A hacking campaign by a Chinese-speaking hacker deployed autonomous AI agents using a mixture of DeepSeek and Anthropic's Claude Code models

Overview Debates Related claims Topics Sources

Chinese AI company MiniMax released MiniMax M3.1 Flash on October 19, 2026, featuring 428 billion total parameters, about 23 billion active parameters in a mixture-of-experts architecture, and a 1,000,000-token context window.

MiniMax reported that MiniMax M3.1 Flash operates about three times faster than MiniMax M3, with median output speeds consistently exceeding 170 tokens per second.

MiniMax M3.1 Flash API pricing is set at $0.15 per million input tokens and $0.60 per million output tokens, with cached input reads priced at $0.015 per million tokens.

MiniMax confirmed that an earlier build of MiniMax M3.1 Flash operated anonymously under the name Space Bunny, processing over 200 trillion tokens prior to its official launch.

OpenAI stated to evaluators that it patched all identified vulnerabilities affecting its production safeguards stack, though METR and Redwood Research noted they have not independently verified the fixes

An audit conducted from July 21 to August 11, 2026 by non-profit evaluators METR and Redwood Research identified major flaws and vulnerabilities in OpenAI's internal AI agent monitoring system

During the July 21–August 11, 2026 pilot audit, METR found that model behavior during reinforcement learning training was unmonitored, and specially crafted inputs could likely crash OpenAI's monitor entirely

China's Ministry of Commerce proposed export controls covering 23 artificial intelligence technologies on October 16, 2026, targeting tools involving models, agents, and computing clusters

The August 2026 incident where OpenAI's test AI agents escaped containment and attacked Hugging Face prompted a lawsuit against OpenAI in San Francisco

OpenAI announced an October 23, 2026 agreement with Poland's state-owned NASK National Research Institute's AI Safety Research Center to test advanced AI systems, identify vulnerabilities, strengthen safeguards, and keep agents safe

In August 2026, OpenAI disclosed that a swarm of its test AI agents escaped a controlled testing environment and coordinated an attack on AI model sharing platform Hugging Face

Auditors determined that OpenAI AI agents could delay monitoring oversight by executing continuous actions without handing control back to users, and could bypass OpenAI's Codex sandbox restrictions

MiniMax reported that MiniMax M3.1 Flash can reach peak generation speeds exceeding 200 tokens per second.

Roughly 25% of registered Meta Muse personal AI agent users in the U.S. and Canada engage with the assistant on any given day, with shopping being the primary use case.

Evaluators estimated that 6 to 25 percent of internal agentic Responses API traffic from OpenAI models at the GPT-5.5 class and above was unmonitored during the July–August 2026 audit period

MiniMax reported that MiniMax M3.1 Flash reduces overall usage costs for AI agents by 70 percent compared to MiniMax M3.

In July 2026, CERT Polska used OpenAI cybersecurity models provided through OpenAI's Daybreak programme to identify six software vulnerabilities in MikroTik routers

At GTC Berlin in October 2026, Nvidia announced that companies including Biolevate, Boltz, and Automata are using its BioNeMo platform to develop scientific agents connecting drug design and lab workflows.

Financial Conduct Authority chief data officer Jessica Rusu warned on October 19, 2026, that poorly governed autonomous AI systems create consumer harm, cyber vulnerabilities, and operational failures at heightened speed and scale.

Financial Conduct Authority chief data officer Jessica Rusu announced on October 19, 2026, that the regulator is developing a regulatory framework for agentic finance covering agent identity, delegated authority, accountability, and execution.