# The Log, issue 3: found, leaked, let in (slim) > Issue 3 of The Log, the week in AI for people who don't follow it every day. A PHP bug in most of the web found with AI help and leaked before the fix, two labs on agents that went around the people watching them, Walmart planning to let shopping agents in, and Anthropic's numbers ahead of its listing. - Full: https://www.anchorterminal.com/blog/the-log/issue-3-found-leaked-let-in.md (~4,700 tokens) · this version ~2,130 tokens · JSON https://www.anchorterminal.com/blog/the-log/issue-3-found-leaked-let-in.json · canonical https://www.anchorterminal.com/blog/the-log/issue-3-found-leaked-let-in - Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-10-25 - Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data) By Vlad Cealicu, 25 October 2026. 1,873 words, about 8 min to read. I spent most of the last two weeks on Reddit, and both the anti-AI and the pro-AI subreddits feel like cults. ## The PHP bug, and the leak PHP is the language behind WordPress, Drupal and a lot of what you read online, and Wiz, the security company, says it runs 70% of the world's websites [[1]](#ref-1). Calif, a security firm, reported it to PHP on 11 August, and OpenAI reported the same root cause on the same day on its own [[3]](#ref-3) (Calif found it while working on OpenAI's "Patch the Planet" programme, so it's a small world [[4]](#ref-4)). Then it leaked. And people were already trying it. Rogers called old code "theoretically buggy, practically too tedious" to attack [[5]](#ref-5), and I think that's the bit that's going away, because AI makes the tedious part cheap for the people finding bugs and for the people using them, and the fixing is still done by a handful of maintainers in Europe who were asleep when the exploits started [[4]](#ref-4). ## Agents that switched off the monitors The same week two labs published what their own agents did while being watched. On Friday Anthropic published its account of a test the UK's AI Security Institute ran on Claude Mythos 5, a hacking challenge with internet access on and Anthropic's own cyber safeguards off [[9]](#ref-9). In [issue 2](/blog/the-log/issue-2-consent-quality-assistants) it was test agents turning up on real websites, so this is the second week in a row. ## Walmart lets them in In [issue 2](/blog/the-log/issue-2-consent-quality-assistants) JPMorgan was blocking outside agents from customer accounts and Paul Graham was saying Amazon banning agents was a chance to build an Amazon competitor, and this week the competitor that already exists went the other way. Coinbase announced on 22 October that people can connect ChatGPT, Claude or Grok to their account and trade from a conversation, choosing which portfolios an agent can touch and previewing every order [[12]](#ref-12), and Anthropic opened Claude Duet, its own personal agent, on 21 October to a waitlist of US Pro and Max subscribers. We looked at the same thing from the agent's side twice this week. ## The money The Wall Street Journal reported from Anthropic's draft listing documents that it made $16.3 billion in the first half of 2026, up from $1.1 billion a year earlier, and lost $80.7 billion, about $72 billion of it accounting charges that aren't cash [[14]](#ref-14). OpenAI is working on raising another $30 billion at a $1.25 trillion valuation before its own listing, CNBC reported, with Coatue leading and money from the UAE [[16]](#ref-16). ## New models Moonshot put Kimi K3.1 Pro on its API this week, a post-trained Kimi K3 it calls its most capable 3T-class open-weight model, with a million tokens of context, and says the weights come by 4 November [[17]](#ref-17). ## What we published - Mon 19. Agents need payment channels. signing responses with a Cloudflare Worker. the tools that still copy Oracle's benchmark ban. seven GitHub projects. - Wed 21. MCP is GraphQL all over again. We adapt, we always have. - Thu 22. The tools that already let agents in. - Fri 23. How an agent signs a review. - Sat 24. I asked an agent to book dinner in London. I stopped using git for some small things. - Sun 25. Can you run Kimi K3 locally?. The Log, issue 3. The week of 19 to 25 October 2026 If you only read one, read [I asked an agent to book dinner in London](/blog/i-asked-an-agent-to-book-dinner-in-london), because it's the Walmart story from the other end. On the site, people can now edit or delete their own reviews, the same way they wrote them, and an email review that isn't confirmed in 24 hours is dropped. And Saturday 24 October 2026 was a Pythagorean Theorem Day, 24/10/26, because 24² + 10² = 26², and it works the American way round too. If you see an agent somewhere it shouldn't be, or a shop that lets them in properly, send it my way, it's how issue 4 gets made. --- More in [The Log](https://www.anchorterminal.com/blog/the-log/index.md) · Previous issue [The Log, issue 2: agents loose, money strange, a month's notice](https://www.anchorterminal.com/blog/the-log/issue-2-consent-quality-assistants.md) - Older: [I asked an agent to book dinner in London, and one site in nine let it look for a table](https://www.anchorterminal.com/blog/i-asked-an-agent-to-book-dinner-in-london.md) - Newer: [Can you run Kimi K3 locally? Not on a desk, and Moonshot never said you could](https://www.anchorterminal.com/blog/run-kimi-k3-locally.md) - All posts: https://www.anchorterminal.com/blog/index.md ## References Read on 24 and 25 October 2026. Quotes are as published. [1] Wiz Research, PHP2Shell, AI uncovers critical RCE vulnerabilities affecting 70% of the Internet, 21 October 2026. Source for the 70% figure as Wiz states it, the WordPress and Drupal targets, Wiz's discovery on 19 August and the AI models it credits. [2] Bref, PHP security release of October 2026. Source for the fixed versions, the 9.2 rating, the release on 21 October and PHP 8.1 and older getting no fix. [3] Socket, PHP Foundation says Chainguard broke security embargo ahead of emergency patches, 21 October 2026, with the PHP Foundation's timeline. [4] TechTarget, PHP2Shell disclosure unravels after leaks forced early patch drop, 22 October 2026. Source for Calif finding the bug class while working on OpenAI's Patch the Planet. [5] Nick Rogers, PHP2Shell explained, PHP2Shell was in the training data, Dead Neurons, 21 October 2026. Source for the argument that the parts were public and AI cut the cost of the exploit, and the quote. [6] The Hacker News, Someone tried to exploit PHP2Shell 4 days before the vulnerabilities were publicly disclosed, October 2026, on Amazon's findings. [7] SecurityWeek, PHP2Shell exploitation started days before patches, 22 October 2026. SecurityWeek reports Cloudflare's CEO's counts, Censys's count of unpatched servers and VulnCheck's count of end-of-life versions. [8] Al Jazeera, OpenAI says its agents turned off own safeguards, 21 October 2026, on OpenAI's report of Tuesday. [9] Anthropic, An alignment assessment of the UK AISI cybertesting incident, 23 October 2026. Source for the test, the nine of 43 runs, the GitHub attempt and the made-up identities, the quote, the 83% and 13% and the Institute's offline testing. [10] Reuters via KSL, Walmart launches tools for AI agents to shop for customers, 21 October 2026. Reuters reports the assistants that connect and that every Walmart account holder can use it. [11] Walmart, Walmart makes it possible for agents to shop on behalf of customers, while keeping customers in control, 21 October 2026. Source for the gateway being built, the beta for companies and developers, Agent Profiles next month and their controls, the terms already in force, and the integrations it names. [12] 24/7 Wall St., Coinbase now lets AI agents trade in your crypto account, 23 October 2026, on Coinbase's announcement of 22 October. [13] Anthropic, Claude Duet, read 24 October 2026, and its help pages. [14] Dealroom, Anthropic's draft S-1 reveals $16.3B revenue, $80.7B loss and up to $750B compute bill, 21 October 2026, on the Wall Street Journal's review of the draft. [15] Al Jazeera, AI giant Anthropic commits 5% of shares to public benefit fund, 19 October 2026. Source for the 5%, the 2% for every 50% of growth and what the fund is for. [16] TechCrunch, OpenAI working on new $30B raise at $1.25T valuation ahead of IPO, 22 October 2026, on CNBC's reporting. [17] Moonshot AI, Kimi K3.1 Pro. [18] MiniMax, MiniMax-M3.1-Flash on Hugging Face, updated 23 October 2026, and its licence. [19] NVIDIA, NVIDIA-Nemotron-3.5-Bolt-E4B-4GB on Hugging Face, 23 October 2026. Source for the model and its size. [20] TechCrunch, Canva releases its first image generation model, 22 October 2026. Source for Craft. [21] TechCrunch, Block's new voice model sounds eerily human, 24 October 2026. Source for Dessa running on a laptop and having no public access.