Chinese hacker hits over 100 company websites using AI agents — Deere and SharkNinja among top brands affected in attack
THE SO WHAT
An attacker automating intrusions across 100+ company sites with AI agents is the flip side of agentic productivity—your attack surface now includes autonomous recon and persistence. Treat "AI agent abuse" as a distinct threat class and pressure your security vendors for concrete controls, not just marketing.
READ THE SOURCE
MORE FROM THE WIRE
Applied AIPartnering with Blacksmith
If agents can write production-scale code, the new bottleneck is proving that code is safe, performant, and compliant at the same speed. Expect “agent-era CI/CD” vendors like Blacksmith to become a required layer in any serious agent deployment, not a nice-to-have devtool.
Applied AISpotify pulled 50 million AI slop and spam tracks from its recommendations
Fifty million AI spam tracks getting pulled means recommendation systems are now content moderation systems at scale. Any platform that allows generative uploads needs an explicit anti-spam and provenance strategy or its core UX will quietly degrade.
Applied AIFigma co-founder Dylan Field thinks MCP is not a perfect protocol
Figma signaling that MCP isn’t “perfect” while promising to support multiple standards is a reminder that no one wants a single agent integration choke point. If you’re betting on MCP, design your extensions so they can be exposed via at least one other protocol without a full rewrite.
Applied AIPangram review: A polished AI detector that gets the basics right
Tools like Pangram that are strong on fully AI-generated text but weaker on hybrids underscore how brittle AI detection still is. If your compliance model assumes you can reliably detect AI content, you’re carrying more risk than your policies admit.