A hacker broke into more than 100 company websites this month. AI agents did almost all the work. The hacker barely touched a keyboard.

Reuters broke the story on Monday. The cybersecurity firm NorForge tracked the campaign. Researcher Snorre Fagerland watched one operator work.

The operator wrote fewer than 100 Chinese characters. The instructions told AI agents to find a way onto each site. From there, the agents worked alone for hours at a time.

The agents tried 1,200 websites across the US, Canada, Australia and Japan. They broke into more than 100 of them. Each successful break took about 23 hours. The whole campaign cost around $50 per site. The agents ran on an open platform called Cairn. Deere, SharkNinja and Cummins confirmed the hits. Deere said it took quick remediation steps. SharkNinja said only a support site was touched.

A Reddit poster named Smart_AI_Hustle shared the Reuters numbers on r/OpenAI. The poster asked a plain question. What should companies protect first? One reply said the price barely matters. The real danger is an agent that runs for 23 hours straight. It skips sleep. It keeps trying new angles the whole time.

Why did this story catch fire? It shows one person can now run a hacking campaign built for a team. Fifty dollars buys a tool that used to take a skilled group days to build. That price tag travels fast, because it turns a vague fear into a real number.

What does the reach say about the people building AI? Hugging Face, Anthropic and DeepSeek all built tools that ended up inside cheap attack kits. NorForge found two dozen similar operators using Cairn since Oct. 2. Security teams now face a volume problem as much as a skill problem. The agents keep trying thousands of times, fast and cheap. They run hour after hour, long after a tired person would stop.

Microsoft wants every company to treat its AI agents as a stranger holding the keys. CEO Satya Nadella posted the idea on X on Oct. 10. His argument is simple. Companies should assume any AI model can drift, and build real controls around it.

Nadella's post reached a huge audience. It pulled in 14,600 likes. People left 1,789 replies. The post links to a longer piece called Models as Insider Risks in the Super Intelligence Era.

On Monday, Microsoft turned that idea into a product. The company expanded a security system called Project Perception. A new feature inside it is named Guardian Agents. Guardian Agents watch other AI agents before they act.

Microsoft Security chief Hayete Gallot wrote the plan in a blog post. She called this problem the agentic insider. Her point is simple. An agent can cause real harm using only normal access and a goal that slowly drifts off course.

Microsoft now tracks 60 kinds of local agents, up from 25 before Monday. The list includes Claude Code, OpenAI Codex and GitHub Copilot. Agents get access for one task at a time. Big actions wait for a human to approve them.

A cybersecurity news account shared the plan on X soon after. That post pulled 196 likes of its own. TechCrunch covered the full announcement the same evening.

Why did this story catch fire? Nadella put a stark idea into a single post. Nine days later, Microsoft shipped a product built around it. That turnaround feels fast for a company this size.

What does the reach say about the people building AI? Microsoft now treats its own AI tools the way banks treat a new employee. Every action gets watched. Every agent gets a short leash. The company that sells AI agents is also the company telling customers to watch them closely. It wants that watch kept up hour by hour, task by task.

Anthropic wants Washington to set one clear line for shutting down an AI model. The company shared a draft bill with lawmakers. Politico first reported it on Oct. 16.

The bill sets a high bar. The government could block a model only if it risks over $1 billion in damage. It could also act if a model risks more than 50 deaths or serious injuries. Only a federal judge in Washington could issue that order. Only the Commerce Department could ask for it.

Three kinds of harm would qualify. A model could help build a weapon. A model could run a cyberattack. A model could slip past the controls its own maker built.

The news spread fast once it hit Reddit and Hacker News. A poster named Ok-Conversation3213 shared it on r/artificial Monday evening. Readers reacted within minutes. One reply called the bar a dollar value on a human life. Another joked that 49 deaths would stay legal under the plan.

New York Assemblymember Alex Bores pushed back hard on X. His post pulled 316 likes. He asked how a bill built in June could match the pace of today's AI agents and swarms.

Anthropic defends the bill as a narrow safety net, built from its own Advanced AI Framework. The company says it has pushed this plan with lawmakers since June. Critics on both sides argue about whether the bar sits too high or too low.

Why did this story catch fire? A company that sells AI also wrote the rule for when the government can stop its own product. That pairing draws instant suspicion, even from readers who agree AI needs some kind of limit.

What does the reach say about the people building AI? Anthropic wants to write its own safety rules before Congress does. Readers on Reddit read that as the company picking the referee for its own game. They said so, loudly, within hours of the post going up.

Atlassian's cofounder wants a name tag on every AI agent at work. Mike Cannon-Brookes spoke to Fortune at the Singapore Grand Prix. His worry is simple. Workers might blame the AI for their own mistakes.

Cannon-Brookes gave a clean example. He said using ChatGPT is still a person's own act. In his words, "that's ChatGPT on behalf of Mike. The accountability is with Mike."

On Oct. 7, Atlassian launched a system called the Agentic Multiplayer Protocol. It gives each AI agent a visible profile inside a team. It names an owner for every agent. An agent's edits show up in a document's history, the same way a colleague's edits would.

The scale behind that system is large. Atlassian's platform logs 15 million AI tool calls a day. People and agents work together 10 million times a month. The company's Teamwork Graph now tracks 250 billion objects and links.

Cannon-Brookes also knocked consumer AI tools. He said those tools hide an agent's actions from the user. He said that habit suits a living room. It struggles at work. Someone always has to answer for an agent's move.

A Reddit user named Resident-Fall4351 shared the Fortune story on r/artificial Monday evening. The post carries a sharp headline about name tags and blame.

Why did this story catch fire? A tech CEO said the quiet part out loud. Companies race to add AI agents everywhere. Most of them still leave one question unsettled. Who takes the blame when an agent gets it wrong?

What does the reach say about the people building AI? Atlassian bet that visible, named agents beat hidden ones. Cannon-Brookes picked a side early, in public. Rivals mostly stay quiet about who owns an agent's mistakes.

A dry safety term suddenly became a top US search query on Monday. The phrase is gradual disempowerment. Google Trends marked it a breakout. US searches for it rose more than 33,000 percent in one day.

The term names a slow kind of AI risk. A single AI system rarely seizes power in one big move. Companies, armies and labs each hand over one small choice at a time. Each step looks fine on its own.

Ezra Klein put the idea in front of millions of readers. His New York Times column ran on Oct. 18. He opened with a former Anthropic researcher. That researcher expects a jobless future and a universal income. A guest on the same show, comedian Jon Stewart, pushed back. People need to feel they matter.

Princeton researcher Arvind Narayanan set up much of this argument days earlier. He went on Klein's podcast. He later posted 14 safety points from that talk on X. His post pulled 451 likes and 50 replies. One line stood out: "Intelligence isn't power. An AI system being powerful is not a property of the model."

Narayanan's point splits two fears apart. A model can grow smart. People can still hold the real power over what it touches. The real question is which choices people give away, piece by piece.

Interest in the Wikipedia page for Ezra Klein jumped too. It drew 1,043 views the day his column ran. That is up from 783 views the day before.

Why did this story catch fire? The idea gives a name to a worry many readers already felt. They just needed a name for it. It also skips the usual, flashier story about robots turning on their makers.

What does the reach say about the people building AI? Researchers now spend real effort on a threat with a slow build and a missing villain. That story is harder to tell than a takeover. Monday's search numbers show readers want to hear it anyway.

A sarcastic Reddit post turned into a real roundup of AI math claims. The title announced dry news. One day passed on r/singularity with zero fresh proof from any lab. The post read as a joke from the start.

A user named AnozerFreakInTheMall posted the line Monday afternoon. Two questions followed. Is the exponential phase over? Has AI plateaued? Readers took the bait right away.

Comments piled up fast. One reader linked a new claim from Google DeepMind and the University of Cambridge. Their preprint went up on Oct. 19. It says a Gemini-based system found new structure inside the Busy Beaver problem. That problem tests how long a simple program runs before it stops.

Other replies pointed back at recent weeks. Claude had already solved a cryptography puzzle tied to the National Security Agency. That puzzle stood unsolved for 25 years. One reply called the result old news by Monday morning.

A third set of replies turned skeptical. Some readers argued that labs sit on real results. They release them on a slow drip, to manage public reaction. One reply pointed to OpenAI's own math review backlog. That backlog shows verification is the real bottleneck now, well ahead of new discovery.

The joke barely survived its own comment section. By the time 33 replies had piled in, the thread had named three real events. A live preprint. A solved cipher. A review backlog.

Why did this story catch fire? A flat joke gave readers a reason to compare notes on a fast week. They did it all in one place. Outlets had yet to file the full report.

What does the reach say about the people building AI? Readers now track lab math claims closely. They can correct a joke within minutes, citing a real preprint and a real name. This audience has grown sharp, fast and specific.