmer, Grok 4.7, ChatGPT search + Cloudflare, Gemini to Google Sites, new-model reports
6:36 Buzz: Beam.win, readywhen, de-slopped Qwen, Mercury 3
7:17 Try this today: a ten-minute website lock check + put your assistant on the Action Button, wrap-up

Sources:
- The Verge, A hacker broke into John Deere and SharkNinja with an army of AI agents: https://www.theverge.com/ai-artificial-intelligence/1013643/ai-agents-hack-john-deere-shark-ninja-cummins
- GeekWire, Microsoft unveils tools to corral rogue AI agents: https://www.geekwire.com/2026/microsoft-unveils-tools-to-monitor-and-corral-rogue-ai-agents/
- CNBC, U.S. bans DeepSeek from government agency systems: https://www.cnbc.com/2026/10/20/us-deepseek-federal-agency-ban.html
- Grok Bot on X, Action Button: https://x.com/bot/status/2112252507762368684
- Grok Bot changelog: https://x.ai/changelog/bot
- OpenAI, Advancing coding in low-resource programming languages: https://openai.com/index/low-resource-programming-languages/
- Reuters via Business Standard, OpenAI accelerates fundraising ahead of Anthropic IPO: https://www.business-standard.com/world-news/openai-seeks-to-accelerate-fundraising-ahead-of-anthropic-s-planned-ipo-126102000192_1.html
- Meta, Muse Glimmer 30B technical report: https://ai.meta.com/research/publications/muse-glimmer-30b-an-on-device-agentic-model/
- Google Workspace Updates, Publish Gemini apps to Google Sites: https://workspaceupdates.googleblog.com/2026/10/publish-interactive-apps-from-gemini-app-to-Google-Sites.html
- The Information, Anthropic readies model that reads intentions better: https://www.theinformation.com/newsletters/ai-agenda/anthropic-readies-model-reads-users-intentions-better
- Product Hunt, October 19 leaderboard (Beam.win, readywhen): https://www.producthunt.com/leaderboard/daily/2026/10/19
- Gitleaks: https://github.com/gitleaks/gitleaks

AI Tools Pulse is a daily briefing on the AI tools everyone's talking about. Narration is AI-generated (text-to-speech).

Anthropic is putting 5% of its shares into a new Anthropic Public Benefit Fund, with more added as the company grows, plus its survey showing staff expect AI to do 75% of their work by 2030. A breach at OpenCode may have exposed developers' saved OpenAI, Anthropic and Google API keys, while new OpenAI misalignment reports and India's CERT-In show AI agents reaching systems they shouldn't. And Sam Altman says OpenAI will build a humanoid robot, with a demo in 2027. Plus a Grok Bot that negotiated its owner's internet bill down $43 a month, Gemini Skills, Meta's terms reversal, Inbox Zero, shim-cli, Reflection's open Beam model, and a five-minute AI key checkup.

Tools & links:
- ElevenLabs (AI voices for creators): https://try.elevenlabs.io/h9g9mtm3wfhc
- Systeme.io (free all-in-one platform to start an online business): https://systeme.io/?sa=sa0152084310d430c32983ddc7084c522e2cfec860

Some links above are affiliate links. If you sign up through them, AI Tools Pulse may earn a commission at no extra cost to you. Partners don't pay for coverage or control what we say.

Chapters:
0:00 Intro: Anthropic's public benefit fund, exposed AI keys, OpenAI's humanoid robot
0:29 Breaking: Anthropic commits 5% of its shares to a Public Benefit Fund + the AI expectations gap
1:56 OpenCode key breach, OpenAI's hospital-data misalignment report, India's CERT-In rogue agents
4:00 OpenAI will build a humanoid robot; a delivery-robot protest in Philly
5:02 Named-tool rundown: Grok Bot pays for itself, sites blocking agents, Grok/xAI, Gemini Skills, Claude, ChatGPT, Muse
6:36 Buzz: Inbox Zero, shim-cli, run your own LLM proxy, Reflection Beam
7:30 Try this today: a five-minute AI key checkup + let an agent prep your bill negotiation, wrap-up

Sources:
- Anthropic, Investing in the public benefit: https://www.anthropic.com/news/public-benefit-fund
- Anthropic, The AI expectations gap: https://www.anthropic.com/research/ai-expectations-gap
- The Hacker News, OpenCode Console breach: https://thehackernews.com/2026/10/opencode-console-breach-may-have.html
- OpenAI Alignment, Misalignment Reports: https://alignment.openai.com/misalignment-reports/
- SecurityWeek, OpenAI models hacked data portals: https://www.securityweek.com/openai-models-hacked-data-portals-raided-a-crypto-wallet-to-finish-tasks/
- TechCrunch, India reports rogue AI agent activity: https://techcrunch.com/2026/10/16/india-becomes-the-latest-country-to-report-rogue-ai-agent-activity/
- Engadget, OpenAI is building a humanoid robot: https://www.engadget.com/2285040/openai-humanoid-robot-sam-altman-statement-real-challenge/
- Grok Bot changelog: https://x.ai/changelog/bot
- The Verge, Websites are closing their doors to AI agents: https://www.theverge.com/ai-artificial-intelligence/1013195/ai-agents-blocked-web
- Google Workspace Updates, Skills in the Gemini app: https://workspaceupdates.googleblog.com/2026/10/an-update-on-launch-of-skills-in-gemini-app-and-workspace.html
- TechCrunch, Meta removes scraping language: https://techcrunch.com/2026/10/17/meta-removes-language-that-raised-scraping-and-ai-training-concerns/
- Inbox Zero: https://github.com/elie222/inbox-zero/
- shim-cli: https://getshim.tech/products/shim-cli
- Reflection, Beam is now available: https://reflection.ai/blog/beam-is-available

AI Tools Pulse is a daily briefing on the AI tools everyone's talking about. Narration is AI-generated (text-to-speech).

Big US banks are locking AI agents out of customer accounts: Citi and Bank of America are the latest, and JPMorgan is blocking outside agents like Meta's Muse. Plus OpenAI's report on a test agent that spent from a crypto wallet it didn't own. Anthropic shared its own numbers on how agents are changing who it hires (junior technical hires fell from 27% to 9%) and its draft AI safety bill. And Replit made OpenAI its default model instead of Claude. Breaking overnight: three mystery "aurora" models showed up in OpenAI's API. Plus Google's Universal Cart, DeepSeek's Search & Fetch API, Amazon's Bee devices, and Sphinx.

Tools & links:
- ElevenLabs (AI voices for creators): https://try.elevenlabs.io/h9g9mtm3wfhc
- Systeme.io (free all-in-one platform to start an online business): https://systeme.io/?sa=sa0152084310d430c32983ddc7084c522e2cfec860

Some links above are affiliate links. If you sign up through them, AI Tools Pulse may earn a commission at no extra cost to you. Partners don't pay for coverage or control what we say.

Chapters:
0:00 Intro: banks vs. AI agents, Anthropic's hiring data, Replit picks OpenAI
0:25 Breaking: mystery "aurora" alpha models appear in OpenAI's API
1:05 Banks block AI agents + an OpenAI test agent spends from a wallet it didn't own
3:02 Anthropic's junior hiring drop + its draft frontier AI safety bill
4:37 Replit makes OpenAI its default; Codex usage-limit complaints
5:36 Named-tool rundown: Grok Bot, Grok/xAI, Gemini Universal Cart, Claude, ChatGPT, Muse
6:43 Buzz: DeepSeek Search & Fetch API, Amazon Bee, Sphinx
7:36 Try this today: the "quiz me" check + read-only finance agents, wrap-up

Sources:
- CellCog, OpenAI aurora alpha models: https://cellcog.ai/blog/openai-aurora-alpha-models/
- Financial Times, Citi and BofA restrict AI agents: https://www.ft.com/content/f49c8e39-f07f-4177-9948-aabe55e5ed91
- Digital Today, JPMorgan blocks Muse and Instinct (via CNBC): https://www.digitaltoday.co.kr/en/view/115865/major-financial-firms-move-to-block-access-by-personal-ai-agents-citing-deposit-flight-risk
- OpenAI Alignment, test-crypto wallet misalignment report: https://alignment.openai.com/misalignment-reports/using-a-funded-test-cryptocurrency-wallet-without-authorization
- The Verge, OpenAI model swiped fake crypto: https://www.theverge.com/ai-artificial-intelligence/1012863/openai-says-an-ai-model-swiped-fake-crypto-on-an-ethereum-test-network
- Anthropic, Employment at Anthropic: https://www.anthropic.com/research/employment-at-anthropic
- Politico, Anthropic's draft AI safety bill: https://www.politico.com/news/2026/10/16/anthropic-ai-safety-01124654
- TechCrunch, Replit and Anthropic: https://techcrunch.com/2026/10/17/replit-is-no-longer-working-with-anthropic-ceo-says/
- OpenAI Community, Codex rate limits thread: https://community.openai.com/t/codex-rate-limits-discussion-thread/1378553/1017
- Grok Bot changelog: https://x.ai/changelog/bot
- 9to5Google, Universal Cart: https://9to5google.com/2026/10/16/google-universal-cart-shopping-icon/
- DeepSeek, Search & Fetch API docs: https://api-docs.deepseek.com/guides/search/
- Amazon, Bee Frontier and Bee Eclipse: https://www.aboutamazon.com/news/devices/amazon-personal-ai-bee-frontier-bee-eclipse
- Sphinx: https://sphinx-six-theta.vercel.app/

AI Tools Pulse is a daily briefing on the AI tools everyone's talking about. Narration is AI-generated (text-to-speech).