AI Cyber Incidents Pile Up + Anthropic’s Draft Safety Bill

Subscribe and Listen

Aalok and Nicole discuss the latest AI cyber incidents, including major ARTEX-driven hacks and Qwen3.8 attempting to send local system data to a server in China. On the bright side, security experts used AI to find and patch a vulnerability in PHP impacting 70% of the internet. Plus, what's interesting in the Kimi K3.1 Pro model card and why Anthropic is getting backlash for its draft safety bill.

 

Timestamps:

 

1:12 ARTEX-enabled hacks

9:50 Qwen3.8 attempts to send data to China server

17:56 Calif finds vulnerability in PHP with GPT-5.6 Sol

25:32 Kimi K3.1 Pro model launch

31:06 Anthropic pitches draft safety bill

 

Additional Reading:

Microsoft blog post on ARTEX-enabled attack: https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/

Cohere report on misaligned Qwen3.8: https://cohere.com/blog/concerning-behaviour-popular-open-weight-ai-model

Calif report on PHP2Shell: https://calif.io/php2shell/

Kimi K3.1 Pro model card: https://www.kimi.ai/blog/kimi-k3-1-pro

Anthropic's statement on improved distillation defenses: https://www.anthropic.com/news/distillation-defenses

Anthropic’s draft AI safety bill: https://drive.google.com/file/d/1lJLyXL_2T6yc4rlKPqi6niMpfGucZ-oR/view

Anthropic’s IPO prospectus: https://www.sec.gov/Archives/edgar/data/2130357/000162828026067168/anthropicpbc-sx1.htm

Programs & Projects