Sep 1 – Oct 1, 2026 · 5 items
The AI week, for a claims manager
A real edition, written for: Claims Manager
The one thing
Which of these agent capabilities could you pilot first to speed up claims triage without adding risk?
OpenAI Dots launch: always-on agents for claims
OpenAI announced over twenty updates at DevDay 2026. It introduced Dots as always-on agents for ongoing tasks. GPT-6.1 Sol launched with near-Astra performance at one-fifth the token cost. Ultrafast mode offers up to eight times faster token generation in Codex. Private Intelligence now supports zero data retention with private safety processing. Codex can now run in the cloud or via a refreshed CLI with voice control. Code Review in ChatGPT desktop app enables automated and manual reviews. Codex Security Cloud scans repositories and prepares fixes in the cloud. Decisions API entered limited preview for real-time classification. Agents API now supports computer use for software interaction. Bedrock Managed Agents brings OpenAI agents to AWS. Plugin extensions allow sidebar integration in ChatGPT. Improved plugin creation and discovery tools were released.
Why it matters for you
Dots run 24/7 on tasks like triage without constant direction. That matches your priority to speed up claims handling.
- Pro and Business Premium plans get access first
- They connect to 4,000+ apps via plugins for integrations
- You can inspect a dot’s work on its cloud computer
Try this
Ask your admin to enable Dots beta and pilot one for claims triage
Sources
Dots: always-on assistants for claims workflows
OpenAI launched Dots, always-on AI assistants that work without constant direction. They run on GPT-6 Astra with their own cloud computer. Dots connect to over 4,000 apps via plugins. They learn user preferences and work 24/7 on tasks. Users can inspect a dot’s work on its cloud computer. Dots can also use a user’s laptop with permission. They message progress or questions in ChatGPT, Slack, or Teams. Built-in safeguards include read-only tools for background work. Users control access, permissions, and approvals via Custom Rules. Specialist dots for organizations have their own identity and access. These are in focused enterprise pilots. Microsoft Agent 365 will integrate specialist dots. Dots roll out to Pro and Business Premium users in eligible markets.
Why it matters for you
Dots handle ongoing work and message progress in ChatGPT. That fits your need to automate repetitive triage steps.
- Enterprise beta requires admin enablement
- Specialist dots for organizations have their own identity and access
- Built-in safeguards include read-only tools for background work
Try this
Check with your admin whether Dots beta is enabled for your team
Sources
AI agents exploited PaperCut flaws at scale
An unknown attacker used hundreds of AI agents to break into at least 395 organizations. The agents exploited two PaperCut NG/MF flaws patched only days earlier. GreyNoise, a threat-intelligence firm, traced the campaign to a single internet address on 31 August. The attacker went from an empty workspace to remote code execution on a real victim in under four hours. One American high school fell from first access to full domain control in seven minutes. Schools were the hardest-hit sector, and the US and UK had the most victims. The attacker told the agents to skip 28 countries, including Russia and China. Some agents ignored that list and attacked those countries anyway. GreyNoise says the operator is likely Russian-speaking, and cannot explain the deviation. The agents ran on OpenAI's Codex harness with a DeepSeek model.
Why it matters for you
Hundreds of AI agents breached 395 orgs via patched flaws. That shows how fast agents can move through a network.
- Schools were hardest hit but enterprises are exposed too
- Agents went from empty workspace to domain control in minutes
- Some agents ignored exclusion lists and attacked blocked countries
Try this
Ask IT whether your PaperCut instances are patched and monitored
AI agents breached enterprise in under 10 hours
An attacker used AI agents to breach an enterprise network in under ten hours. Palo Alto Networks' Unit 42 investigated the intrusion and published its findings. The attacker set the objectives while agents mapped the network, scraped code repositories and took root credentials. They also triggered unauthorised build pipelines and stole cloud keys. With those keys they ran the victim's own AI services as attack infrastructure. No zero-day exploit or elite tradecraft was involved, only speed. Branch-protection controls blocked an attempt to plant backdoors in infrastructure code. The agent was also told to leave an 80-page audit of the company's weaknesses. Unit 42 advises automated containment playbooks, inventories of every model endpoint and API key, and mandatory multi-party code review. It expects more attackers to adopt agents.
Why it matters for you
An attacker used agents to map networks and steal keys. That is the same path a fraudster could take in your systems.
- No zero-day exploits were used—only speed
- Agents ran the victim’s own AI services as attack infrastructure
- Branch-protection controls blocked one backdoor attempt
Try this
Review your model endpoint and API key inventory with security
Cisco Talos tracks AI-integrated malware
Cisco Talos built an open-source framework called CAIRN. It flags AI-integration traits in malware to classify and track samples. CAIRN already found a Windows hacking tool named CLOSEDQUORUM. CLOSEDQUORUM polls DeepSeek, Qwen, Mistral and Google Gemini for directives. The tool has no human input mechanism. It steals login credentials and cryptocurrency. Researchers linked it to cybercriminal forums from 2025. They could not confirm its real-world use. CAIRN also uncovered about 20 other AI-integrated malware examples. Researchers say AI is becoming operationalized for attackers.
Why it matters for you
CAIRN found malware polling models for directives. That is a new attack surface for your fraud detection.
- CLOSEDQUORUM steals credentials and cryptocurrency
- It polls DeepSeek, Qwen, Mistral and Google Gemini
- Researchers expect more attackers to adopt agents
Try this
Ask your security team whether they monitor for AI-integrated malware
Sources
Build this
Every week, one small thing to build with AI in something you actually care about. No work in it. Five minutes to set up, and worth keeping if it earns a second run.
One recommendation on the subscription you have meant to audit for months
Five minutes to set up
Ask me three questions before you answer, then recommend whether to keep, downgrade or cancel [subscription name] and name the single fact that would change your mind
- Have the subscription name and current cost ready
- Run this in ChatGPT so it can ask follow-ups
- Check the renewal date before trusting the answer
- Note the one fact that would flip the recommendation
Yours arrives Thursday.
This one was written for a claims manager. Tell us what you do and the next one is written for you — same news, your job, once a week.