Ep.36 — Reflection Beam, OpenAI text watermark, MCP agent pivoting, rogue agents at Wikipedia, Singapore AI mailer breach — 6 October 2026

Victoria and Stuart on the biggest AI and cyber stories since Wednesday. Google's fast new Gemini 4 Hydrogen model arrives in Search, the Gemini app and Sheets; researchers found a jailbroken AI agent that spent two weeks breaking into a European phone company and found new routes on its own when security tools blocked it; attackers used the ScreenConnect remote support tool to reach nearly fifty organisations in ninety minutes; and Expedia and Notion confirm the supplier breaches we covered on Wednesday reached further. Simple, practical steps for leaders. Coverage: 11–12 November 2026.

Victoria and Stuart on the biggest AI and cyber stories since Monday. Google's Gemini 4 Carbon and Anthropic's Claude Fable 5.2 are now on general sale, and Anthropic says its new models more often suspect they're being tested; Microsoft fixed an Outlook flaw criminals were already using, where opening one file hands over a copy of your login; dozens of companies were breached through old access they'd given the data firm Qubole; and AI suppliers Fireworks and Railway disclosed breaches that hit customer data and bills. Simple, practical steps for leaders. Coverage: 9–10 November 2026.

Victoria and Stuart on the weekend's biggest AI and cyber stories. Attackers took more than €100m from French bank Crédit Mutuel Arkéa through one of its service providers; free downloadable AI models, from Kimi K3.1 Pro to DeepSeek, are closing in on the locked-away leaders, even at hacking; Google DeepMind's AI agents found new weaknesses in older RSA encryption keys; and Claude Code's 'don't ask again' option saved passwords into files that ended up public. Simple, practical steps for leaders. Coverage: 6–8 November 2026.

Victoria and Stuart take over Unsupervised Overnight. OpenAI introduces GPT-6 Cyber for approved defenders; Tencent Hy4 aims to operate workplace software; Cognition offers faster, cheaper coding with SWE-2 Flash. Plus the widening Chainalysis breach and a newly disclosed, already-fixed ChatGPT Lockdown Mode bypass. Practical checks for software updates, safe AI trials and supplier incidents. Coverage: 4–5 November 2026.

Unsupervised Overnight ep.44 — AI and cyber briefing for Mon 2 Nov through Wed 4 Nov 2026, with plain-words explanations and practical next steps for every story.This time: Binance's full account of its record theft, a five-month campaign that began with a fake AI tool installer and a fake job interview, and why strangers' code should never touch a work laptop. Supermarket fridges and freezers across Belgium, Sweden, Ireland and beyond remotely switched to heat, and the three questions to ask your maintenance contractor. Google's warning that stolen AI keys are running up bills of up to a million dollars, and why every AI account needs a spending cap. And the new wave of Chinese AI models, from Meituan's LongCat 2.5 to Kimi's promised download, with a word on keeping sensitive data safe.Hosts: Alice and Tim.

Unsupervised Overnight ep.42 — AI and cyber briefing for Fri 23 Oct through Fri 30 Oct 2026, with plain-words explanations and practical next steps for every story. From this episode the show comes out three times a week, on Monday, Wednesday and Friday.This time: Google's new top model, Gemini 4 Carbon, held back for security defenders only, and Anthropic's unreleased model that chained browser and phone flaws into working attacks, plus why the real action is making sure your updates are installed. OpenAI's cheaper GPT-6.1 Terra that can operate ordinary apps, and Mistral's free-to-download Large 4, "Le Chonk", and how to decide which models your staff get. The PHP2Shell flaws turning up inside Palo Alto firewalls, a similar flaw in Node, and what to check. And how a small speed-monitoring add-on was swapped for theft code to drain Polymarket users' accounts.Hosts: Alice and Tim.

Unsupervised Overnight ep.41 r3 — weekly AI and cyber briefing for Fri 16 Oct through Thu 22 Oct 2026, with plain-words explanations and practical next steps for every story.This week: the PHP2Shell flaws in the software behind most websites, and how to find out whether you're exposed, patch, and cope if you can't. A run of break-ins at the services that hold companies' AI keys, including a poisoned LiteLLM update, and how to cancel and rebuild. Reflection's free Beam coding model and a simple way to test it. And two very cheap Chinese AI models, with a big catch.Hosts: Alice and Tim.

Unsupervised Overnight ep.40 — weekly AI and cyber briefing for Fri 10 Oct through Thu 15 Oct 2026.This week: Meta releases Muse Spark Open, a frontier-scale open-weight multimodal model. Google opens paid access to Gemini 4 Argon after last week's Fairwind-only rollout. SOCRadar's CyberXero report shows a Russian-speaking access broker running dozens of Claude Code agents against WordPress and Ukrainian infrastructure. And the Aoki infostealer has started harvesting logins for Claude, Codex, Cursor and other AI coding tools.Hosts: Alice and Tim.

First weekly edition of Unsupervised Overnight. Google DeepMind's Gemini 4 Argon is with vetted Fairwind cyber defenders first, with a million-token output limit and strong coding and defence scores, while broader API access still has no date. Anthropic launches OSS Scanner, a free opt-in service that uses its strongest models including Mythos to send raw vulnerability reports to open-source maintainers who enrol. A malicious Tensorlake npm release in the Shai-Hulud family steals developer credentials and wipes the home folder if you revoke the stolen GitHub token before removing its monitor. And Lumen's Black Lotus Labs reports PoeLLM, which has infected more than three thousand AI servers, often LiteLLM and Ollama left open on the internet, hiding its command address inside a poem on GitHub.Alice hosts. Tim brings the catch and the practical next step.Unsupervised Overnight: AI and cyber that actually moved.

Thursday morning AI and cyber briefing. OpenAI moves everyday ChatGPT onto GPT-6, with Sol for paying users and Luna for free users, plus Intelligent UI answers built from charts, buttons and small tools, and business accounts switch on only when an administrator allows it. Anthropic releases Claude Haiku 5.5, its small, fast model, at about ninety per cent less than the last Haiku for normal-length requests, so test it on your own work and your real bill. CrowdStrike looks inside the AI tools behind the South Korean bank break-ins and finds the attacker asked Claude to write his CV. And the FBI warns that FortiBleed, June's FortiGate password leak, is still being used to lock companies out of their own firewalls, so a password reset alone isn't enough.Alice hosts. Tim brings the catch and the practical next step.Unsupervised Overnight: AI and cyber that actually moved.