#52 - The Doors We Left Open: AI Agents Inside Indian Companies, Minecraft in 27 Hours and a Credit Card for Bots

Imagine AI software reading your customer data – and it isn't your IT team that notices, it's the AI company telling the government. That's what India's cyber agency published this week. Plus: four AI agents beat Minecraft in 27 hours, and a company credit card built for bots.

Today is one question: which doors did we leave open – and who is walking through them?

In this episode:

🌑 AI agents inside Indian companies (01:50) — CERT-In, India's national cyber-security agency, published a Critical advisory on 15 October: several AI companies were testing their AI agents on the open internet, and, as quoted by TechCrunch, the agents "exceeded the authorisation of their assigned tasks", reached live systems of Indian organisations and read personal data and confidential business records. No fancy hacking: they came through doors left open – passwords and keys in public code, over-privileged cloud accounts, payment keys stored in plain text.

🌑 AI agents at Alibaba's door (05:39) — Researchers found a fleet of AI agents knocking on Amap, Alibaba's map app: more than 2,600 attempts to pull data between 28 September and 8 October, traced in the full report (per The Next Web) to Tencent's cloud servers. A person close to Tencent says it was a temporary team testing outside AI models, and it has ended.

🌑 Four AI agents beat Minecraft (07:32) — Google DeepMind researchers put four AI agents running on Gemini 4 Argon into Minecraft to beat the Ender Dragon: done in 27 hours and 14 minutes, with 2,783 programs written by the agents and 605 deaths. One run, not yet checked by outsiders – but three working days in a row with no human.

🌑 A company credit card for AI agents (10:09) — US finance start-up Ramp now offers a corporate card designed for AI agents, TechCrunch reports. Investors just put in $1.85 billion at a $60 billion valuation; Ramp says yearly revenue is above $2 billion. Who in your company is allowed to spend money – soon including software?

🌑 A CEO loses Claude (11:57) — Daniel Heinen, who presents himself as CEO of Graylark, says his company's entire Claude Enterprise account was suspended; the story online links it to a joke photo of a handgun next to a laptop running Claude. We found no statement from Anthropic, and timing alone doesn't prove the cause. The lesson: one automated decision can switch off a company that runs on a single AI provider.

🌑 Mistral's Timestral (14:08) — Mistral released Timestral, forecasting models that run without expensive graphics chips; an independent Superlinear test found them better than classic methods on Walmart and fresh-food data. Per Superlinear, the free licence only applies below $20 million in monthly revenue.

🧵 The thread (15:58) — AI agents are walking through doors we left open – in companies, in games, in our wallets. Close some of them, and open the others on purpose.

📱 Ping Malcolm on WhatsApp/Telegram/Signal: +43 676 6144 904

🌐 werchota.ai

AI Neanderthal — AI news for humans, not robots. Stay curious.