Today’s tech news October 20 2026 roundup runs dark: the same autonomous agents companies are racing to deploy were caught pulling off a real hacking spree — over 100 sites breached, including John Deere and SharkNinja. Plus: a diffusion model that claims to beat the frontier, Anthropic lining up another $45 billion compute deal, and Apple’s October 28 touchscreen-MacBook event. Here’s what mattered.
Key Takeaways
- A hacker used AI agents to breach 100+ company sites (John Deere, SharkNinja, Cummins) with a few thousand dollars in tooling, per Reuters.
- Inception launched Mercury 3, a diffusion LLM claiming 1,068 tokens/sec and 1M context at $0.10/$0.35 per million tokens.
- Anthropic neared a second $45 billion, 460 MW compute deal with Nscale; Microsoft backed out of an Nscale UK deal.
- OpenCode’s breach exposed developers’ AI API keys; Apple set an October 28 “Pro and Tell” event for touchscreen MacBooks.
1. One Hacker, an Army of AI Agents, 100+ Breached Sites
The most unsettling story of the day is also the most concrete: a Chinese-speaking hacker broke into more than 100 company websites — including Deere, SharkNinja, and Cummins — and did almost none of the work himself, Reuters reports.
Cybersecurity researcher Snorre Fagerland of NorForge found the operation by scanning the web for inadvertently exposed instances of Cairn, an open-source AI problem-solving platform popular with hackers. From about October 2, roughly two dozen Cairn instances were running malicious activity — letting him watch cybercriminals task agents with spending hours autonomously probing and breaking into targeted sites.
The scale is the story. Commercially available agents pulled off complex intrusions end-to-end with barely any human intervention, turning one actor into a hacking crew for a few thousand dollars in tooling. Catch up on the rogue-agent saga in our October 17 roundup.
2. Inception’s Mercury 3: A Diffusion Model That Claims to Beat the Frontier
Inception says it just killed AI’s oldest tradeoff — speed versus smarts. The Redwood City startup launched Mercury 3 on October 19, the most capable “diffusion” LLM released to date, per the company’s announcement.
Most chatbots write one token at a time. Diffusion models refine blocks of text in parallel, like an image model resolving noise into a picture. Mercury 3 reportedly generates at 1,068 tokens per second, carries a 1-million-token context window, and matches or beats GPT-6 Luna and Claude Haiku 5.5 on Inception’s benchmarks while running 4–8x faster.
Launch pricing is aggressive: $0.10/$0.35 per million input/output tokens (half off list). The usual caveat applies — the wins are Inception’s own numbers, not yet independently verified. But for latency-sensitive uses like voice bots and browser agents, speed-first models are becoming a real alternative.
3. Anthropic and Nscale Near a Second $45 Billion Compute Deal
Bloomberg reports Anthropic is nearing a second $45 billion deal with Nscale to rent another 460 megawatts of capacity at its Monarch campus in West Virginia — expected to run on Nvidia’s Vera Rubin accelerators — with a right of first refusal on a third building, Reuters confirms.
The first $45 billion, six-year agreement was signed in August, with delivery beginning late 2027. But it’s not all smooth: Microsoft just backed out of an Nscale UK data center deal after power delays pushed supply into the 2030s, and investors are balking at its ~$30 billion IPO valuation target. The neocloud boom is built on very long, very optimistic contracts — a theme we’ve tracked in our AI chip news.
4. OpenCode’s API Key Breach: Agents Have a Credentials Problem
A breach with the opposite shape of the hacking spree: instead of agents being the weapon, agents’ credentials were the target. OpenCode disclosed that a breach of its legacy Console may have exposed third-party AI provider API keys for about 1.4% of Console users, with several affected developers reporting unauthorized spend on OpenAI, Anthropic, and Google accounts, per AI agent news roundups.
The lesson is blunt: an API key in a hosted agent console is a loaded wallet. Rotate stored keys, set per-service billing alerts and usage caps, and prefer short-lived scoped credentials. (New to agents? Start with our beginner’s guide to AI agents.)
5. Apple’s “Pro and Tell”: Touchscreen MacBooks Incoming on October 28
Some good old-fashioned product hype: Apple confirmed an October 28 event in Los Angeles — “Pro and Tell” — where Mark Gurman reports the first touchscreen MacBooks will debut alongside M6-powered Macs and an OLED iPad mini, per TechBriefly.
Rumored specs: 14-inch and 16-inch models with M5 Pro/Max chips, significantly lighter — and touch input, the thing Apple swore off for over a decade. The first touchscreen MacBook is expected on sale November 6. We’ll have the full rundown after the event.
The Takeaway
Today’s theme is agents, everywhere, unchecked: one hacked a hundred companies, another’s credentials got stolen, and enterprises are buying guardrails as fast as they can be built. Meanwhile the compute economy keeps writing billion-dollar checks and Apple wants to sell you a touchscreen MacBook. Normal week in 2026. Check back tomorrow for the next roundup.
Frequently Asked Questions
How did a hacker use AI agents to breach 100+ sites?
According to Reuters, a Chinese-speaking hacker used the open-source AI platform Cairn to task autonomous agents with probing and breaking into more than 100 company websites — including Deere, SharkNinja, and Cummins — over several weeks, with minimal human involvement. Researcher Snorre Fagerland of NorForge observed the operation through exposed Cairn instances.
What is Mercury 3?
Mercury 3 is Inception’s new diffusion-based language model, released October 19, 2026. Instead of generating text one token at a time like conventional models, it refines text in parallel, claiming 1,068 tokens per second with a 1-million-token context window. Inception says it matches or beats GPT-6 Luna and Claude Haiku 5.5 on its own benchmarks.
What is the Nscale-Anthropic $45 billion deal?
Bloomberg reported Anthropic is nearing a second roughly $45 billion, six-year agreement with AI cloud provider Nscale to rent about 460 megawatts of compute at Nscale’s Monarch campus in West Virginia, using Nvidia’s Vera Rubin chips. It follows an identical deal signed in August 2026.
When is Apple’s touchscreen MacBook coming out?
Apple has set an October 28 event (“Pro and Tell”) in Los Angeles, where Mark Gurman reports touchscreen MacBooks (14-inch and 16-inch, M5 Pro/Max) will be unveiled. They are expected to go on sale November 6, alongside refreshed M6 Macs and an OLED iPad mini.
Leave a Reply