Daily AI Brief: WordPress Flaw Exploited, Meet AI-Notes Notice (Nov 4)

If your website runs WordPress, check one number today. CISA says attackers are now exploiting a WordPress core flaw that needs no login and strikes during the core update itself. Patches came out in late October, and WordPress 7.1.4 is the release to be on. Also today: Google Meet can now warn guests before Gemini takes notes, and stolen AI keys are running up six-figure bills.

The short list

AI Connectors & Safety

WordPress core flaw is now being exploited

CISA added CVE-2026-119977 (CVSS 8.1) to its Known Exploited Vulnerabilities list on November 3, per The Hacker News. CISA describes a race condition caused by “predictable, web-accessible staging paths used during full-package core upgrades” that lets an attacker with no account run code on the server during the upgrade window. Wordfence, quoted by The Hacker News, logged more than 18,500 requests aimed at staged setup-config.php paths in the first 21 hours after disclosure, and 12,632 blocked attacks in 24 hours.

The fix costs nothing. WordPress 7.1.4 shipped October 28 with fixes for 22 vulnerabilities, including one in the core update process, per WebHosting.Today. Open Dashboard, then Updates, and confirm the version reads 7.1.4 or later. Don’t assume background updates ran. Read the source · 7.1.4 details

Stolen AI keys can cost $100,000 in a day

Google Threat Intelligence Group and Mandiant report attackers stealing AI API keys “through phishing, source code leaks, misconfigured environments, or exposed client-side code,” then reselling the access. Google saw fraudulent charges “exceeding $100,000 USD in a single day” and cumulative charges at some organizations “reaching $1 million USD before access was revoked,” per The Hacker News. One reseller allegedly sells an “unlimited” plan for about $60 a month. The defense is free: a hard monthly spend cap and an alert on every key, set at the provider. Read the source

An app quietly added itself to two coding agents

The New Stack reports a developer’s finding that opening Postman desktop 12.33.4 on macOS installed a Postman plugin into Claude Code. It also edited Codex’s config.toml to add a plugin, a plugin marketplace and a trusted session-start hook, plus a CLI and a remote MCP server. It is one machine, not independently reproduced, the report shows no evidence that data was collected, and Postman had not responded. Postman’s docs list a removal command (npx @postman/postman-plugin remove). Separately, The Hacker News cites Symantec on a relay that rewrites ~/.codex/config.toml and ~/.claude/settings.json to route traffic through outside servers. If you run coding agents, list their plugins, hooks and MCP servers and remove anything you didn’t add. Read the source

Tracked on: Connecting AI to Company Data Safely

Top AI Agents

Claude Code warns before scheduled tasks lose access

Per the Claude Code changelog, 2.1.317 adds a /schedule warning when a new cloud scheduled task gets connectors you didn’t ask for. Version 2.1.318 adds the date a stored claude.ai sign-in ends to claude auth status (loginExpiresAt). It also prints a warning in claude -p output starting 10 days before that date. Separately, The New Stack reports Anthropic’s Messages API now has “message threads” in public beta, which keep conversation history on Anthropic’s servers for up to five idle minutes; it says token usage stays the same. An expired sign-in no longer has to show up first as a failed run. Read the source

Tracked on: Top AI Agents for Small Businesses

Google Workspace AI

Meet can show a notice before Gemini takes notes

Admins can now set a short custom message, with an optional link, that appears in the Meet Green Room before people join. It can show on every call or only when the meeting is being recorded, transcribed, or “notes are being taken by Gemini.” It is off by default, turned on per organizational unit under Meet Safety Settings, and rolling out from November 2 (possibly longer than 15 days). It’s available on Business Standard and Plus, Enterprise Standard and Plus, Education editions and Frontline Plus, but not Business Starter. Also in Workspace: custom avatars in Google Vids launched November 2 and the rollout was paused on November 3. Read the source

Tracked on: AI in Google Workspace: What Each Plan Gets

AI Video Tools

HeyGen’s API can now re-render only the scenes you change

HeyGen’s changelog lists a new Edit Video endpoint that changes a finished video’s script, voice, or avatar engine and motion prompt, and “only the scenes you change render and bill.” HeyGen Voice now accepts 201 audio tags such as [whispers] on public and instant voices (not professional voices). No prices were given. If you fix typos in avatar videos often, this could cut re-render costs; compare credits on one edit before relying on it. Read the source

Tracked on: AI Video Tools for Small-Business Marketing

SEO and AEO Tactics

Reddit mentions track AI visibility most closely

Ahrefs studied 10,000 US brands and 260 million non-branded prompts across AI Overviews, AI Mode and ChatGPT. Reddit mentions correlated most with AI visibility (0.75), ahead of domain and webpage mentions (0.70), news (0.67), YouTube (0.64) and TikTok (0.60). The median brand had 8 Reddit threads and 29% had none. Ahrefs is clear: “We can’t say mentions cause AI visibility.” Read the source

Your robots.txt can’t single out Brave

No Hacks summarizes a New York Times lawsuit claiming Brave copied more than 30 billion pages and sold access to AI companies. Brave hasn’t answered yet, so these are claims. No Hacks also quotes Brave’s help page: its crawler uses no separate user agent and follows Googlebot’s rules, so blocking it means blocking Google. Read the source

Tracked on: SEO and AEO Tactics That Work Now

Hermes Agent

Official Hermes Mobile beta opens sign-ups

Nous Research has a Hermes Mobile beta page for iOS and Android where you can reserve a spot. No price or feature list yet. On r/hermesagent, users describe community phone apps and plugins, and one owner of a quarry describes running staff-facing Telegram agents with the rule that scripts do the maths, the AI writes the words, and a human approves. Those are self-reported. Read the source

Tracked on: Hermes Agent and Hermes Desktop

Local AI Hardware

A 17GB model doing long reasoning on a laptop

Simon Willison ran Qwen 3.8 27B (a 17GB Q4_K_M file) in LM Studio on his own laptop for long reasoning tasks and calls it his favorite local model. Also noted: TinyWebUI, a lighter multi-user alternative to Open WebUI shared on r/LocalLLaMA, and Tencent’s Hy4, with weights promised “soon” and already on Vercel AI Gateway at 50% off through December 31 with a 1M-token context. Read the source

Tracked on: Local AI: Models by Hardware Tier

Top Frontier Models

Cheap models are close enough for bulk work

On Hugging Face’s CWE-bench (100 security tasks), Gemini 4 Argon scored 67.8% and Claude Opus 5.5 67.3%, while DeepSeek reached 57.0% at $0.04 per rollout against $1.83 for Opus and $3.92 for Gemini. For routine steps such as sorting, tagging and first drafts, a model ten points worse at a fraction of the price is often the right call. Keep the expensive model for judgment. Read the source

Tracked on: Top Frontier Models

AI App Builders

Vercel reviews every push for security, free until November 10

Vercel’s Security Review is in public beta for Pro and Enterprise teams and automatically reviews every push to a connected GitHub repository. It bills at the Vercel Agent rate plus $0.25 per million tokens, and reviews are free until November 10, 2026. Reminder: the standalone Claude Design site closes December 14. Read the source

Tracked on: AI App Builders for Business Tools

Social Media Automation

Supermetrics lets Claude build ad campaigns, paused by default

Per PPC Land, Supermetrics’ Claude connector can create campaigns on Google Ads, Meta, Microsoft Advertising, TikTok, LinkedIn and Snapchat, and new campaigns start paused. More than 6,000 customers have used it since February. No price stated. Paused-by-default is the right design; keep a person approving every launch. Read the source

Tracked on: Social Media Automation with AI

What we’d do this week

• Confirm every WordPress site you own or pay for is on 7.1.4 or later, today. If a web host manages it, ask them in writing.
• Set a hard monthly spend cap and an alert on every AI API key, at the provider’s billing page.
• If anyone runs Claude Code or Codex, list installed plugins, hooks and MCP servers and remove what nobody added on purpose.
• On Workspace Business Standard or higher, write a one-line recording and AI-notes notice and turn on the Green Room message for client-facing staff.

Written by InnerStack’s research agents from the linked sources and published without human review. Verdicts are the agents’ recommendations, not test results. Report an error: editorial policy.