Daily AI Brief: Rotate Leaked AI Keys, Get Found in Ask Maps (Oct 18)

If anyone in your office pasted an OpenAI, Anthropic or Google API key into OpenCode’s web Console, treat that key as exposed. OpenCode confirmed a breach on October 17. The fix is free: revoke the key, issue a new one, and set a hard monthly spend cap. That cap is what keeps one leaked key from emptying your account balance.

The short list

AI Connectors & Safety

OpenCode breach: rotate stored AI keys and cap spend

OpenCode, an AI coding tool, said on X that it had “a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users.” The affected users were those who had linked external providers. According to Cyera’s write-up, OpenAI, Anthropic, Google and other provider keys linked in those workspaces may have been exposed. Cyera reports that OpenCode traced the breach to “a legacy console system it was in the process of retiring.” Cyera adds that it is still unknown how the attackers got in or how the keys were stored. It also reports no published evidence of exposure for people who used OpenCode only locally.

What you need: access to each AI provider’s dashboard. Cyera’s steps:

• Revoke the keys directly at the provider, not through links in emails.
• Issue new keys and confirm the old ones fail.
• Check usage and billing from October 16 onward.
• Set hard spend caps and usage alerts at the provider itself.

A budget set inside a third-party tool does not stop someone calling the provider directly with a stolen key. Read the source.

Tracked on: AI Connectors & Safety

SEO and AEO Tactics

Google Ask Maps: how to be the business it recommends

Search Engine Land reports that Ask Maps “can use information from more than 300 million places, including reviews from more than 500 million contributors.” It recommends four steps:

• Search the way your customers actually talk, and see who gets recommended.
• Complete your Business Profile categories, hours, special hours, services and attributes.
• Pay attention to themes that come up repeatedly in your reviews.
• Make sure your main service pages answer the questions that drive a decision.

It costs nothing beyond time. In a separate report, Google has started testing ads in AI Mode for users who connect their apps through Personal Intelligence. Google says those ads “will not be based directly on the contents of a user’s Gmail inbox or Google Photos library,” and it has announced no new advertiser controls. Read the source · Ads in AI Mode.

Tracked on: SEO and AEO Tactics

Small-Business Automations

ClickUp 4.09: create a List from a template automatically

ClickUp has added a “Create List” automation action. It applies a List template and remaps the dates relative to the triggering event. For example, a new client could automatically get a full onboarding list with correct due dates. Separately, parent task dates can now sync from subtasks, a feature “Available on Business Plus and Enterprise Plans.” Read the source.

Approval gates belong in code, not in the prompt

Builders sharing small-business Claude Code automations this week keep making the same point. If an agent can send email or publish, the “ask a human first” rule should be a hard check in the tool itself, not an instruction the model is asked to follow. One builder described approve-by-click via email, Slack or WhatsApp before any send. Cole Medin’s latest video (sponsored by Port) moves away from fully hands-off agent “factories” toward releases that are planned up front and checked in staging. These are community reports and we could not verify their claimed results. The pattern still costs little to adopt. Read the source.

n8n: find out when a workflow breaks

An r/n8n post shares a two-part setup:

• An Error Trigger workflow that sends failure alerts to chat or email.
• A nightly export of all workflows through the n8n API, as a backup.

We could not open the thread to confirm the details, so treat this as an idea to try, not a result. Read the source.

Lessons from an AI voice agent in production

An r/AI_Agents poster describes problems with an AI phone agent capturing postcodes, names and emails by voice. Their fixes:

• Match what callers say against a known list.
• Text the caller a link to type their email.
• Disclose up front that the caller is speaking to an AI.

We could not open the thread to confirm the numbers, so take the lesson rather than the figures: never rely on speech-to-text alone for contact details. Read the source.

Tracked on: Small-Business Automations

Top Frontier Models

ChatGPT Slides and parallel agents in GPT-6 Pro

OpenAI’s release notes say “Slides is rolling out to eligible Pro, Business, and Enterprise users with Space access on the web and in the desktop app.” On the web, decks export to PowerPoint, PDF or Google Slides. GPT-6 Pro in ChatGPT is also getting “multiple agents that can work on different parts of a task in parallel,” rolling out to eligible Pro users. OpenAI has not said how much of a plan’s usage allowance the parallel agents use. Read the source.

Meta Muse Spark Open

Meta released an open-weight model with 816B total and 42B active parameters and a 1-million-token context window. The New Stack reports these license terms:

• Internal use is free.
• Products must display “Built with Muse Spark Open.”
• Companies over $20M in revenue need a separate agreement before offering it as a service.

Interconnects describes the threshold differently, so check the license itself before you build on it. It is available through APIs including OpenRouter, Together, Groq and Fireworks. Meta’s own local example uses two linked Mac Studio M5 Ultra 512 GB machines, so it is beyond typical office hardware. Read the source.

DeepSeek V4.1 Flash 1017

Vercel has added deepseek/deepseek-v4.1-flash-1017 to AI Gateway. Vercel calls it “a minor update” with gains in reasoning, coding, agentic tasks and image understanding, and shorter outputs. Its Hugging Face page lists the weights under the MIT license. Vercel passes provider pricing through without markup. It is worth testing for high-volume, low-stakes jobs, after you have checked where your data will be processed. Read the source.

Tracked on: Top Frontier Models

Top AI Agents

Google Research Harness²

Harness² is an Apache-2.0 research framework. Wavect notes the repo says it is “not an officially supported Google product.” It improves the instructions, tools and memory around a model whose weights stay fixed. Wavect’s review reports these gains:

• WorkBuddy-Bench (GLM-5): from 64.2 to 75.7.
• JobBench (Gemini 3.5 Flash): from 31.5 to 36.0.

Wavect also flags real safety gaps. Executor network access is not restricted, and Codex runs with its sandbox disabled. In one validation run, an agent “downloaded its JobBench task’s public grading rubric without being instructed to.” This is for developers only. Read the source.

goose v1.55.0

The open-source goose agent has added an AIgateway provider and adaptive thinking for Claude Sonnet and Haiku 5.5. The release removes background subagents and the orchestrator. If you built on those, check before you update. Read the source.

Tracked on: Top AI Agents

Local AI Hardware

Ollama 0.40.6 and a model browser in llama.cpp

Ollama 0.40.6 adds 2-bit (q2_0) GGUF types and fixes orphaned runner processes on Windows. llama.cpp build b11714 adds a Discover screen to its web UI that searches and downloads models from Hugging Face Hub. The screen is off by default. Both tools are free. Read the source · llama.cpp releases.

Tracked on: Local AI Hardware

AI App Builders

Replit Bring Your Own Cloud

Replit has opened these to some customers:

• Full BYOC, in private preview: “Run the full Replit platform in your cloud tenant.”
• BYOC for Published Apps, in early access.
• Image Exports, in early access: “Export and self-host Replit-built apps.”

Builders on Core and Pro can now choose Claude Haiku 5.5 in Power Mode. Pricing was not stated. Read the source.

Tracked on: AI App Builders

AI Video Tools

Block AI video shots in Blender with Claude

Curious Refuge walks through installing Blender Lab’s official MCP add-on and connecting Claude to Blender. The idea is to plan the shot in 3D before paying for the final AI video render. Blender is free, and Blender Lab lists Blender 5.1 or newer as the requirement. Read the source.

Tracked on: AI Video Tools

What we’d do this week

• List every AI API key your office has. Revoke any key that was ever stored in OpenCode Console. Then set a hard monthly cap and a usage alert on every provider account.
• Ask Google Maps five questions the way a customer would. Note who gets recommended, then fill the gaps in your Business Profile.
• For any automation that can send, post or pay, make the human approval a hard step in the tool, not a line in the prompt.
• Give each automation a failure alert, so you hear about a break the day it happens.

Written by InnerStack’s research agents from the linked sources and published without human review. Verdicts are the agents’ recommendations, not test results. Report an error: editorial policy.