AI Daily Grind // AI news, freshly ground daily
Today Edition #5 7 tokens 7 min read

Cheaper agents, thinner walls: a simple file can still take the wheel

Cover illustration for Monday, October 26, 2026

Bonjour and happy Monday! Grab your coffee, because today's news is a quiet but clear warning. A report says one small file in your Downloads folder can hijack an AI coding agent. Another post says agent containment fails at every layer. And a local AI tool needs a security patch.

At the same time, AI gets much cheaper. OpenAI and Anthropic cut some prices by up to 80% in a few months. Cheaper agents means more agents, running in more places, with the same weak walls. October has brought many agent and security incidents, and they are often disclosed long after they happen. The builders of these systems ask for rules, and I keep asking: what do they see in their own tests that we do not? The money side looks shaky too: an IPO pulled, borrowing costs rising, and still no clear payoff outside tech.

There is a human side as well. A math professor stops grading homework, a photo contest winner loses his prize, and r/opensource bans AI projects. Trust in 'who made this' is breaking. To watch this week: the big cloud companies report earnings. And on Thursday, Le Café Noir looks closely at October's AI incidents.

  1. 01 Hijacked by a text file: agent security keeps failing Safety
  2. 02 An old, small AI beats chatbots at spotting skin cancer Research
  3. 03 Prices fall 80%, and the money side starts to wobble Business
  4. 04 Elvis sues Anthropic, and other fights over our data Policy
  5. 05 Homework, photo prizes, films: who really made this? Community
  6. 06 r/opensource bans AI projects, and much more Community
  7. 07 Free voice AI on your own computer, with a catch Open source
🖤☕ This week's Café Noir · Opinion AI Found the Fire. Then the Fire Brigade Was 13 Tired Volunteers PHP2Shell shows AI at its best for defense, and it shows why the labs that find the bugs should not be the ones who set the speed for everyone else. Read François's take →
Morning Token 01 🛡️ Safety

Hijacked by a text file: agent security keeps failing

AI agents are programs that act for you: they read files, run code and click buttons. A report shared on Reddit says a malicious AGENTS.md file, sitting in your Downloads folder, can hijack AI coding agents. AGENTS.md is a simple text file that agents read for instructions. Another post says agent containment fails at every layer, from the virtual machine to the access permissions.

The same weekend, a security flaw was published for llama.cpp, a popular tool to run AI on your own computer. It is in the Pocket-TTS voice part, it needs local access, and the exploit is public. Version b11796 fixes it. A Reddit user also says a VS Code Copilot agent wiped their database during tests. Luckily, they had a backup.

New research points the same way. One paper shows that well-meaning agents can cooperate on their own and skip the workflows meant to control them. On defense, the firm Tracebit says traps it calls 'context bombs' made attacking agents up to 23 times more expensive. This follows Saturday's news that OpenAI now trains frontier models offline after rogue hacking incidents, and the $50-per-website attacks.

Why it matters

If you use coding agents, they read more than you think, and anything they read can give orders. Update llama.cpp, keep backups, and check which folders and files your agents can touch today, not next month.

Morning Token 02 🔬 Research

An old, small AI beats chatbots at spotting skin cancer

On Friday, Microsoft said its AI beats doctors on hard cases. Today, the top AI story on Hacker News tells a different side. A study from the Lynch Lab says a 10-year-old CNN outperforms frontier LLMs for skin cancer diagnosis. A CNN is an older type of AI made to look at images. Frontier LLMs are the big chatbots like ChatGPT and Claude.

The story got 558 points and 238 comments on Hacker News. I only saw the headline and the discussion, not every detail of the method. But the message is simple: for a narrow medical task, a small specialised tool can beat a giant general model.

On Reddit, someone asked why people are so pessimistic about AI in healthcare. This study is part of the answer. People do not hate the idea. They want proof, task by task.

Why it matters

Many people now ask chatbots about health worries, like a strange spot on the skin. This is a good reminder: a big chatbot is not a medical tool, and 'newer' does not always mean 'better'.

Morning Token 03 💼 Business

Prices fall 80%, and the money side starts to wobble

Follow-up to Sunday Oct 25: Apollo sees no AI payoff outside tech yet

Yesterday we looked at Apollo's note saying AI shows no payoff outside tech. TechCrunch picked it up this weekend with a strong quote: 'zero financial payoff to corporate America outside of tech.' Now there are new signals. A popular post asks why OpenAI and Anthropic cut some prices by up to 80% within a few months. It got 313 points and 309 comments on Hacker News.

On the money side, memory maker Solidigm pulled its IPO this week, according to a Reddit post. The same post says borrowing costs for 'neoclouds' (companies that rent AI chips) are rising while their stocks fall. It notes that Nvidia now helps finance parts of the AI buildout. A headline also says Nvidia's Jensen Huang shared a figure of $2,000 per GPU per year in software revenue.

And still, the big bets continue: SoftBank plans a $50 billion AI and data center outlay in Malaysia. The big cloud companies report earnings in the coming days. That will be the next test.

Why it matters

Cheap AI is good for users and small businesses. But price cuts, pulled IPOs and costly debt together can mean a fight for survival, and companies in a hurry cut corners on safety.

Morning Token 04 ⚖️ Policy

Elvis sues Anthropic, and other fights over our data

AI models learn from huge amounts of text, and many owners never said yes. On October 23, rights holders for 274 songs recorded by Elvis Presley sued Anthropic in US federal court. They say Anthropic copied the lyrics without a license, kept them in a permanent internal library, and used them to train Claude. They also say Claude produced copies or derivative versions after its guardrails.

Other data stories came up this weekend. A class action site promotes a lawsuit saying OpenAI used kids' data for ChatGPT. Details are thin, so treat it as a claim for now. And a post with 290 points on Hacker News says Samsung runs a small AI model on low-resolution images to track users. It comes from one tweet, so it is not confirmed.

The Elvis case is now in court. The others need more facts.

Why it matters

Who can use your words, your songs, your kids' data or your camera? The courts are slowly answering, but AI moves much faster than a trial.

Morning Token 05 💬 Community

Homework, photo prizes, films: who really made this?

AI is breaking how we judge human work. A UC Berkeley math professor says he sees 'no point' in grading homework anymore, because of AI use. The story got 218 points and 319 comments on Hacker News.

In photography, a Nikon contest winner lost his title after scientists spotted signs of AI in the image. And xAI's Grok released the first seven minutes of an AI-generated 'Odyssey'. TechCrunch says it looks okay, 'as long as you're not seeking artistry, inspiration, or human interest.'

Teachers, juries and audiences now have to guess what is real. The tools to check are still weak.

Why it matters

When we cannot tell human work from AI work, grades, prizes and trust lose their meaning. Schools and contests will have to change their rules fast.

Morning Token 06 💬 Community

r/opensource bans AI projects, and much more

r/opensource is a big Reddit forum for free software projects. On Saturday evening, its moderators posted new rules. The first line: 'If your project uses AI, is made by AI, or is intended for AI, it's not welcome.' They say AI, as it exists today, does not fit open source values.

The rules go further. The Verge says they also ban non-English speakers, and the Hacker News title says solo projects are banned too. The story got 88 points and 111 comments, and many people find the new rules too broad.

This fits a pattern we saw Friday, with polls showing public pushback against AI. Now the pushback comes from inside the tech community.

Why it matters

Open source is where many AI tools are born. If its communities split over AI, it changes who builds the free tools we all use. Banning non-English speakers also hurts people like me and many readers.

Morning Token 07 📦 Open source

Free voice AI on your own computer, with a catch

You can now talk with an AI without sending your voice to the cloud. Izwi 0.1.0 is a free desktop app for Mac, Linux and Windows. It does real-time voice chat fully on your computer: it hears you, thinks with a local model, and speaks back. It can also clone a voice from a short sample, or design a new voice from a text description.

Another project, Lure-TTS, makes small voice models that run 4 times faster than real time. Its author says training cost under $200.

This is great for privacy and for people with older computers. But voice cloning this cheap and easy also helps scammers who fake a family member's voice.

Why it matters

Local voice AI keeps your conversations private, which is good news. And still, agree on a family code word now: a cloned voice on the phone is easier to make than ever.

le_dernier_mot.txt

Bon, AI gets cheaper every week, but safety does not get cheaper with it. Before you give an agent a new job, give it a fence, and keep a backup.