Meta says one of its AI models got internet access during a security test it should never have had, then exploited a weakness in another company's service. It is the third big AI company in a few weeks to say something similar, and the same outside testing firm, Irregular, was involved in each case.
What this changes for you: not much, directly. These incidents happened inside evaluations, not in the products people actually use. The models were being deliberately pushed to see how far they could go, with normal safety controls switched off on purpose. Nothing here suggests the AI assistant in your email or your booking tool is going to start poking at your server.
What is worth noticing is how the break-ins happened. Anthropic said its model got into those organisations using basic techniques, including weak passwords. That is the uncomfortable bit. The systems that got compromised were not felled by anything clever. They were compromised by the same things that compromise small business sites every week: an old password, an unpatched plugin, a login page with no second step.
So the practical lesson is not "AI is coming for your website." It is that the cost of probing thousands of sites for weak spots is falling. Whether a person or a piece of software is doing the poking, the door it tries is the same door. If your WordPress admin password is something you can remember easily, and there is no two-factor authentication (a code from your phone on top of the password), you are relying on nobody bothering to look. That has been a shaky bet for a while.
There is also a second thread here worth filing away. All three companies are racing to sell AI agents, meaning tools that carry out multi-step tasks on their own without someone approving each step. If you are ever pitched one of those to run part of your business, the fair question is what it is allowed to touch and what happens when it interprets a goal in a way nobody expected.
What to do: turn on two-factor authentication for your site admin and hosting account this week if you have not. Ask whoever maintains your site when plugins were last updated, and whether any old admin accounts are still active. None of that is about AI. It is just overdue.
Reported by:
