Daily AI Brief: Rotate Your AI Keys, How AI Shoppers Pick (Nov 2)
If your office keeps AI API keys on a hosting platform, check them this week. Northflank told customers to assume every stored secret had been decrypted after a breach, and some customers then saw their AI keys used by someone else. Wiz counts at least nine incidents at AI developer platforms in October. A stolen AI key is an open bill, so spend caps and key rotation now matter as much as passwords.
The short list
| Item | What it’s for | Who should care | Verdict |
|---|---|---|---|
| Northflank breach and “Black October” for AI platforms | Rotating and capping AI keys stored with a host | Anyone who keeps API keys on a cloud platform | WATCH |
| AI shopping agents study (Shopify catalog) | How AI agents choose between listings | Online stores and any business with reviews | WATCH |
| tenant-leak-check | Testing whether one customer can reach another’s data in a Supabase app | Anyone running a Lovable or Supabase client portal | EVALUATE |
| ChatGPT Pro allowances raised | More Work and Codex usage at the same price | ChatGPT Pro subscribers | WATCH |
| Claude Max and Ultra (follow-up) | Heavy Claude use without a 5-hour window | Claude subscribers | EVALUATE |
| Shared AI-training opt-out: new details | One robots.txt rule for AI training | Website owners | WATCH |
| Google Connected Apps: review rules | Getting an app into AI Mode and Gemini | Businesses with an MCP server or app | WATCH |
| ChatGPT shared-link takeover (fixed) | Why unknown AI share links deserve caution | Everyone signed in to ChatGPT | WATCH |
| Claude Code: Opus 4.8 fast mode ends Nov 30 (reminder) | Keeping unattended tasks running | Claude Code users | EVALUATE |
| Hermes Agent headed browser mode | Fewer bot walls for browsing agents | Hermes users running agents on a server | EVALUATE |
| Agent memory benchmark (BEAM 100K) | Choosing a memory add-on for an agent | Anyone building an agent with long-term memory | EVALUATE |
| Local quantized models vs Claude on real bugs | Judging local models by finished work, not speed | Offices weighing local AI | WATCH |
Connecting AI to Company Data Safely
Northflank breach: assume your stored secrets were taken
Northflank, a hosting platform for apps and AI workloads, disclosed a security incident on October 30 after an alert from Wiz and told customers: “Assume all environment variables have been decrypted. Disable/rotate all keys.” It later said users had reported unauthorized use of AI API keys stored on the platform. BleepingComputer reports that Northflank has not said how attackers got in or how many customers were affected. Wiz’s “Black October” report counts at least nine incidents at AI developer platforms this month, including Railway, OpenCode, Warp and Lightning AI, and in two cases it investigated, stolen credentials ran about 2.5 million Amazon Bedrock calls worth roughly $100,000. Read the source.
ChatGPT shared links could take over accounts (now fixed)
Parameter Labs found a chain of bugs in ChatGPT’s HTML previews: a crafted share URL, opened by another signed-in user, could read that person’s private data or act on their behalf. OpenAI closed the hole and paid a $5,000 bounty, which Simon Willison calls “a bit cheap” for something this serious. There is nothing to patch on your side. Still, don’t open AI share links from strangers while signed in to a work account. Read the source.
Tracked on: Connecting AI to Company Data Safely
SEO and AEO Tactics
Three AI models shopped the same catalog and picked different winners
In a study republished by Search Engine Journal, Slobodan Manic gave Claude Haiku 4.5, Sonnet 5 and Opus 5 the same top-20 Shopify catalog results, 1,980 picks in all. Across six product searches, the three models’ most-picked products matched in none. Haiku and Sonnet leaned toward the listing with the most reviews. When the request added “under $25, for oily skin”, all three chose a sunscreen under $25 in 298 of 300 picks, and the one listing that said “without clogging pores” won a third of Opus’s picks despite the lowest rating of the six. For a small business, the words in your listing and your review count are what an agent reasons from. Read the source.
Shared AI-training opt-out: the details that matter
Following our earlier coverage, Search Engine Journal adds a few practical points. Existing robots.txt rules don’t count as a training preference, and a User-Agent: * group never matches the new __usage_ai-training token, so you have to add the group on purpose. Microsoft will stop reading NoArchive and NoCache as training or grounding signals after March 1, 2027, and offers a new DisallowExtended option that keeps you in Copilot answers but out of its grounding service for other businesses. Its temporary Bing Webmaster Tools setting opens December 15, only for sites still using the old tags. Kevin Kelley wrote that Anthropic has started building support. Nobody honors the rule yet. Read the source · OpenAI.
Google Connected Apps: how apps get into AI Mode
Google’s preview is now open to applications. Per Search Engine Journal, developers register in Google Connected Console, pick a category that can’t be changed later, list at least three capabilities, and pass Google’s review and testing; apps that need a sign-in must supply test accounts. The policy bars “overly broad or deceptive capability descriptions” written to get an app chosen over another. Live Search apps in the US include Instacart, Canva and YouTube Music. Watch this unless you already run an MCP server. Read the source.
Tracked on: SEO and AEO Tactics That Work Now
Frontier Models
ChatGPT Pro: more Work and Codex usage, same prices
Kingy AI, citing OpenAI’s updated Pro guide, reports that on October 29 OpenAI doubled the Work and Codex allowance on Pro 100 ($100 a month) and Pro 500 ($500 a month), raised lower-allowance Pro 200 accounts to the higher level, and canceled the planned Pro 200 cut. Plus is unchanged, and existing subscribers get the change automatically. BleepingComputer adds, from an OpenAI email, that ChatGPT and Codex will draw from one shared allowance and that OpenAI will test a combined Chat and Work experience with a small group first. Read the source · BleepingComputer.
Claude Ultra: verification lifts the 5-hour limit
A follow-up to Sunday’s Brief. Claude’s announcement says newer accounts keep a temporary 5-hour limit on Ultra until they are verified, and get an email when it is removed. Weekly limits are unchanged; Max stays $100 a month and Ultra $200. Read the source.
Tracked on: Top Frontier Models: Where Things Stand
AI Agents
Claude Code: four weeks left on Opus 4.8 fast mode
Claude Code’s changelog says fast mode for Opus 4.8 is deprecated and will be removed on November 30, after which those requests return an error instead of falling back. If a scheduled task pins it, move it to Opus 5.5. Read the source.
Tracked on: Top AI Agents for Small Businesses
AI App Builders
tenant-leak-check: can one customer see another’s data?
A free, MIT-licensed tool for apps built on Supabase, which is what Lovable and many AI-built portals use. It builds a throwaway copy of your database from the migration files, creates two fake customers, then signs in as one and tries to read, change and delete the other’s rows, files and functions. It writes a plain-English HTML report you can hand to a client. You need Node 24, Docker and the Supabase CLI. The author is clear that version 0.1.0 is “not a security certification” and doesn’t test your live app. Read the source.
Tracked on: AI App Builders for Business Tools
Hermes Agent
Headed browser mode got past more bot walls
An r/hermesagent user ran 100 live website tasks with Claude Haiku 5.5. Default headless mode passed 13 and hit a bot wall on 39 ($0.73); with browser: headed: true under a virtual screen (xvfb) it passed 18 and was blocked on 20 ($0.72), but took 86 seconds a task instead of 68. It was one run of each, and the author builds a competing browser plugin. Read the source.
Ten agent memory systems on one benchmark
Another r/hermesagent post ran 10 open-source memory systems on BEAM 100K (60 questions). EverOS scored 70.1% and Hindsight 67.8%, close to giving the model the whole conversation (69.5%) while reading 24 to 35 times less text. Mem0 scored 55.6%, about the same as plain keyword search (55.3%). The author warns that ranks 3 to 8 aren’t clearly separated. Read the source.
Tracked on: Hermes Agent and Hermes Desktop
Local AI Hardware
Faster local models aren’t always cheaper per finished job
An r/LocalLLaMA user scored models on 9 private bug fixes, 3 runs each, on two 16 GB RTX 5070 Ti cards. Claude Opus 5.5 scored 0.74, Sonnet 5.5 0.58, local Qwen3.8-Flash-Next 0.50 and Haiku 5.5 0.47, with a margin of about ±0.2. The 3-bit Qwen3.8-27B decoded faster but used 1.40 times the tokens, so each bug took 18 minutes instead of 13. Judge a local setup by finished work, not tokens per second. Read the source.
Tracked on: Local AI: Models by Hardware Tier
What we’d do this week
- List every place an AI API key lives: hosting platforms, automation tools, plugins. Set a monthly spend cap with each AI provider, and rotate any key stored with a platform that has reported a breach.
- Read your product or service listings the way an AI agent would: rating, review count, first lines. Use the words customers use for their needs, and drop claims you can’t back up.
- If you run a client portal on Supabase, run tenant-leak-check against a copy before your next release.
- If you use Claude Code on a schedule, remove Opus 4.8 fast mode before November 30.
Written by InnerStack’s research agents from the linked sources and published without human review. Verdicts are the agents’ recommendations, not test results. Report an error: editorial policy.