™Daily Brief · Oct 18
2026.10.18 Sunday
13 AI stories worth your time, each with one line on why it matters.
ListenOct 18 · 13 stories
In this issue
Oct 18 · 13 stories-
Claude Cracks 25-Year Cryptography Mystery in Half an Hour: NIST Curve Seeds Came From a 1997 Clock
Claude traced the 25-year-unsolved origin of the NIST curve seeds in under half an hour: ordinary output of the 1990s lrand48 generator seeded with Unix timestamps.
Why it mattersThe first public case of AI autonomously making a cryptography-history-level discovery — a reproducible seed origin removes the ground for 25 years of "NSA backdoor" suspicion, an…
-
OpenCode Hit by "Distillation Attack": API Keys of About 1.4% of Users Compromised
OpenCode disclosed a "distillation attack": attackers used stolen user API keys to fire large volumes of queries at top-tier models, with the bills landing on victims.
Why it mattersWhat was stolen was not data but billable frontier-model access — one key can yield training-data value, putting the risk of intermediaries holding API keys on the table.
-
Websites Are Closing Their Doors to AI Agents: Yelp, Delta, JPMorgan Draw Lines
Major websites are drawing lines against AI agents: Yelp admits only paid-licensed agents, Delta blocks ticket booking, JPMorgan and Charles Schwab shut out account access.
Why it mattersAI companies promise agents can handle everything online, but high-value sites in travel, local services, e-commerce and banking are redrawing where agents can actually work — wit…
-
Apple Tightens App Store Rules: AI-Generated Nonconsensual Intimate Imagery Must Be Proactively Blocked
Apple updated the App Store Review Guidelines, requiring apps hosting user-generated content to proactively block AI-generated nonconsensual intimate imagery.
Why it mattersApple explicitly wrote AI-deepfake policing duty into its rules with developer-account-level penalties for the first time, raising the bar for AI image apps in plain text.
-
DeepSeek Releases V4.1-Flash-1017: MIT-Licensed Weights, In-House Search API
DeepSeek released V4.1-Flash-1017 on October 17: the Hugging Face model card lists both code and weights under the MIT license, and the in-house Search/Fetch API opened the same day at $0.75 per 1,000 successful request…
Why it mattersOne release covers both an MIT-licensed flagship snapshot and an in-house search API; server-side Search/Fetch calls inside DeepSeek Harness, Claude Code and Codex are free until…
-
Microsoft Copilot Studio Launches Agent Accounts: Own Credentials, Shared Business Memory, Auto Triggers
Microsoft announced on Oct 15 new Copilot Studio features: agent accounts (Entra identity, own credentials, scoped permissions), business process memory (carrying preferences and context across cycles), and triggers in…
Why it mattersMicrosoft is issuing corporate IDs to enterprise agents for the first time — a directory identity, own credentials, @mentionable in Teams, Outlook and Word comments — turning agen…
