Cisco Talos uncovers infostealer that uses AI to rank stolen identities

Cisco Talos uncovers infostealer that uses AI to rank stolen identities

Cisco Talos analyzed VOLTA-AUTODOXER, a Windows infostealer that harvests passwords, session tokens, payment data and cryptocurrency credentials, then assembles a victim dossier for a commercial language model. Its optional AI stage uses OpenRouter to rank assets by potential value, with fallback models if an initial request is refused. The model does not carry out the theft itself: it processes data already collected by the malware.

Why it matters. Automating victim triage could let criminals act on stolen credentials before tokens expire. Talos documented the malware's design, but has not established how widely, or even whether, it has been deployed in real-world attacks. The practical defense remains protecting and revoking stolen sessions and credentials, not relying on model refusals.

Meta reportedly builds a humanoid robot with China's Fourier

The Information reports that Meta and Chinese robotics company Fourier built a roughly 106-pound humanoid prototype called Max in about three months, and are developing a second version. The project is reportedly intended to help Meta explore a future home robot tied to its Muse agent. No commercial launch date has been announced.

Why it matters. A consumer AI agent operating a physical robot would move the industry's ambitions beyond screens and browsers. The partnership also raises supply-chain questions. This remains attributed reporting: Reuters covered the account but explicitly said it could not independently verify it, and a prototype is far from a shipping household product.

A biotech startup lets an AI agent guide a brain injection in a live mouse

WIRED reports that Exin Therapeutics connected an AI agent to a camera-equipped surgical rig. A veterinary surgeon performed the craniotomy; the agent then chose a candidate gene therapy from 19 options and controlled the injection apparatus. Claude Opus 5.5 reportedly declined to guide the needle, while Sonnet 5 proceeded. A coordinate-system error required separate troubleshooting before the procedure could finish.

Why it matters. This is an unusually concrete example of an agent controlling laboratory equipment, with humans approving the plan and retaining an emergency stop. It is a single company-reported experiment, not a validated clinical result: the researchers are still waiting to learn whether the treatment reduced seizures, and it provides no basis for autonomous human surgery.

Across roughly 50 companies, AI shopping agents are barely moving transactions

In fresh reporting across earnings calls and company interviews, WIRED found that executives in travel, telecom, banking, retail and services generally see little immediate disruption from shopping agents. Hilton described agent-originated bookings as insignificant; Ally Financial reported low activity, and T-Mobile said it had seen nothing material. Meta, meanwhile, says more than 10 million people in the US and Canada activated Muse, with over a quarter using it for shopping.

Why it matters. Consumer interest and merchant-side completed transactions are different measurements. Meta's usage figures and the companies' observations are not directly comparable, and neither establishes the overall size of agent commerce. The broader evidence adds context to yesterday's DoorDash-specific figures without treating one platform as the entire market.

A $50 ESP32 pendant shows both the promise and friction of DIY AI gadgets

The Verge's Sean Hollister built a pocket-size AI companion around a Waveshare ESP32-S3 device using Meta's open-source Muse Gadgets SDK and Claude-assisted firmware changes. He added spoken replies, conversation history, a remote camera shutter and virtual-pet features to a starter device that initially offered little practical functionality.

Why it matters. Cheap programmable hardware and coding agents can make bespoke interfaces surprisingly accessible. But this is a hands-on demonstration, not a new mass-market product or a local-inference breakthrough: the device still relies on Muse's cloud service, and the reporter encountered latency and rough edges.

Watch for independent confirmation of Meta's robot project; evidence of VOLTA infections in the wild; follow-up results from Exin's mouse experiment; and merchant-side data that distinguishes AI shopping interest from completed orders.