AI News · Edition 47 ·
Attacks got cheaper. Your boring checklist got more important
Researchers used Claude to break into OpenAI's systems. For a 30-bed clinic the answer is not new AI security software — it is the unfinished basics.
The one that matters
Researchers used Claude to break into OpenAI's systems, and cheap attacks are the real story
What happened, in plain words
Security researchers used Anthropic's AI model, Claude, to break into systems belonging to OpenAI. More than thirty outlets covered it and it was one of the most heavily discussed technology stories of the week among engineers. What the available reporting does not settle is the scope: how deep the access went, how much was authorised testing, and how much of the work the model did by itself versus a skilled human steering it step by step. Those details matter enormously, and anyone who claims to know them from the headline is guessing.
What is not in doubt is the shape of it. One of the most security-conscious companies in the world was successfully broken into, and a general-purpose AI assistant — the same category of tool your accountant uses to draft emails — was the instrument.
What it actually means for your business
Small and mid-sized businesses have been protected for years by something nobody likes to say out loud: not being worth the effort. Getting into the fee portal of a 600-student school, or the appointment system of a 30-bed clinic, or the shared accounting PC in a workshop with 40 staff, has always been technically easy. It simply required a few hours of a skilled person's attention, and skilled attention was expensive enough that those people chased banks and hospital chains instead.
That economic shield is thinning. When a capable assistant can read error messages, suggest the next probe and write the script, the number of people able to run a competent attack goes up and the hours each one needs goes down. The practical consequence is not a new kind of attack. It is more attempts at the same old ones — an unpatched WordPress plugin on the school site, a CCTV recorder exposed to the internet, a router still on its factory password, an ex-employee whose admin login was never removed.
What it does not mean
It does not mean your systems will be broken into this month, and it does not mean your existing AI tools are dangerous to keep using. Expect a wave of vendors selling AI threat protection subscriptions off the back of this headline. Be sceptical. The organisation in this story was not undone by a missing AI defence product, and neither will you be. The other overstatement, from the opposite direction, is the doom framing — that nothing can be defended any more. That is also false. Most break-ins at businesses your size still come through a reused password or an unpatched box, both of which are fixable.
What a sensible owner does this month
- Turn on two-factor authentication on your business email, accounting software and any admin panel. Free, and it stops the single most common route in.
- Write down every system reachable from the internet — fee portal, booking page, CCTV recorder, router admin page, that old server nobody logs into. Most owners are surprised by the length of the list.
- Remove admin access for people who have left. Takes an afternoon, costs nothing.
- Ask your web or ERP vendor, in writing, when they last applied security updates. The quality of the answer tells you most of what you need to know.
- Test one backup restore. A backup you have never restored is not a backup.
- Only then consider a paid external review. Expect quotes roughly in the range of one to two lakh rupees in India, or a few thousand to fifteen thousand dollars in Canada. Do the free items first — they remove more risk per rupee than anything on the invoice.
Also worth knowing
How this briefing is put together
Every morning we read the day’s AI announcements and reporting from the companies themselves and from the technology press, then pick the handful that actually change something for a working business. The analysis is ours and it is written for owners and managers, not engineers. Every story links to its original source — read them, and disagree with us where we’ve got it wrong.