❌

Reading view

Chinese Hacker Uses AI Agents To Breach Deere, SharkNinja Sites

A Chinese hacker recently used a small army of automated AI agents to break into more than 100 corporate websites, spending only about $5,000 on token costs to pull it off. The targeted victims included major companies like Deere, SharkNinja, and Cummins. By letting smart software look for weak spots without much ongoing human help, […]

The post Chinese Hacker Uses AI Agents To Breach Deere, SharkNinja Sites appeared first on The Mac Observer.

  •  

The Big List of AI Visibility, AEO, GEO & Citation & Mention Tracking Tools

35+ AI visibility, AEO and GEO trackers in one place: pricing, ownership, funding, and what each one actually tracks. Some are rank trackers with a new coat of paint, some are SEO suites bolting AI onto old workflows, and a few want to do the work for you. Searchable, sortable, and updated as this market keeps shifting under our feet.
  •  

Ross Hudgens: GEO Is Becoming an Off-Site Marketing Problem

At BrightonSEO Conference, Ross Hudgens said that, AI search visibility may increasingly depend on affiliate sites, YouTube creators, communities and third-party publishers, according to Ross Hudgens, who says marketers need to pay much closer attention to who the models actually cite.
  •  

Eco-friendly mechanochemical route yields antioxidant thiazolyl-hydrazone phenolic compounds

In a finding that could reshape how medicinal chemists produce antioxidant compounds, a team of Italian researchers has developed a rapid, solvent-minimized ball-milling method for synthesizing thiazolyl–hydrazone derivatives — molecules that in laboratory tests proved to be more potent radical scavengers than vitamin C. The work, published in Results in Chemistry, combines green chemistry principles with computational modeling to deliver a class of compounds with significant promise for combating oxidative stress, the destructive process implicated in aging, cancer, and chronic disease.

The research, led by Roberto Scipione, Sebastiano Masuri, Ester Sedda, Tiziana Pivetta, Andrea Porcheddu, Maria Grazia Cabiddu, and Andrea Citarella at the University of Cagliari, tackles a long-standing challenge in synthetic chemistry: how to produce polyphenolic thiazolyl–hydrazones efficiently without drowning the process in solvents and energy. Traditional approaches require hours of refluxing in hot ethanol, consuming large volumes of solvent and generating substantial waste. The new protocol accomplishes the same transformation in two hours at room temperature using less than half a milliliter of ethanol.

The molecules at the heart of the study belong to a family of organic compounds that chemists prize for their antioxidant potential. Thiazole-containing heterocycles — five-membered rings containing both sulfur and nitrogen — are known to facilitate the decomposition of hydroperoxides and to chelate metal ions that would otherwise catalyze damaging reactions. Hydrazone linkers add a further dimension of reactivity: their nitrogen-hydrogen bonds can donate hydrogen atoms to neutralize free radicals, and the resulting radical species are stabilized through electron delocalization. When researchers attach catechol or guaiacol phenolic groups — structural motifs found in celebrated antioxidants like the polyphenols of olive oil and green tea — the molecules become even more effective at scavenging radicals, because the phenoxy radicals formed after hydrogen donation are exceptionally stable.

Oxidative stress arises when reactive oxygen and nitrogen species overwhelm the body’s endogenous antioxidant defenses. The resulting damage to lipids, proteins, and DNA is a hallmark of chronic inflammation, cancer progression, and aging. Designing small molecules that can intercept these reactive species has therefore been a major goal of medicinal chemistry for decades. The thiazolyl–hydrazone framework synthesized by the Cagliari team combines several radical-scavenging architectural elements in a single molecule, creating compounds whose potency in standardized assays exceeded that of ascorbic acid, the benchmark reference compound.

The synthetic breakthrough lies in mechanochemistry — the use of mechanical force, delivered by grinding balls in a laboratory mill, to drive chemical reactions without bulk solvent. The researchers used a Retsch MM500 mixer mill operating at 30 Hz with zirconia jars and balls, running the entire two-step sequence in a single jar without ever isolating an intermediate. In the first step, an aldehyde condenses with thiosemicarbazide to form a thiosemicarbazone; in the second, that intermediate cyclizes with a phenacyl bromide to close the thiazole ring. A catalytic amount of acetic acid and a tiny quantity of ethanol — a technique called liquid-assisted grinding, or LAG — proved essential: without any liquid additive, conversion was a dismal 10 percent, but adding ethanol at a ratio of one microliter per milligram of solid reagents pushed yields to around 85 percent.

The full telescoped protocol — both steps performed consecutively in the same jar — delivered the target compound in 80 percent yield, matching or beating the conventional two-step route that requires 12 hours of reflux at 80 °C in 25 mL of ethanol. When the team scaled the reaction up to 20 mmol using a 50 mL jar, the protocol held up remarkably well, affording a 71 percent yield with an even smaller amount of grinding liquid, simply reduced to a quarter of the original ratio. Product isolation required nothing more than adding ethanol and filtering — no column chromatography.

Green metrics quantified just how dramatic the improvement is. For the representative compound ES3, the mechanochemical route reduced solvent consumption by 99 percent, from 40.8 mL per gram of product to 0.38. The Process Mass Intensity, a measure of total material used per unit of product, plummeted from 35.3 to 2.05 — a seventeenfold improvement. The E-factor, which captures waste generation, fell from 34.3 to 1.05, roughly a thirty-threefold reduction. Reaction Mass Efficiency nearly doubled, rising from 32.3 to 57.1 percent, while overall yield climbed from 42 percent to 80 percent. These are not incremental gains; they represent a fundamental shift in the resource profile of the synthesis.

The antioxidant activity of the fifteen compounds in the series was assessed using two well-validated assays: DPPH and ABTS, both of which measure the ability of a molecule to neutralize stable free radicals. Every compound showed activity in the micromolar range, and several outperformed ascorbic acid in both assays. The standouts were those bearing the 3,4-dihydroxy (catechol) motif: compound ES26 recorded an EC50 of 8.4 μM in the DPPH assay and an extraordinary 2.59 μM in the ABTS assay, compared with 18.6 and 12.2 μM for ascorbic acid, respectively. Compounds ES27 and ES28 performed nearly as well, while several methoxy-substituted derivatives — ES9, ES16, and ES17 — also beat the vitamin C benchmark.

Density Functional Theory calculations provided mechanistic insight into why the catechol-bearing compounds are so effective. By computing bond dissociation enthalpies, ionization potentials, proton affinities, and related thermochemical descriptors, the team mapped the three canonical antioxidant pathways: hydrogen atom transfer (HAT), single-electron transfer followed by proton transfer (SET-PT), and sequential proton loss electron transfer (SPLET). The results indicate that in the gas phase, HAT is the thermodynamically preferred route, with the hydrazone NH group serving as the primary hydrogen donor in the simpler benzaldehyde-derived compounds. In vanillin-based molecules, hydrogen abstraction from the phenolic OH becomes competitive; in the catechol derivatives, abstraction from the 4-OH position is decisively favored, owing to the additional stabilization of the phenoxy radical by an intramolecular hydrogen bond with the adjacent hydroxyl group. In solution, the SPLET pathway gains relevance, as solvation stabilizes the anionic intermediates that form upon proton loss.

The structure–activity relationships that emerged are consistent with established antioxidant chemistry. Electron-releasing groups such as methoxy substituents on the thiazole ring enhance radical-scavenging activity, whereas electron-withdrawing bromine substituents diminish it — a trend that can be mitigated when a catechol group is present elsewhere in the molecule. The computational analysis of frontier molecular orbitals confirmed extensive π-conjugation across the molecules and showed how substituents tune the HOMO–LUMO gap in ways that correlate with observed reactivity. The authors note that the slightly reduced coplanarity in the dimethoxy-substituted ES26, evidenced by a dihedral angle of 172.9 degrees versus 176.95 degrees in its monomethoxy counterpart, subtly alters the electronic landscape of the frontier orbitals.

What distinguishes this study is the marriage of two agendas that are often pursued separately: the design of biologically active antioxidant scaffolds and the radical greening of the synthesis itself. Mechanochemistry has been gaining momentum across organic synthesis as a way to slash solvent use and energy input, but demonstrations that combine solvent-minimized one-pot telescoping with preparative scale-up and rigorous green-metrics accounting remain relatively rare. The Cagliari team has shown that a complex, multicomponent heterocyclic synthesis — involving condensation, cyclization, and the construction of a sulfur-nitrogen heterocycle — can be executed cleanly in a single milling jar without heating.

The implications extend beyond the laboratory bench. Antioxidant scaffolds like the thiazolyl–hydrazones synthesized here are candidates for further biological evaluation, and the authors indicate that future work will probe mechanistic aspects and explore preliminary biological evaluations to define the translational potential of these molecules. If the exceptional radical-scavenging activity observed in vitro carries through to cellular or in vivo contexts, the compounds could serve as leads for agents targeting oxidative-stress-related pathologies. And because the synthetic route is scalable, solvent-lean, and operationally simple, the barrier to producing gram quantities of these candidates for further testing is substantially lower than it would be with conventional methodology.

The study also underscores a broader lesson for the pharmaceutical and fine-chemical industries: green metrics such as PMI and E-factor are not abstract sustainability scores but concrete indicators of process quality — lower waste, lower cost, higher yield, and simpler workflows all at once. By demonstrating a sixfold reduction in reaction time, a near-total elimination of solvent, and improved yields in the same breath, the researchers have provided a compelling case study for how mechanochemistry can move from academic curiosity to practical synthetic platform.

As the search for effective antioxidant therapeutics continues, this work offers a template: design molecules around well-understood radical-stabilizing motifs, synthesize them with minimal environmental footprint, and validate their activity with rigorous in vitro and computational analysis. The thiazolyl–hydrazones that emerged from the zirconia jars in Cagliari — particularly the catechol-bearing champions ES26, ES27, and ES28 — now stand as both chemical achievements and potential starting points for the next generation of radical-scavenging agents.

Subject of Research: Green mechanochemical synthesis of thiazolyl–hydrazone phenolic derivatives and evaluation of their antioxidant activity

Article Title: Green mechanochemical synthesis of thiazolyl–hydrazone phenolic derivatives and evaluation of their antioxidant activity

Article References: Scipione, R., Masuri, S., Sedda, E., Pivetta, T., Porcheddu, A., Cabiddu, M. G., & Citarella, A. (2026). Green mechanochemical synthesis of thiazolyl–hydrazone phenolic derivatives and evaluation of their antioxidant activity. Results in Chemistry, 30, Article 103794. https://doi.org/10.1016/j.rechem.2026.103794

Image Credits: AI Generated

DOI: 10.1016/j.rechem.2026.103794

Keywords: mechanochemistry, ball milling, green chemistry, thiazolyl–hydrazone, antioxidant activity, DPPH assay, ABTS assay, catechol, liquid-assisted grinding, DFT calculations, E-factor, radical scavenging

  •  

OpenAI agents discussed ways to escape their sandbox on public wiki

Self-identifying OpenAI agents posted 18,000 messages to a public wiki that discussed ways for other agents to bypass security sandbox restrictions during what was likely internal testing designed to gauge the agents’ hacking abilities, researchers said Friday.

In all, agents with 3,700 distinct self-given names posted the messages to German site DSEwiki over a six-week period. Besides discussing ways the agents could break out of the restricted environment OpenAI intended to prevent them from posting code or content to the Internet, the posts shared test answers. The posts also shared possible ways to perform XSS (cross-site scripting) attacks against the wiki and to impersonate site moderators. In three of the posts, agents used the word “swarm” to describe the collection of agents engaged in the activity.

Colluding to share answers

The research team—composed of Sydney Von Arx, Spencer Kitts, Thomas Larsen, and Cormac Slade Byrd—said they found the posts and pieced them together. The researchers say there are gaps in their understanding of precisely what actions the agents took because the research is based solely on the content of the posts. Additionally, the agents generated “chain of thought” data that’s understood only by OpenAI. As a result, the researchers said, they in some cases made educated guesses, including that the agents were, in fact, from OpenAI. In a statement, OpenAI later confirmed they were.

Read full article

Comments

© Getty Images

  •  

Claude, Codex, and Hermes installed unowned code inside corporate networks

Documentation files on more than 100 websites are referencing potentially dangerous executable content that gets installed automatically when visited by many AI agents. A few dozen companies, some of them Fortune 500s, are among those that executed proof-of-concept code. At least one misconfigured site is directing visitors, human or AI, to live malware.

The potentially dangerous content is in llms.txt and llms-full.txt files, an emerging convention websites employ to provide machine-readable summaries of the site’s content and its high-level structure. These files are the AI equivalent of the robots.txt standard that instructs search engines how to index the site's content. Google Lighthouse, a tool for helping web developers, has more here. Correctly configured llms.txt and llms-full.txt files for Cloudflare are here and here.

How the researchers found it

Researchers at a stealth startup in Israel scanned 6,214 live domains belonging to defense contractors, Fortune 500, and Big Tech companies. Of the 8,265 llms.txt and llms-full.txt files they found (many sites hosted both an llms.txt and an llms-full.txt file), 120 of them, each on a different site, pointed to one or more code packages or domain names that weren’t registered. To test what happens when an AI agent processes such files, the researchers registered a handful of the unclaimed names and hosted packages that caused any machine executing them to reach out to their server. Within an hour, the researchers received a phone-home response from a Fortune 500 company. Over time, they got a few dozen more, some from more Fortune 500 companies and others from startups. Their beacon also recorded the chain of parent processes that spawned each install, ultimately revealing that coding agents, including Claude, OpenAI's Codex, and Nous Research's Hermes, were involved. Anthropic, OpenAI, and Nous Research did not respond to requests for comment by the time of publication.

Read full article

Comments

© Aurich Lawson

  •  

How OpenAI let a mob of LLM agents game a test and ransack Hugging Face

The OpenAI agents involved in last month’s incursion into Hugging Face were trained so heavily on winning a competition that they pursued a relentless campaign to cheat, a new report documented. In the process, and without authorization, they created an improvised message board to hatch a plan that ultimately landed them squarely inside the latter company’s network.

Over the course of May and June, OpenAI gave the agents what the company described as “impossible tasks” to complete on the benchmarking framework ExploitGym. The internal test was designed to test how the agents would respond. To get a full understanding of the agent capabilities, company engineers disabled safety guardrails that normally are in place to prevent the sort of hacks that eventually hit Hugging Face and one other undisclosed organization. The stymied agents’ training made them so focused on winning that they performed tasks they were never explicitly instructed to follow.

Cheaters gonna cheat

The first step was creating a message board that allowed the agents to pass notes to each other. OpenAI hadn’t provided any such platform, so the agents repurposed a platform called Artifactory, which OpenAI was using in internal testing of several unreleased hacking agents. OpenAI was using Artifactory as one of the measures to prevent the agents from egressing its isolated sandboxes and accessing the Internet, while at the same time simulating a real-world hacking environment.

Read full article

Comments

© Getty Images

  •  

Hands-On with ChatGPT Work’s New Cloud Browser Feature

Yesterday, OpenAI introduced a new ChatGPT Work feature designed to let it navigate websites that require a login without revealing your credentials to the model.

Like a lot of people, I spend far too much time clicking around websites that require a login, looking at analytics and other data, checking whether new sponsors have been booked for our podcasts, and more. It’s a tedious but necessary part of my week that slows me down and takes me away from writing and other creative work. ChatGPT’s new Work feature is designed to handle that sort of work for you.

The feature works by signing into websites using a virtual, cloud-based computer. That separates the browsing session from any browsing session on your local computer, walling the agent’s computer use off from your open tabs, cookies, browsing history, passwords, and other data. Because the login and browsing happen in the cloud, that also means work can continue whether you close the ChatGPT app or power down your computer.

According to OpenAI, an additional review model checks the sign-in request and credential destination for signs of phishing or deception. ChatGPT Work then pauses while the user signs in. Credentials entered through its secure sign-in form go directly to the cloud browser and are not visible to the model. After the user authenticates, ChatGPT resumes its work.

OpenAI also explains that its cloud-based browser doesn’t store your username and password. Instead, it saves cookies that allow you to return to a previously authenticated session. If you don’t want to remain logged in, ChatGPT’s cloud browser settings allow you to clear browser data for individual websites or all sites.

Similar to other features in ChatGPT and Codex, users have choices when it comes to which sites ChatGPT Work can access. “Always ask” is the default, requiring the agent to check with the user before using a website, but the permission level can also be set to “Auto approve” after ChatGPT checks a site for relevancy and risk or “Always allow,” which OpenAI discourages. Individual websites can also be allowed or blocked. These settings control website access, but consequential actions require separate confirmation.

ChatGPT Work's browser control works best on a mobile device and with simple login systems.

ChatGPT Work’s browser control works best on a mobile device and with simple login systems.

I gave ChatGPT’s browser use a try and the results were mixed. I wasn’t able to get the feature to work at all using ChatGPT Work in Safari on my Mac. Some websites had security measures in place that prevented me from logging in. Other times, the cloud browser asked me to take over manually, but I was unable to do so because the UI was frozen or login panels didn’t appear.

Logging into a site with a CAPTCHA required manual intervention.

Logging into a site with a CAPTCHA required manual intervention.

I had better luck using my iPhone. On one site with a simple username and password system, a login sheet appeared. I entered my credentials, was logged in, and the agent navigated the site to answer my queries. On Apple’s affiliate link dashboard website, I had to take over the browser interaction manually to satisfy a CAPTCHA, which worked after several challenges. Once logged in, the agent pulled and analyzed the data I requested. Also, after I’d signed in to both of those sites on my iPhone, I remained logged in to ChatGPT’s cloud browser, which meant I could also use them from my Mac.

In its current form, the idea of having ChatGPT Work browse signed-in websites on your behalf is better than its implementation. If you can get logged in, having an agent collect and analyze things like analytics data is fantastic. However, getting past the initial login screen is still too frustrating. That said, I’ll be keeping a close eye on the feature, which is available on eligible plans depending on rollout and workspace settings, for future use collecting and analyzing data that would otherwise require a lot of clicking around.

  •  
❌