Start free trial

Five minutes.
AI, made clearer.

What changed, what holds up, and why it matters. A short edition you can actually finish.

Read the briefing

Start with two full samples. Sign in for this edition’s free story. Sources and corrections stay open.

What the pen marks mean
  • rememberThe takeaway: what to remember
  • figureThe number that matters
  • evidenceThe evidence line
  • rulingThe ruling
  • claimThe claim that fails

Each mark is drawn once, as you reach it. Numbers are only circled when they come from the story’s own figures.

An army of AI agents did plant shells on real websites. But the companies were named by Reuters, the hits were websites, and the $5,000 is a guess.

Small robots climb into a tiny side window of a huge factory while the vault door stays shut.
AI illustration

NorForge watched exposed Cairn panels plant uploader shells on shop sites. Deere, SharkNinja and Cummins describe limited website incidents, and the cost figure is a researcher's estimate.

The reality check

NorForge found exposed Cairn panels planting uploader shells on websites. Reuters named the firms; Deere saw no sign of sensitive data accessed and SharkNinja says a standalone support site was hit. The $5,000 is an estimate; the report says it has no token numbers. THE VERDICT: Needs context.

Why care? Automated website intrusion is getting cheap, which matters to anyone running a web shop. But a shell on a support site is not a breach of Deere, and an estimate is not a receipt.

Take this with youAI agents did plant web shells on more than 100 websites. The companies were named by Reuters, the hits were websites, and the $5,000 is a rough guess.

Open the evidence4 source pages

The claim we checked

A Hacker Broke Into John Deere, SharkNinja With an Army of AI Agents, breaching more than 100 company websites for about $5,000.

These are quoted receipts, not a count of independent investigations. Several reports may rely on the same original source.

it.slashdot.org ↗
A Hacker Broke Into John Deere, SharkNinja With an Army of AI Agents
it.slashdot.org ↗
A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own
it.slashdot.org ↗
Though Norforge doesn't name the targets, Reuters reports that the victims included companies like John Deere, SharkNinja, and Cummins.
norforge.com ↗
An investigation by NorForge into publicly exposed AI-driven penetration-testing control panels
norforge.com ↗
with over 1100 attack projects spread over the 14 dashboards likely associated with this group
norforge.com ↗
We dont have actual numbers on token usage, but with the underlying data it's possible to guesstimate.
norforge.com ↗
We estimate the average cost of a task to end up around $5 if one includes unsuccessful, early ending projects.
norforge.com ↗
The uncertainty here is however considerable, and numbers could be off by a clear margin.
norforge.com ↗
Payload: Uploader shell (HTML upload form + move_uploaded_file to save files), explicitly not a command-executing webshell.
norforge.com ↗
The URL did indeed serve an uploader webshell.
norforge.com ↗
average success rate is hovering around 10%
thenextweb.com ↗
Fagerland estimated to Reuters that the campaign had used about $5,000 worth of tokens, or roughly $50 per successful hack.
thenextweb.com ↗
or roughly $50 per successful hack. That is a rough estimate.
thenextweb.com ↗
TNW has not independently verified the intrusions.
thenextweb.com ↗
Reuters could not establish how much data, if any, the hackers took.
thenextweb.com ↗
Cairn is an AI problem-solving platform.
it.slashdot.org ↗
A John Deere spokesperson said there is "no indication that sensitive information was accessed"
it.slashdot.org ↗
SharkNinja says the breach impacted a standalone site with product support information, and that it has contained the threat.
it.slashdot.org ↗
while Cummins said it's "investigating the report of a potential cyber-attack on a website operated by one of our third-party vendors
tomshardware.com ↗
Snorre Fagerland, principal threat researcher at the cybersecurity company NorForge
Open this check in the full collection →
The idea, illustrated01

AI HACKING CAMPAIGN: What was hit

  1. 01Claim: AI agents breached 100+ companies
  2. 02Measured: shells planted on shop websites
  3. 03Not shown: corporate networks or data taken
Conceptual illustration · not a data chart
Next: Easy mode, one run

Four AI agents did kill the Ender Dragon on their own. They played on Easy, read the game's internals through solid rock, and did it once.

Four blocky adventurers in x-ray goggles face a dragon beside a dial set to its gentlest notch.
AI illustration

The arXiv paper backs the numbers and the no-human-help claim. Its own limitations section says the agents saw hidden blocks, played on Easy and ran a single attempt.

The reality check

The paper confirms 2,783 programs, a dragon kill in 27 hours 14 minutes and no human input. It also says the agents read hidden blocks through code, played on Easy, and this was a single run. THE VERDICT: Needs context. Real result, narrower game.

Why care? This is a strong long-horizon coding result, not proof that AI plays Minecraft the way a person does. Scope any 'first' to the authors' own conditions.

Take this with youFour AI agents did kill the Ender Dragon with no human input. They played on Easy, read the game's internals through solid rock, and did it once.

Open the evidence5 source pages

The claim we checked

Four Gemini 4 Argon agents beat Minecraft from scratch in 27 hours.

These are quoted receipts, not a count of independent investigations. Several reports may rely on the same original source.

digg.com ↗
Four Gemini 4 Argon agents beat Minecraft from scratch in 27 hours.
arxiv.org ↗
the team wrote 2,783 programs and defeated the dragon in 27 hours and 14 minutes, dying 605 times along the way
arxiv.org ↗
Researchers could watch the run on a live dashboard and pause or stop it at any time, but they had no cause to intervene.
arxiv.org ↗
ran in survival mode on Easy difficulty in a randomly generated world, with cheat commands disabled and no human input during the run
arxiv.org ↗
Mineflayer tells the agents exactly which blocks and creatures are around them, including blocks behind solid rock and the dragon’s internal state
arxiv.org ↗
Playing from pixels with a keyboard and mouse, as SIMA 2 does, remains much harder.
arxiv.org ↗
Monsters spawn and attack, but deal less damage than on Normal or Hard, and hunger cannot kill a player.
arxiv.org ↗
We describe a single run, the first launch we tried, which cannot show how reliably the setup succeeds.
arxiv.org ↗
Two community projects have recently reported end-to-end dragon kills: a single Claude Opus 5 agent calling 37 high-level Minecraft tools on Normal difficulty
arxiv.org ↗
the random-seed speedrun record is under seven minutes
arxiv.org ↗
These figures are estimates from list prices and the session’s token counters, not the cost of serving the model.
egamers.io ↗
which makes it the first time Minecraft has been beaten with no human input
alphasignal.ai ↗
To their knowledge, it is the first autonomous, end-to-end Minecraft completion by AI agents under those conditions.
Open this check in the full collection →
The idea, illustrated02

MINECRAFT AGENTS: The conditions

  1. 01Claim: AI agents beat Minecraft alone
  2. 02Measured: one run on Easy difficulty
  3. 03Not shown: repeat runs or normal vision
Conceptual illustration · not a data chart
Next: A fund with no payees

A pay package has payees. Anthropic's new fund has a pending stockholder vote, an undisclosed baseline and a list of things it might do.

An executive shows a crowd a giant cheque with a blank payee line.
AI illustration

Anthropic committed 5% of its shares to a company-owned fund, subject to approval. Who gets paid, how and when is still to be announced.

Free with your account

Sign in for this free check.

This edition’s selected free story opens after sign-in.

Open the evidence4 source pages

The claim we checked

Anthropic designs a pay package for the public

These are quoted receipts, not a count of independent investigations. Several reports may rely on the same original source.

therundown.ai ↗
Anthropic designs a pay package for the public
therundown.ai ↗
But until money actually reaches anyone, it will be hard for the public to separate these moves from a convenient PR play.
anthropic.com ↗
Subject to stockholder approval, 5% of Anthropic
anthropic.com ↗
with an additional 2% added at the board
anthropic.com ↗
we might explore large donations to traditional nonprofits or direct distributions to specific populations
anthropic.com ↗
It is common practice for tech companies to offer escalating compensation awards to their executives.
anthropic.com ↗
In the coming months, we will share more about the Anthropic Public Benefit Fund
anthropic.com ↗
None of the Anthropic equity held by the LLC will be used for lobbying or political giving
cnbc.com ↗
above an undisclosed baseline, the company said
cnbc.com ↗
The fund will be established as a wholly owned limited liability company
cnbc.com ↗
is both mandatory to prepare for an initial public offering, and
aljazeera.com ↗
Anthropic is preparing for what could be the largest public initial offering in history
Open this check in the full collection →
The idea, illustrated03

Go inside the check.

    The full explanation appears when your reading access is confirmed.
    Next: First signs, not proof

    An Anthropic co-founder told the IMF the singularity has begun. His evidence is test scores and anecdotes, and his own speech calls them first signs.

    A speaker points at a soaring scoreboard while a banker looks out at an ordinary street.
    AI illustration

    Jack Clark's lecture in Bangkok rests on benchmark jumps, AI-assisted maths and physics results and a tenfold rise in code at Anthropic. None of that is yet a measured speed-up in science or the economy.

    Members · 30 days free

    See what the evidence actually shows.

    Members read the full check on every story: what the evidence shows, why it matters to you and the one line to take with you. Every past edition, re-verified, and the Receipts Pack come with it. A$89 a year, about A$0.24 a day.

    1. At sign-up: 30 days free. Payment card required. One introductory trial per customer.
    2. Your trial ends 30 days after you start. Unless you cancel before then in Account → Manage subscription, we charge A$89 for the first year. It renews automatically at A$89/yr until cancelled.
    3. You can ask for a full refund within 14 days after any annual payment, renewals included, with no reason needed, by emailing [email protected]. This voluntary refund does not limit your rights under the Australian Consumer Law.

    By starting your trial, you agree to the Terms.

    BS Killer is published by Inferno Tech Pty Ltd, ABN 27 647 413 474.

    Open the evidence4 source pages

    The claim we checked

    Anthropic co-founder says the singularity is underway.

    These are quoted receipts, not a count of independent investigations. Several reports may rely on the same original source.

    jack-clark.net ↗
    I believe that this year we have gained convincing evidence that it has now begun.
    jack-clark.net ↗
    Here’s a speech I gave on Saturday the 17th of October at the IMF meeting in Bangkok.
    jack-clark.net ↗
    In 2026, we have got the first signs that AI systems may be capable of doing science at the frontier
    jack-clark.net ↗
    As of this week, the highest scoring system is Claude Opus 5.5 with 67.7%.
    jack-clark.net ↗
    our researchers now produce almost 10 times the amount of code than they did for the first four years of the company’s life
    jack-clark.net ↗
    I find myself both a narrator of what is happening in AI, a principle agent behind what is
    bta.bg ↗
    Anthropic Co-founder Jack Clark delivers this year's Per Jacobsson Foundation Lecture on AI
    technologyreview.com ↗
    lacked the judgment and creativity to produce original research at the caliber of papers accepted by a top machine-learning conference
    technologyreview.com ↗
    led by Peter Kirgis and Sayash Kapoor at Princeton University
    the-decoder.com ↗
    Clark builds his case mainly on benchmark trends.
    the-decoder.com ↗
    What he means specifically is a system that can train a more powerful successor on its own
    the-decoder.com ↗
    He pegs the odds at roughly 60 percent by the end of 2028, and 30 percent by 2027.
    the-decoder.com ↗
    Herbie Bradley, who recently wrote about automated AI researchers on his blog AI Pathways , pushes back on parts of Clark's argument.
    Open this check in the full collection →
    The idea, illustrated04

    Go inside the check.

      The full explanation appears when your reading access is confirmed.
      The finish line

      Edition complete

      You’re up to speed.

      That’s the 21 Oct 2026 briefing. Keep the useful bits. Leave the noise.

      Reading estimate: 762 words at 200 words per minute. Source quotes and the optional sections below add reading time.

      Have another 3 minutes? · Learn one thing

      Tokens: the pieces AI reads

      Two words can be two tokens. One word can be six. See what changes. A beginner lesson with a visual you can play.

      Try the free lesson →

      Keep exploring

      All research

      Browse every checked claim by topic.

      A curated directory. Check each entry’s date and sources.

      Make a little room for clarity.

      Get the next checked edition in your inbox.

      Free email updates. Unsubscribe any time.